diff --git a/network/connection.go b/network/connection.go
index c6f12232..af5ba4bb 100644
--- a/network/connection.go
+++ b/network/connection.go
@@ -615,8 +615,11 @@ func (conn *Connection) packetHandler() {
 		} else {
 			defaultFirewallHandler(conn, pkt)
 		}
+
 		// log verdict
 		log.Tracer(pkt.Ctx()).Infof("filter: connection %s %s: %s", conn, conn.Verdict.Verb(), conn.Reason.Msg)
+		// submit trace logs
+		log.Tracer(pkt.Ctx()).Submit()
 
 		// save does not touch any changing data
 		// must not be locked, will deadlock with cleaner functions
@@ -626,9 +629,6 @@ func (conn *Connection) packetHandler() {
 		}
 
 		conn.Unlock()
-
-		// submit trace logs
-		log.Tracer(pkt.Ctx()).Submit()
 	}
 }