This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

What data does “Burst rate” and “Burst Start” provide in Statistics / Packet Lengths?

0

In Wireshark, I can view some basic packet statistics by going to Statistics -> Packet Lengths. I am able to understand all the values in each column except the following:

  1. Burst rate = is this the number of packets sent in a given time?
  2. Burst start = is this when the burst starts?

asked 19 May '15, 08:15

Amato_C's gravatar image

Amato_C
1.1k●14●20●32
accept rate: 14%

Some clarification on my question. How does Wireshark determine the "burst rate" and the "burst start" parameters? I interpret "burst rate" as the maximum amount of packets sent within a time-frame. So it would be the maximum packets-per-second (pps) within the capture. The "burst start" would then be the time when the highest burst rate was experienced.

Are these interpretations correct?

(19 May '15, 13:11) Amato_C

One Answer:

1

After performing my own analysis, the following was determined:

  1. Burst = the maximum number of packets sent per interval of time
  2. Burst start = the time when the maximum number of packets sent occurred

Wireshark calculates the maximum number of packets sent per interval of time. The user is able to adjust the interval of time in 1 millisecond intervals.

Under Preferences -> Statistics, the following parameters can be adjusted:

  • Show burst count for item rather rate = if selected, the statistics will show the count of events within the burst window instead of a burst rate. Burst rate is calculated as the number of packets within the burst window divided by the burst window length.
  • Burst rate resolution = sets the duration of the time interval into which packets are grouped when calculating the burst rate.
  • Burst rate window size = sets the duration of the sliding window during which the burst rate is measured

For my analyses, I set the following:

  • Show burst count for item rather than rate = Enabled (check mark in the box)
  • Burst rate resolution = Burst rate window size

answered 12 Jun '15, 08:45

Amato_C's gravatar image

Amato_C
1.1k●14●20●32
accept rate: 14%