+##! Requires that :bro:id:`use_conn_size_analyzer` is set to T! The heuristic
+##! is not attempted if the connection size analyzer isn't enabled.
I looks like the code doesn't check yet, whether use_conn_size_analyzer is indeed on (or better, it should probably check
c$resp?$num_ip_bytes, since num_ip_bytes is optional.
cu
Gregor