To change the display filter, do one of the following:
For running session: click on Structure View's configuration settings in Sessions Tool Window and switch to the Display Filter tab.
For running session: right-click in the visualizer to bring up the context menu and select the Set Filter… item.
Use this window to select a display filter from a list, or enter the filter string manually, give it a name and save.
If you are changing the setting for a running session, use the Affect only new packets switch to control the change behavior. If you leave the switch unchecked, the session will be paused until the Structure View visualizer finishes updating.
Structure View data visualizer with configured Display Filter parses each incoming packet according to current protocol definition files and then evaluates a filter string against it. If a packet passes the test, it is included in the visualizer, otherwise, it is discarded.