Identifying Candidate Packets

Identifying Candidate Packets
The process of identifying
candidate packets
is quite simple. As has already been established,
the MLS-SE has MAC address entries for any and all interfaces that come from the MLS-RP.
Using this information, the MLS-SE starts watching for incoming frames destined for any
MLS-RP-related MAC addresses.
An incoming frame will match one of the following three criteria:

Not destined for an MLS-RP MAC address.

Destined for an MLS-RP MAC address, and a cache entry already exists for this flow.

Destined for an MLS-RP MAC address, but no cache entry exists for this flow.
Different actions will be taken by the MLS-SE, depending on which criteria match.