#724: Changing semantics of ConnSizeAnalyzer

Development
#1

Actually IIRC, NetFlow counts IP-payload (i.e., including tcp/udp headers but not IP headers).

#2