Hmm, I wonder if this makes sense. What you do here is loop through all available TX' until you find one that has a XFF. This means we may have an alert generated by TX A and may use the XFF header of TX B.