Description of 'tmsh show virtual' output

I think if its the same as CPU, the time its measured over by default is 3 Hours. Someone may correct me.

I don't know if you've got the infrastructure, but may be worth logging via SNMP Pollers to a suite such as Solarwinds, to get a view over a longer period of time.

Depending on what your business does, you might find you have peaks/troughs in terms of connections that you won't get a view of without.