When a stream:error arrives via S2S, Openfire does not handle this explicitly. The default handler kicks in (which does the correct thing: close the stream). Instead, Openfire should explicitly handle stream errors (and not report them as "unexpected packets" in logfiles).