Test that we only sniff 512 bytes