Hi,
In this case, packet is probably not the right term. The flow is going to be bypassed for inspection once the pass rule is hit (this is a TCP transaction). The flow will be however your suricata.yaml is configured to determine what a flow is comprised of (if VLANs or LIVEIDs are included in addition to standard 5 tuple).
JT