Reply to comment:

Greg A. Woods
An interesting analysis for sure, but I'm rather surprised that nobody had spotted that little 2-byte packet in a direct packet analysis of the TCP responses from NSD that could or should have been done during testing. It will be most interesting to learn how and why this wasn't spotted earlier.