@attrc Ah, wait. I was misreading tcpdump output. Each end of the connection is getting a spoofed RST w/ IP address of other side. Bastards.