Originally I just sorted the outer "paragraphs", where remote host IP address was sorted in ascending order. Then once my team saw the report they thought it was great except for the fact that they had to scan down the report to see sockets with high cnt values.
When analyzing performance we weight a higher cnt (more socket activity) greater than one with only cnt=1 since that only happens once.
So I thought there should be a way I could sort by cnt and not care about the order of RemoteIP, pid but just make sure the correct ones are correlated with the cnt value.
RemIP, Pid, Type, Cnt, Avg, Min, Max
a b c 999 0.1 0.05 0.5
a1 b1 c1 871 0.02 0.02 0.7
a2 b2 c2 25 0.01 0.03 0.234