Suricata

Please see the info attached - log/stats file when run with the attached pcap and the corresponding rule.

the rules fires 4 times, which is correct.
in rule_perf.log we have the follwoing;

--------------------------------------------------------------------------
  Date: 5/9/2012 -- 20:36:08
  --------------------------------------------------------------------------
   Num      Rule         Gid      Rev      Ticks        %      Checks   Matches  Max Ticks   Avg Ticks   Avg Match   Avg No Match
  -------- ------------ -------- -------- ------------ ------ -------- -------- ----------- ----------- ----------- --------------
  1        498          1        7        10077233     100.00 4        0        10050320    2519308.25  0.00        2519308.25

"Matches" should be 4 , not 0.