Thank you for yor response and confirmation Scott. Fine to read that it helped you too.
The small extra highest matches could come from the ack/syn/fin/rst/icmp prioritization if some of these boxes were checked. But since main traffic gets classified correctly I personally wouldnt't care about some bits more or less.
Regards,
Chris
The small extra highest matches could come from the ack/syn/fin/rst/icmp prioritization if some of these boxes were checked. But since main traffic gets classified correctly I personally wouldnt't care about some bits more or less.
Regards,
Chris