Candidate packet

Candidate packet
The state of the MLS cache is only partial at this stage. A complete flow cache has not been
established because the MLS-SE has only seen a packet come in and be forwarded to the router.
It still needs to see the packet come back from the router before the flow is complete.