I've just installed suricata 1.3, but still can not detect marked packets with suricata. I was able to mark all the packets using "repeat" mode but this makes no sense. I need to mark only "bad" traffic and send it to firewall once again.