To modify the display filter decision tree structure

1. Open Network Monitor.
2. If prompted, select the local network from which you want to capture data by default.
3. Do one of the following:
• On the File menu, click Open, and then double-click a saved capture file to open it.
• On the Capture menu, click Start, and then click Stop and View when you are done capturing frames.
4. On the Display menu, click Filter.
5. To add a logical operator to the decision tree in the Edit Display Filter dialog box, click the line below the row where you want to add the operator. Then:
• To find frames that satisfy all expressions in the branch, click AND.
• To find frames that satisfy one or more of the expressions in the branch, click OR.
• To exclude frames that satisfy the expressions in the branch, click NOT.
6. To change a logical operator, click it and then click Change Operator until the operator you want appears.
7. To modify an expression, click it and then click Edit Expression.
8. To add an expression to a branch, click the line beneath the row where you want to insert the new expression. Then, in the Add group, click Expression. You can:
• Specify display filter protocols.
• Specify display filter protocol properties.
• Specify address pairs in a display filter.
9. To delete a single expression or logical operator, click the line, and then click Line in the Delete group.
10. To delete a branch, click the top branch that you want to delete, click Branch in the Delete group, and click Yes to confirm that you want to delete the branch and all the branches underneath it.
11. To clear the decision tree and start over, click All in the Delete group. Click Yes to confirm that you want to start over and clear the decision tree contents.

Notes

• XOX
• XOX
• Network Monitor runs with reduced access in which administrative privileges have been removed. If you receive an Access Denied message when you follow this procedure, add your user name to the permissions list of the file or folder that you want to access. See Related Topics for more information about setting permissions on files and folders.
• When you add an operator, a new decision tree branch appears.

Related Topics