8.5.2. The "Endpoints" window
This window shows statistics about the endpoints captured.
Figure 8.4. The "Endpoints" window
For each supported protocol, a tab is shown in this window.
Each tab label shows the number of endpoints captured (e.g. the
tab label "Ethernet: 5" tells you that five ethernet endpoints have been
captured). If no endpoints of a specific protocol were captured, the tab
label will be greyed out (although the related page can still be selected).
Each row in the list shows the statistical values for exactly one endpoint.
will be done if selected in the window
and if it is active for the specific protocol layer (MAC layer for the
selected Ethernet endpoints page). As you might have noticed, the first
row has a name
resolution of the first three bytes "Netgear", the second row's address was
resolved to an IP address (using ARP) and the third was resolved
to a broadcast (unresolved this would still be: ff:ff:ff:ff:ff:ff); the last two
Ethernet addresses remain unresolved.
Limit to display filter
will only show conversations matching
the current display filter.
button will copy the list values to the
clipboard in CSV (Comma Separated Values) format.
This window will be updated frequently, so it will be useful, even if
you open it before (or while) you are doing a live capture.
8.5.3. The protocol specific "Endpoint List" windows
Before the combined window described above was available, each of its
pages was shown as a separate window. Even though the combined window is
much more convenient to use, these separate windows are still
available. The main reason is that they might process faster for
very large capture files. However, as the functionality is exactly the
same as in the combined window, they won't be discussed in detail here.