Smells like the NAS and OneDrive are using nonstandard, and at least partially noncompliant TCP stacks.  Did the ack stream carry ECE flags?

But yes, that is exactly the sort of abuse that the BLUE portion of COBALT is meant to cope with.

- Jonathan Morton