Wanting to be right doesn't make it so. That kind of thinking is fine for Morbius but not here... and I know I'm not in Morbius.

What you say makes perfect sense and I hope I'm wrong and you are right.
But this assumes that Conitec did it that way and as we both know, networking is NOT their strong suit and so I always lean towards the "incorrect" way of doing things and not the "correct" way.

I think I'll post this question in Ask Conitec. On the other hand, if you have the time, a simple test program could also verify if the network packet is copied at the time of receipt as I suggest or at the time of event execution as you suggest.

Actually, the test is the only way to prove this since Conitec has proven all to often that they really don't know what is going on with their network engine sometimes (or it may be at the DirectX level and thus TRULY mysterious!).