diff --git a/lua/zapret-obfs.lua b/lua/zapret-obfs.lua
index 89f9abe..1b4d838 100644
--- a/lua/zapret-obfs.lua
+++ b/lua/zapret-obfs.lua
@@ -121,7 +121,7 @@ function ippxor(ctx, desync)
 
 	local bdxor = need_dxor(desync.dis)
 	if bdxor then
-		DLOG("ippxor: dataxor out")
+		DLOG("ippxor: dataxor size="..#desync.dis.payload)
 		dxor(desync.dis)
 	end
 
@@ -143,12 +143,13 @@ function ippxor(ctx, desync)
 			DLOG_ERR("ippxor: could not rebuild packet")
 			return
 		end
-		if not bdxor and need_dxor(dis) then
-			DLOG("ippxor: dataxor in")
-			dxor(dis)
-		end
 		desync.dis = dis
 	end
 
+	if not bdxor and need_dxor(desync.dis) then
+		DLOG("ippxor: dataxor size="..#desync.dis.payload)
+		dxor(desync.dis)
+	end
+
 	return VERDICT_MODIFY + VERDICT_PRESERVE_NEXT
 end