Modify the display filter decision tree structure
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
To modify the display filter decision tree structure
Open Network Monitor.
If prompted, select the local network from which you want to capture data by default.
Do one of the following:
On the File menu, click Open, and then double-click a saved capture file to open it.
On the Capture menu, click Start, and then click Stop and View when you are done capturing frames.
On the Display menu, click Filter.
To add a logical operator to the decision tree in the Display Filter dialog box, click the line below the row where you want to add the operator. Then:
To find frames that satisfy all expressions in the branch, click AND.
To find frames that satisfy one or more of the expressions in the branch, click OR.
To exclude frames that satisfy the expressions in the branch, click NOT.
To change a logical operator, click it and then click Change Operator until the operator you want appears.
To modify an expression, click it and then click Edit Expression.
To add an expression to a branch, click the line beneath the row where you want to insert the new expression. Then, in the Add group, click Expression. You can:
To delete a single expression or logical operator, click the line, and then click Line in the Delete group.
To delete a branch, click the top branch that you want to delete, click Branch in the Delete group, and click Yes to confirm that you want to delete the branch and all the branches underneath it.
To clear the decision tree and start over, click All in the Delete group. Click Yes to confirm that you want to start over and clear the decision tree contents.
Notes
To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure.
To start Network Monitor, click Start, click Control Panel, double-click Administrative Tools, and double-click Network Monitor.
Network Monitor runs with reduced access in which administrative privileges have been removed. If you receive an Access Denied message when you follow this procedure, add your user name to the permissions list of the file or folder that you want to access. See Related Topics for more information about setting permissions on files and folders.
When you add an operator, a new decision tree branch appears.
Information about functional differences
- Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.
See Also
Concepts
Save a capture filter
Save a display filter
Set, view, change, or remove permissions on files and folders
Design a display filter
Filtering data