3.17. The “Filter” Toolbar

The filter toolbar lets you quickly edit and apply display filters. More information on display filters is available in Section 6.3, “Filtering packets while viewing”.

Figure 3.15. The “Filter” toolbar

ws filter toolbar

Table 3.14. Filter toolbar items

Toolbar IconToolbar ItemDescription

display filter 24

Filter:

Brings up the filter construction dialog, described in Figure 6.8, “The “Capture Filters” and “Display Filters” dialog boxes”.

 

Filter input

The area to enter or edit a display filter string, see Section 6.4, “Building display filter expressions”. A syntax check of your filter string is done while you are typing. The background will turn red if you enter an incomplete or invalid string, and will become green when you enter a valid string. You can click on the pull down arrow to select a previously-entered filter string from a list. The entries in the pull down list will remain available even after a program restart.

After you’ve changed something in this field, don’t forget to press the Apply button (or the Enter/Return key), to apply this filter string to the display.

This field is also where the current filter in effect is displayed.

stock add 24

Expression…​

The middle button labeled “Add Expression…​” opens a dialog box that lets you edit a display filter from a list of protocol fields, described in Section 6.5, “The “Filter Expression” dialog box”

stock clear 24

Clear

Reset the current display filter and clears the edit area.

stock apply 20

Apply

Apply the current value in the edit area as the new display filter.

Applying a display filter on large capture files might take quite a long time.