Guessing how the kernel implementation works under NT I'd suspect the kernel
services are providing call back functions and netbios forgot to supply
one for out of bounds data.
That also explains why telnet to NT boxes sort of always works (telnet uses
OOB data sometimes)