Monitored node is reporting traffic but its adding together the receive and transmit from another node

Has anyone run across the problem where a node thats being monitored is showing traffic only on the recieve and its taking the recieve and transmit from another monitored node to provide that output? In my environment these are a primary circuit and a backup circuit routed through a palo alto 220. the primary node could be showing RECV 12 and XMIT 12 and on the seperate node which is our backup circuit would be RECV 24. its constantly like this and we cant find the culprit.