MFC 361721:
Per-rule hit counts (-h) can be used with either -i (input) or -o (output) filter rule lists.