change match rule to fix fragmented packets