rule-by-rule

If a packet matches a rule, the kernel performs the action specified by the target of that rule on the packet.

如果信息包与某条规则匹配，那么内核就对该信息包执行由该规则的目标指定的操作。

By conflict resolution, I mean what rule to fire if more than one rule evaluates to true.

冲突解决是指，如果多个规则的演算结果都是真，那么应该触发哪个规则。

This stage produces information about the records by composing the output table of the rule, as well as detailed information about which rule was not verified by each record.

这一阶段通过组合规则的数据表，以及关于哪些规则没有被每个记录评估的细节信息，来生成关于记录的信息。