I believe this is one of the main techniques of the Great Firewall -- once it detects a connection is disfavored, inject a few spoofed packets to break the connection. It's cheaper than being a full participant in the stream.