<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:13px"><div id="yui_3_16_0_ym19_1_1491145764414_13420">Hey all,</div><div id="yui_3_16_0_ym19_1_1491145764414_13421"><br></div><div id="yui_3_16_0_ym19_1_1491145764414_13422">I am running suricata on ubuntu vm, with an simple lua rule.</div><div id="yui_3_16_0_ym19_1_1491145764414_13423">But I have noticed that not all the packet in the pcap are getting to my rule, e.g. the pcap has 20 packets and only 7 are getting to my rule.</div><div id="yui_3_16_0_ym19_1_1491145764414_13423"><br></div><div id="yui_3_16_0_ym19_1_1491145764414_13423">I would love to know why it's happening.</div><div id="yui_3_16_0_ym19_1_1491145764414_13423"><br></div><div id="yui_3_16_0_ym19_1_1491145764414_13423">Thanks. </div></div></body></html>