[hnta142356]

initial TCP connection. obviously they wouldn't log every TCP packet in an established connection.

[Red_Leaves_Flyy]

They could though. Data storage is cheap and consumers can't generate enough fluff to cause an overflow. They probably don't for 95% of internet traffic. It's the outliers that get the most scrutiny.