Partager via


ANDEXP

The ANDEXP structure contains an array of pattern matches used to evaluate frame data.

typedef struct _ANDEXP {
  DWORD nPatternMatches;
  PATTERNMATCH PatternMatch[MAX_PATTERNS];
} ANDEXP, 
 *LPANDEXP;

Members

  • nPatternMatches
    Number of pattern matches.
  • PatternMatch
    Array of pattern match elements. Note that each ANDEXP structure can contain up to four pattern match elements. For more information about this member, see Capture Filters.

Remarks

The patterns in the PatternMatch[MAX_PATTERNS] array are joined as peers in logical OR statements in the format

(Pattern 1 || Pattern 2 || Pattern 3).

For more information about implementing this structure, see Capture Filters .

Requirements

Client Requires Windows XP, Windows 2000 Professional, or Windows NT Workstation 4.0.
Server Requires Windows Server 2003, Windows 2000 Server, or Windows NT Server 4.0.
Header

Declared in Netmon.h.

See Also

PATTERNMATCH