This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

In Wireshark, I can view some basic packet statistics by going to Statistics -> Packet Lengths. I am able to understand all the values in each column except the following:

  1. Burst rate = is this the number of packets sent in a given time?
  2. Burst start = is this when the burst starts?

asked 19 May '15, 08:15

Amato_C's gravatar image

Amato_C
1.1k142032
accept rate: 14%

Some clarification on my question. How does Wireshark determine the "burst rate" and the "burst start" parameters? I interpret "burst rate" as the maximum amount of packets sent within a time-frame. So it would be the maximum packets-per-second (pps) within the capture. The "burst start" would then be the time when the highest burst rate was experienced.

Are these interpretations correct?

(19 May '15, 13:11) Amato_C

After performing my own analysis, the following was determined:

  1. Burst = the maximum number of packets sent per interval of time
  2. Burst start = the time when the maximum number of packets sent occurred

Wireshark calculates the maximum number of packets sent per interval of time. The user is able to adjust the interval of time in 1 millisecond intervals.

Under Preferences -> Statistics, the following parameters can be adjusted:

  • Show burst count for item rather rate = if selected, the statistics will show the count of events within the burst window instead of a burst rate. Burst rate is calculated as the number of packets within the burst window divided by the burst window length.
  • Burst rate resolution = sets the duration of the time interval into which packets are grouped when calculating the burst rate.
  • Burst rate window size = sets the duration of the sliding window during which the burst rate is measured

For my analyses, I set the following:

  • Show burst count for item rather than rate = Enabled (check mark in the box)
  • Burst rate resolution = Burst rate window size
permanent link

answered 12 Jun '15, 08:45

Amato_C's gravatar image

Amato_C
1.1k142032
accept rate: 14%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×5

question asked: 19 May '15, 08:15

question was seen: 14,024 times

last updated: 12 Jun '15, 08:45

p​o​w​e​r​e​d by O​S​Q​A