Suricata

if a package match a rule and the rule's action is 'pass',then suricata will set this flow no need to detect. So when I change this rule's action to 'drop',packages won't detect the rules and just pass (even I change the package)