Hello, Quick question: Suricata decoders can handle ip-fragments that arrive out-of-order,correct? As long as the fragments(of the flow-tuple) get routed to the same socket we should be good, correct? Chetan Loke