I believe I figured out why I do not see the log messages now. Since the traffic is going both ways with state it only logs the initial connection. I changed to log (all) and I see the traffic as expected now.
systat is a neat tool. I had not seen this before. Thanks for sharing!
Anyway I believe my initial problem has been resolved. Thanks all for your help/input. Very much appreciated.