Use non-header-including byte size field for tcp connections

[lisaSW]

Closes #725

• updated incoming/outgoing bytes for tcp connections to use the orig_bytes/resp_bytes fields, which do not include header size. Non-tcp connections will use orig_ip_bytes/resp_ip_bytes, which include the header size.
• field usage is now consistent