Analyzer User Guide
To determine the current filter status:
Filter status is displayed atop the Overview, indicating how many line items are displayed, and
how many have been filtered from view:
8.1 Instant Filters
Instant Filters are enacted as text strings in the Instant Filter boxes located atop the columns in
the Overviews.
Instant Filters provide a quick and easy way to remove specific information from the Overview
using a simple syntax entered in the Instant Filter boxes located atop each column. Instant
Filters are comprised of a sequence of character chains and can be separated by commas for
AND operations. Instant Filters are not case-sensitive. Instant Filters may be used on a static
capture, saved capture, or during recording.
Use of display filters can speed the process of uploading captured traffic to the
PC. Filtering common
ly occurring items that may not be required for the
analysis task at hand can be helpful.
Instant Filters Syntax
The syntax of Instant Filters is as shown below:
filters = [!]filter[,filter,…]
filter = string or wildcard range
wildcard = string containing * or ? characters
range = min..max
Wildcards can be used to perform advanced filtering operations. Use an interrogation point '?'
to match to match any character, or an asterisk '*' to match any suite of characters. An
asterisk is always implied at the end of any search string. A few examples:
0?FE will match any line that starts with 0 and end with FE.
*data will match any line that contains the word data.
E*r will match any line that starts with an E and contains an r.
*read will match any line that contains read.
Filters also accept advanced criteria. For example, type 0..1 in the time column to keep only
events that occur between 0 and 100 milliseconds.
Several criteria can be combined with a logical OR operation using a comma. For example,
typing 2,4 in the device column will keep events having devices addresses beginning with 2 or
4.
A criteria can be inverted by using an exclamation point '!' as the first character in the filter. In
this case, all events that would have been included are now excluded, and vice versa.
96 of 201 | Display Filters
To Next Page
Loading...
Need help?
General
