I've never quite understood what I should expect to find in the pcap file for the "log pair packets" action. Take the following example:SigId: 6256-0 (HTTP Auth fail)Engine: Atomic IPTCP Mask: Ack,Fin,Rst,SynTCP Flags: AckSource Port Range: 80-80Rege...