> Are they both being sent in TCP, or a cross between UDP and TCP?  UDP
> packets can overtake the TCP stream.
>
Nice call, turning off UDP on the observer now gives him the proper
whydead with short packets on.  Now to figure out a fix :). Thanks!
Bill