Apparently attachments are silently removed from posts. Here they are the pcap files referenced in my last email: http://www.known.net/tmp/good.pcap http://www.known.net/tmp/bad.pcap