The Find and Replace Filters dialog, opened by pressing the Filter... button, is used for creating, selecting and maintaining regular expression filters. You can also use the dialog for applying a once-only filter.
For more information on regular expressions in SNiFF+, please refer to Regular Expressions in SNiFF+.
Modification buttons
Each defined regular expression filter that you save must have at least:
Saving the name on its own is not usually very useful, so it makes sense to define at least
You may want to use the output of the retrieve filter to define
Name field
To make it easier to quickly find and identify the regular expression, each regular expression is associated with a unique name. Entering the name of an existing expression automatically selects the expression in the list.
Retrieve field
If an existing filter is selected, the "retrieve" part is copied into the Retrieve field. The "replace" part (if any) is copied into the Replace field. Retrieve filters can also be created and edited in this field. The filter here is applied in a re-query of the current set of matches when you press Apply or Ok.
Replace field
If an existing filter is selected, the "replace" part is copied into the Replace field. Modifiers can also be created and edited in this field. The filter here is applied in replacing matched lines when you press Apply or Ok.
The Regular Expressions List
Defined filters are listed in the Regular Expressions List. The name of the filter is followed by the corresponding regular expression. If you create a combined retrieve-and-replace filter, the name is followed by the retrieve part of the filter in the next column, and then the replace part of the filter in third column. Items are added to the Regular Expressions List using the Save button for new names in the Name field, or by pressing Ok.
Pre-defined filters