Query: Top 10 Source Destination Pairs by Packets

select
  src_addr as "Source IP",
  dst_addr as "Destination IP",
  coalesce(sum(packets), 0) as "Total Packets",
  coalesce(sum(bytes), 0) as "Total Bytes",
  count(*) as "Records",
  max(start_time) as "Last Seen"
from
  aws_vpc_flow_log
where
  src_addr is not null
  and dst_addr is not null
group by
  src_addr, dst_addr
order by
  "Total Packets" desc
limit 10;