unsuccessful attempts for TCP connect are not processed

This is open for discussion.

For traffic analysis it is very useful to see unsuccesfull TCP connection attempts, it is important for practical diagnostics. I think it would be valuable to consider TCP connection attempts in a way which would allow to present them in DNS traffic (i.e. as a query without response).