Which step happens first in the RSA NetWitness data flow on the Packet Decoder when the capture interface is set to packet_mmap_"?
Feeds evaluated
Network rules evaluated
Application rules evaluated
Berkeley Packet Filter evaluated
Submit