Thanks for the kind reply. It's actually not a bug - Let me explain:
When performing "fw ctl debug" and making modifications to the module flags (in your example, the "fw" module) you can either add flags (with the + sign) or you can remove flags (with the - sign). Each of these actions (add and remove module flags) must be on their own line which is why we have one line for "fw ctl debug -m $MODULE + $FLAGS" and "fw ctl debug -m $MODULE - $FLAGS)". On each line, you can have as many of the modules turned on or off as you want.
When programming this, the easiest way I found to create these lines was to create an array of the modules (the boxes on the right) and whether or not they were "active" or "inactive". Taking this array, we loop over all the entries and put the specific module flags in their respective line (either "+" or "-") which then updates the command.
The downside to this is that there's no baseline array to compare against so even if you set your debug flags back to their original settings, the commands still appear - It works but it does look a little ugly. 
The other thing about the debug boxes is that the current defaults are already highlighted. For example, look at the "kissflow" boxes below:
and compare it against the output from this command:
[Expert@gw-9de5b8:0]# fw ctl debug -m kissflow
Kernel debugging buffer size: 50KB
Module: kissflow
Enabled Kernel debugging options: error warning
Messaging threshold set to type=Info freq=Common
See how the default options of "error warning" are highlighted in the "kissflow" module? This way here, users don't have to turn them on since they're on by default. Only when making changes to a module will the "-m $MODULE +/- $FLAGS" show up.
I hope this clears things up.
Sean (Gr@ve_Rose)
The issue is that I don't know what people are using for filters. Let's stick with the "host" filter to keep things simple. With that option, we could have one of three possible valid values: IPv4 address, IPv6 address and hostname. I don't know what people will be putting in so "1.2.3.4", "2001:bad:c0de::1" and "1.2.3.4.com" are all good entries but how do I determine (through RegEx) which one the user actually is putting in? I could put another option for users to select "I am putting in an IPv6 address" or whatever but I don't want to overload the user with too many options to have to select just to build their command. It's also entirely possible that the RegEx is floating around on StackOverflow somewhere and I just haven't seen it. 
This picture (partially visible) of "signal strength" is static and is seen on the bottom of the page during scrolling in the Menu.
