|
Use the Copy command to copy the summary information shown in the Capture tab to the clipboard in tab-separated format.
What is copied to the clipboard depends upon what is selected. The clipboard receives one line of titles plus one line for each selected row.
Each column in the Capture tab contributes one field to each line of text. The order in which fields are copied to the clipboard reflects the column order in the Capture tab.
To copy all of the summary information for a capture onto the clipboard, do a Select All followed by a Copy.
You can paste information into other applications for further analysis. For example, if you have a copy of Microsoft Excel and you wish to create a pie chart of bytes transmitted by IP address, you might proceed as follows:
-
Select the packets of interest in the Capture tab (eg Select All) and then copy the information to the clipboard.
-
Paste the data into a new spreadsheet. Delete any unwanted columns (optional). Then select the data, including the titles.
-
Use the Data>Sort... command to sort by the appropriate column (eg Source Address).
-
Use the Data>Subtotals... command to calculate the number of bytes transmitted by each source address (eg “At each change in: Source Address”, “Use function: Sum”, “Add subtotal to: Length”).
-
Collapse the result to level 2 (ie click the square “2” button that now appears near the top, left of the window underneath the red close button). The result is subtotals for each distinct source address plus a grand total.
-
Select the cells containing the summary descriptions and total lengths (using Command+Click to make a discontinuous selection if necessary). Finally, use Insert>Chart... to create a pie chart from the selected information.
This approach works well for comparatively small data sets (up to 65,000 packets). To analyze larger captures, it may be appropriate to use a database package or write a custom application.
Refer to the explanation about saving selections in summary format for a way of exporting information into text files without using the clipboard.
|
