Looks like the trigger is receiving > Application Data, Application Data, Encrypted Alert in the same TLSv1.2 packet. The client doesn't sent an ACK for this. Then api.opensuse.org complains about "TCP ACKed unseen segment".