Follow the traffic.
Find the context.
Separate physical network totals, LAN and public external TCP/UDP traffic, and completed IIS request evidence. Understand each view on its own terms.
Origin visibility matters: requests served entirely from a CDN cache do not reach IIS. Connections are not unique visitors.
Explore traffic visibility

