[Oisf-users] Suricata isn't passing all the packets from the pcap

[Simon Janeshvili]

Hey all,
I am running suricata on ubuntu vm, with an simple lua rule.But I have noticed that not all the packet in the pcap are getting to my rule, e.g. the pcap has 20 packets and only 7 are getting to my rule.
I would love to know why it's happening.
Thanks.  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20170402/6b68cd64/attachment.html>