[great-users] picking one packet out of a group

[Matthew J. Emerson]

My impression (from the user manual) is that 'For All' test each incoming
packet but only returns one match. So, it won't discard packets (which is
what I need), only potential matches for each packet.

Correct me if I'm wrong.

--Matt

-----Original Message-----
From: great-users-bounces at list.isis.vanderbilt.edu
[mailto:great-users-bounces at list.isis.vanderbilt.edu] On Behalf Of Daniel
Balasubramanian
Sent: Friday, April 07, 2006 2:50 PM
To: great-users
Subject: RE: [great-users] picking one packet out of a group

Hey Matt,

Maybe I'm making the problem too easy, but don't you just want to set the
"ForAll" attribute of the rule to false?  That will execute all of the
packets until it finds a match, then discard the rest.

Daniel


-----Original Message-----
From:	great-users-bounces at list.isis.vanderbilt.edu on behalf of Matthew J.
Emerson
Sent:	Fri 4/7/2006 2:06 PM
To:	great-users
Cc:	
Subject:	[great-users] picking one packet out of a group

Suppose I have 3 packets coming into a rule, like the picture below:

 

 

 

What I need to do is execute the rule of one and only one of those inputs,
and drop the rest. I don't even care which one it is.

 

The reason is that inside the rule I'm writing deletes an object contained
in each of those input packets. So, I can delete it the first time fine, but
then the transformation will crash when the next rule comes in because it
contains a "deleted" object. So, all I want is to pick any one of those
input packets, delete the object, and move on.

 

Is there any way to do this?

 

--Matt



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4509 bytes
Desc: not available
Url : http://list.isis.vanderbilt.edu/pipermail/great-users/attachments/20060407/7ff697f3/smime.bin