When I pass an esp (ip proto 50) packet to windows with 134 bytes (eth header + 120 byte lookahead) in the first buffer and further bytes in an additional buffer, it seems that windows never receives it, or at least doesn't respond to it. If the packet is less than the 120 byte lookahead then it seems to work just fine.
The exact same code path is used in a lot of other cases (big tcp packets etc) so I'm wondering if there is an additional rule for esp and multiple chained buffers in a packet. I can't find any such thing documented though.
Does anyone have any ideas?