Turns out it is because of the categorization as ip only packet.
Found in: How to create ICMP alerts per packet - #2 by vjulien
Turns out it is because of the categorization as ip only packet.
Found in: How to create ICMP alerts per packet - #2 by vjulien