- ┌considering: -oMa sender_host_address = $sender_host_address
- ├──expanding: -oMa sender_host_address = $sender_host_address
- └─────result: -oMa sender_host_address = V4NET.0.0.1
- ┌considering: sender_host_port = $sender_host_port
- ├──expanding: sender_host_port = $sender_host_port
- └─────result: sender_host_port = 1234
- ┌considering: -oMaa sender_host_authenticated = $sender_host_authenticated
- ├──expanding: -oMaa sender_host_authenticated = $sender_host_authenticated
- └─────result: -oMaa sender_host_authenticated = AAA
- ┌considering: -oMai authenticated_id = $authenticated_id
- ├──expanding: -oMai authenticated_id = $authenticated_id
- └─────result: -oMai authenticated_id = philip
- ┌considering: -oMas authenticated_sender = $authenticated_sender
- ├──expanding: -oMas authenticated_sender = $authenticated_sender
- └─────result: -oMas authenticated_sender = xx@yy.zz
- ┌considering: -oMi interface_address = $interface_address
- ├──expanding: -oMi interface_address = $interface_address
- └─────result: -oMi interface_address = 1.1.1.1
- ┌considering: interface_port = $interface_port
- ├──expanding: interface_port = $interface_port
- └─────result: interface_port = 99
- ┌considering: -oMr received_protocol = $received_protocol
- ├──expanding: -oMr received_protocol = $received_protocol
- └─────result: -oMr received_protocol = special
- ┌considering: ----> No lookup yet: ${if eq{black}{white}{$sender_host_name}{No}}
- ┌considering: black}{white}{$sender_host_name}{No}}
- ├──expanding: black
- └─────result: black
- ┌considering: white}{$sender_host_name}{No}}
- ├──expanding: white
- └─────result: white
+try option gecos_pattern
+try option gecos_name
+try option unknown_login
+ ╭considering: -oMa░░sender_host_address░=░$sender_host_address
+ ├───────text: -oMa░░sender_host_address░=░
+ ├considering: $sender_host_address
+ ├──────value: V4NET.0.0.1
+ ╰──(tainted)
+ ├───expanded: -oMa░░sender_host_address░=░$sender_host_address
+ ╰─────result: -oMa░░sender_host_address░=░V4NET.0.0.1
+ ╰──(tainted)
+ ╭considering: ░░░░░░sender_host_port░=░$sender_host_port
+ ├───────text: ░░░░░░sender_host_port░=░
+ ├considering: $sender_host_port
+ ├──────value: 1234
+ ├───expanded: ░░░░░░sender_host_port░=░$sender_host_port
+ ╰─────result: ░░░░░░sender_host_port░=░1234
+ ╭considering: -oMaa░sender_host_authenticated░=░$sender_host_authenticated
+ ├───────text: -oMaa░sender_host_authenticated░=░
+ ├considering: $sender_host_authenticated
+ ├──────value: AAA
+ ╰──(tainted)
+ ├───expanded: -oMaa░sender_host_authenticated░=░$sender_host_authenticated
+ ╰─────result: -oMaa░sender_host_authenticated░=░AAA
+ ╰──(tainted)
+ ╭considering: -oMai░authenticated_id░=░$authenticated_id
+ ├───────text: -oMai░authenticated_id░=░
+ ├considering: $authenticated_id
+ ├──────value: philip
+ ╰──(tainted)
+ ├───expanded: -oMai░authenticated_id░=░$authenticated_id
+ ╰─────result: -oMai░authenticated_id░=░philip
+ ╰──(tainted)
+ ╭considering: -oMas░authenticated_sender░=░$authenticated_sender
+ ├───────text: -oMas░authenticated_sender░=░
+ ├considering: $authenticated_sender
+ ├──────value: xx@yy.zz
+ ╰──(tainted)
+ ├───expanded: -oMas░authenticated_sender░=░$authenticated_sender
+ ╰─────result: -oMas░authenticated_sender░=░xx@yy.zz
+ ╰──(tainted)
+ ╭considering: -oMi░░interface_address░=░$interface_address
+ ├───────text: -oMi░░interface_address░=░
+ ├considering: $interface_address
+ ├──────value: 1.1.1.1
+ ╰──(tainted)
+ ├───expanded: -oMi░░interface_address░=░$interface_address
+ ╰─────result: -oMi░░interface_address░=░1.1.1.1
+ ╰──(tainted)
+ ╭considering: ░░░░░░interface_port░=░$interface_port
+ ├───────text: ░░░░░░interface_port░=░
+ ├considering: $interface_port
+ ├──────value: 99
+ ├───expanded: ░░░░░░interface_port░=░$interface_port
+ ╰─────result: ░░░░░░interface_port░=░99
+ ╭considering: -oMr░░received_protocol░=░$received_protocol
+ ├───────text: -oMr░░received_protocol░=░
+ ├considering: $received_protocol
+ ├──────value: special
+ ╰──(tainted)
+ ├───expanded: -oMr░░received_protocol░=░$received_protocol
+ ╰─────result: -oMr░░received_protocol░=░special
+ ╰──(tainted)
+ ╭considering: ---->░No░lookup░yet:░${if░eq{black}{white}{$sender_host_name}{No}}
+ ├───────text: ---->░No░lookup░yet:░
+ ├considering: ${if░eq{black}{white}{$sender_host_name}{No}}
+ cond: eq
+ ╭considering: black}{white}{$sender_host_name}{No}}
+ ├───────text: black
+ ├considering: }{white}{$sender_host_name}{No}}
+ ├───expanded: black
+ ╰─────result: black
+ ╭considering: white}{$sender_host_name}{No}}
+ ├───────text: white
+ ├considering: }{$sender_host_name}{No}}
+ ├───expanded: white
+ ╰─────result: white