EXPRESSION structure

The EXPRESSION structure contains a group of ANDEXP arrays evaluated as peers in logical AND expressions, which have the format

(ANDEXP 1 && ANDEXP 2 && ANDEXP 3).

Syntax

typedef struct _EXPRESSION {
  DWORD  nAndExps;
  ANDEXP AndExp[MAX_PATTERNS];
} EXPRESSION, *LPEXPRESSION;

nAndExps: Number of ANDEXP patterns.
AndExp: Array of ANDEXP patterns. The capture filter arranges all rows of this array as logical AND statements. Be aware that each EXPRESSION structure can contain a maximum of four ANDEXP patterns.

For more information about implementing this structure as part of a capture filter, see Capture Filters.

Requirement	Value
Minimum supported client	Windows 2000 Professional [desktop apps only]
Minimum supported server	Windows 2000 Server [desktop apps only]
Header	Netmon.h