What happens to a packet that has no matching rule in Suricata. I assume it is ignored, but haven't found any definitive info on this.
So, if my assumption is correct and the packet is ignored, would it be better to capture all non pass matched packets with a drop rule for performance purposes or would the drop rule just increase the resource usage?
Essentially I am asking if matching every packet is a better approach. What are the pros and cons?