I have submitted https://github.com/the-tcpdump-group/tcpdump/pull/1397 for this.

I have not. I'm still getting familiar with the process. Should I submit there first and if so, would the new version of tcpdump just be picked up by FreeBSD with no need for this review?

We are still working out some kinks on our end end to ensure this does not happen again. Once that is all resolved, I will resubmit under a new differential that has all the appropriate changes.

Just to clarify, after doing more digging, I found out that Klara was just the last ones to touch this patch. However, they were not the first ones to add the patch. That was done by NetApp back in 2011. Definitely a stale patch that I should have retested before being posted here.

After removing the patch, all of our testing passed. I also did a manual check of the various code paths for the different protocols but I didn't see any that could cause an issue here. As a result, I'm abandoning the issue. Thanks for the help!

This patch was added to our code back in 2022 by one of the Klara folks. I'll remove it and try to reproduce on our latest builds to see if I can come up with reproduction steps and/or a kernel core.