able to handle fragged packets. correctly detects end of tcp session. tracks req/resp pairs much better