This read-only Counter reports the total number of packets dropped specifically because dynamic packet filtering rejected the data (as opposed to a static rule match). An admin monitors this to see how often the stateful/dynamic inspection component of the filter is actively rejecting traffic, distinct from static rule-based drops. A rising count here alongside stable totalDrops would suggest the dynamic filtering logic specifically is catching increasingly more suspicious traffic.