User Guide

For each supported protocol, a tab is shown in this window. Each tab label shows the number of en-
dpoints captured (e.g. the tab label "Ethernet: 5" tells you that five ethernet endpoints have been
captured). If no endpoints of a specific protocol were captured, the tab label will be greyed out
(although the related page can still be selected).
Each row in the list shows the statistical values for exactly one endpoint.
Name resolution will be done if selected in the window and if it is active for the specific protocol
layer (MAC layer for the selected Ethernet endpoints page). As you might have noticed, the first
row has a name resolution of the first three bytes "Netgear", the second row's address was resolved
to an IP address (using ARP) and the third was resolved to a broadcast (unresolved this would still
be: ff:ff:ff:ff:ff:ff); the last two Ethernet addresses remain unresolved.
Limit to display filter will only show conversations matching the current display filter.
The copy button will copy the list values to the clipboard in CSV (Comma Separated Values)
format.
Tip!
This window will be updated frequently, so it will be useful, even if you open it before
(or while) you are doing a live capture.
8.5.3. The protocol specific "Endpoint List" windows
Before the combined window described above was available, each of its pages was shown as a sep-
arate window. Even though the combined window is much more convenient to use, these separate
windows are still available. The main reason is that they might process faster for very large capture
files. However, as the functionality is exactly the same as in the combined window, they won't be
discussed in detail here.
Statistics
156