The 'Select Filter' dialog can be used to define two different types of filters:
if this window is invoked by the buttons sequence Edit\Select... (from the capture menu - a capture document is open) then, through this window, you will choose the expression filter used to make a selection on the current capture document;
if this window is invoked by the button sequence Captures\Begin\Advanced filter then you will choose the expression filter used to determine the packets which will be captured. The selected expression is set as parameter in the capture engine session.
List: the expressions list contains the filters defined in the file:
- filters.dat if the filter is used to select a packets group.
- cap_fltr.dat if the filter is used by the capture engine.
If the expression No Filter is selected then all the packets will be selected or all packets will be captured. These two files are stored in the folder indicated by Analyzer.ini.
Name: this edit box contains the selected filter name.
Expression: it contains the expression relative to the selected filter.
OK: set the selected filter; if the user made some changes in the expression list (added or removed something) the system asks if the changes have to be saved.
Define>>: if the window defines a packets selection filter this button opens the Create Expression Wizard; otherwise it opens the Create Capture Filter Dialog Window.
Add: it adds the expression written in the edit boxes to the list.
Remove: it removes the selected expression from the list.
Update: it replaces the selected expression with the text written in the edit boxes.