My suggestion is not to trust Webalizer. It seems buggy. I'm not sure HSpehere is completely accurate, but if you really want to be sure, I suggest turning on the Transfer Logs (which are actually the IIS log files), download the logs on a daily basis, and run another analyzer program on your PC. This will give you an accurate reflection of the traffic, and should match more or less HSphere (rather than Webalizer).