Logical AND, OR, and NOT operators
The view of the Edit Filter or Add Filter dialog shows the parameters defined for the filter:
- The inbox icon entrance of packets.
- A rectangular box represents each rule that is added to the filter. If the Show node details check box is selected, the details of the filter rule are also displayed inside the box.
- Arrows indicate the flow of data through each filter rule. A single arrow between filter rules indicates an AND condition; any packets that match the filter node are allowed to pass through to the next stage. Multiple arrows between filter rules indicate an OR condition (filter rules stacked on top of each also indicates an OR condition); packets that match any of the filter rules defined by the OR condition are allowed to pass through to the next stage.
- A rectangular box with red border indicates a NOT condition. All packets that do not match the filter rule are allowed to pass through to the next stage.
- The outbox icon represents outlet of filtered packets.
An example of a filter is shown below:
Figure 9-3. Filter sample
