Denied Packets

[mrbnet]

I have some rules setup on an interface which allow traffic from an alias of subnets. It seems that randomly some traffic gets dropped. Here is the rule on the dropped packet.

@1 scrub in on vr0 all fragment reassemble
@1 block drop in log all label "Default deny rule"

Does this mean the incoming packet is fragmented? Is the firewall scrubbing the packet and dropping it? I haven't broke out wireshark yet to inspect the incoming packet yet.

Thanks.