Some protocols, in particular SSH and telnet, may send a decent amount of data before the connection status is known.