Feel free to ask for clarification.
So the official counter is on the sever side? Well that’s a good thing.
I was thinking perhaps, netstat is reading traffic between the server and web shield and web shield and your browser. You could try a secure (https) site, there will only be traffic between your browser and the server.
If you do find another cause, please post it here. It may help others.
Welcome to the forums.