ANDEXP structure

The ANDEXP structure contains an array of pattern matches used to evaluate frame data.

Syntax

typedef struct _ANDEXP {
  DWORD        nPatternMatches;
  PATTERNMATCH PatternMatch[MAX_PATTERNS];
} ANDEXP, *LPANDEXP;

Members

nPatternMatches

Number of pattern matches.

PatternMatch

Array of pattern match elements. Note that each ANDEXP structure can contain up to four pattern match elements. For more information about this member, see Capture Filters.

Remarks

The patterns in the PatternMatch[MAX_PATTERNS] array are joined as peers in logical OR statements in the format

(Pattern 1 || Pattern 2 || Pattern 3).

For more information about implementing this structure, see Capture Filters .

Requirements

See also

PATTERNMATCH