report from Carsten Langer:
I think the real question with this is what level of support we provide to "dumping" packets in Bro? Right now it's not something we consider much or put much effort into validating that it works correctly. I'm going to remove the milestone from this because it's possible that we address the issue later either by having timemachine actually dump the packets or from further work on protocol analysis through the upcoming binpac++ integration.
This is related to but that includes some more information so I'm going to close this one.