Hi Sven, > I also repeated playback several times with different speeds, the result > is reproducible. I ran Bro on your pcap and replayed it into my test environment. I could not reproduce the receiver/originator issue you described. Best regards, Jan