I'd imagine in this case it's just uncounted usage from OS networking stack