You could try to enable the file-store and if that doesn’t help it would be ideal if you could provide the rule that you used and even better the pcap as well.
You could try to enable the file-store and if that doesn’t help it would be ideal if you could provide the rule that you used and even better the pcap as well.