Why isn't every port reported when the bird is port scanned?

When a bird gets hit by a port scan, the scanner will likely send thousands of packets to your bird. In order to not flood the bird or the console, the packets are sampled once the detection threshold is reached, so you won't see every packet. But you will know that a port scan occurred.