This read-only Counter32 tallies the number of packets that have matched this filtering rule, as enabled via rlPolicyRulesCounterIdx. An admin uses this to see how much traffic a rule is catching overall, regardless of whether the rule's action is to permit or block. For example, an admin validating that a newly deployed classification rule is actually matching expected traffic would watch this counter to confirm nonzero hits.