#724: Changing semantics of ConnSizeAnalyzer

Actually IIRC, NetFlow counts IP-payload (i.e., including tcp/udp headers but not IP headers).