When server / proxy receives data, it analyses first 5 bytes to see, if they are the protocol header.
But if data is received in two TCP fragments and the first one 4 bytes long, server does not wait to receive full header, but decides that it received data without header and stores "ZBXD" in the database.