Well as it turns out, it seems to be just the first byte after startup. Now this I can deal with using a flag or 2.

See, not looking past the first packet is the kind of things I do when it's too leate and I should be sleeping.