Posted by user8446 on Apr 05, 2016; 2:56pm
URL: https://itus.accessinnov.com/Bridge-mode-bugfix-and-performance-improvement-tp561p650.html

The decoder is for watching packets to try to detect anomalies such as packet size, header length, experimental stuff, etc. It has nothing to do with the normal detection rules. It would be useful if you had someone watching the logs and traffic full time like in an enterprise setting to try to identify a rogue endpoint. Itus even left it default off in bridge mode, I'm not sure why it was on in the router config. Given the networks the shield boxes are on, opt-in should be the default instead of opt-out.
Nice that you went one step farther and only turned off the offending SID.