Hi Bokad,
Looking at the screenshot, this looks like an HTTP application. I have seen scenarios where the read-ahead mechanism employed by the RiOS application streamlining module for HTTP is aggressive and can pull much more data than was was requested off the server and over the WAN. If the HTTP client never explicitly asks for the data that was predictively prefetched, it's counted against the WAN totals, but never registered on the LAN total. I have seen this scenario with some applications when you have newly installed Steelheads and are performing alot of cold operations.
Although you sometimes incur the increased WAN traffic for some of these traffic flows, there are really two positives that come from this:
1. Improved response times during the operations involved in this read-ahead traffic
2. The datastore gets pre-warmed with data form the server so future requests for the data get warm hits
At the end of the day, the result should be improved response time for the application in question. That is the fantastic benefit you get from the aggressive nature of the predictive, read-ahead nature of the application streamlining module.
Bob