unsuccessful attempts for TCP connect are not processed
This is open for discussion.
For traffic analysis it is very useful to see unsuccesfull TCP connection attempts, it is important for practical diagnostics. I think it would be valuable to consider TCP connection attempts in a way which would allow to present them in DNS traffic (i.e. as a query without response).
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information