Yes, fortunately the PAN automatically conducted a PCAP on the unknown-tcp packets, those have been exported and submitted to tech support as well. One interesting thing is that the byte size of the packets that were allowed were consistantly 374 bytes, the traffic that was denied and identified as "unknown-tcp" is above 374 bytes, sometimes 10.8K, most of the time 15.3K. I dont know if that contributes to the problem or not. As I mentioned below our HL7 Server Admin stated: HL7, most if not about all, messages begin with the “MSH” segment, Message Header. These files, the HGS Meditech Lab Charge files, are in an HL7 batch. The first segment is “FHS” – File Header, the BHS – Batch, then MSH and all the data. So it is a “Batched” HL7 file, first time in 20+ years of doing this that I run across a charge file like this
... View more