histogram and report capture byte sums now agree

previously histograms used ip_datalen as the size of a packet, but the report
used the pcap caplen which includes link layer headers.  Now link layer headers
never contribute to capture size and everything's consistent.