The 325k number reflects those travelers entering from one of the 7 countries covered by the temporary ban on the day that the EO was issued; the as of date.  They got that data from the flight manifests.  The 109 number reflects those person(s) whose visa data was inadequate/insufficient/questionable.  So say your visa expired on a Monday, but you were traveling on Tues. the next day.  Your visa is expired and would come up on the TSA/State scrub list.  If that particular person had requested an extension (prior to travel, e.g. a student going home then coming back to resume classes, which would automatically trigger a "hold" during the duration of their absence from US soil, and they were awaiting a response from USG) and approval was pending then they could be delayed, vetted, then released through Customs/Immigration checkpoint at port of entry.  ON THE FIRST DAY there were 109 events, out of 325k that were on flights or going to be on flights to enter US.