EXPRESSION
The EXPRESSION structure contains a group of ANDEXP arrays evaluated as peers in logical AND expressions, which have the format
(ANDEXP 1 && ANDEXP 2 && ANDEXP 3).
typedef struct _EXPRESSION {
DWORD nAndExps;
ANDEXP AndExp[MAX_PATTERNS];
} EXPRESSION,
*LPEXPRESSION;
Members
- nAndExps
Number of ANDEXP patterns. - AndExp
Array of ANDEXP patterns. The capture filter arranges all rows of this array as logical AND statements. Be aware that each EXPRESSION structure can contain a maximum of four ANDEXP patterns.
Remarks
For more information about implementing this structure as part of a capture filter, see Capture Filters.
Requirements
Client | Requires Windows XP, Windows 2000 Professional, or Windows NT Workstation 4.0. |
Server | Requires Windows Server 2003, Windows 2000 Server, or Windows NT Server 4.0. |
Header | Declared in Netmon.h. |