Weird. I traced an event dealing me 25 damage. No clientCmd, no GUI, nothing.
That's because ::setDamageFlash is a engine system networked directly through the object ghosting (?) system. The PlayGUI object directly renders the data associated with the object it's controlling (or orbiting, if it's a camera).