Proceedings of ISP RAS

Statistical Data Handling Program of Wireshark Analyzer and Incoming Traffic Research

V. Tarasov (PSUTII, Samara), S. Malakhov (PSUTII, Samara)


The identification of the distribution laws of intervals is particularly sophisticated problem, at the same time the traffic as a random process tends to be constantly changing. Therefore it is important to know the numerical characteristics of these intervals or their moments. In this paper we propose to use the Wireshark analyzer to determine such characteristics. The paper presents a plugin to the Wireshark traffic analyzer to calculate the moments of the random variable – the interval between packets of incoming traffic. The article also presents the analytical solution for the average waiting time for a QS type H2/M/1. Here H2 is the 2nd order hyperexponential distribution law of the input flow time intervals. The final result is obtained as a solution of Lindley’s integral equation using the method of spectral decomposition. It is shown that in this case the distribution laws of intervals between input flow requirements can be approximated at the level of their three first moments. The joint use of these results allows to fully analyze the incoming traffic by queuing methods. The obtained results demonstrate the fact that the classical M/M/1 system shows optimistic results in comparison with the considered system. Therefore, the approach can be successfully applied in the modern teletraffic theory where packet delays in the incoming traffic are significant.


traffic analyzer, wireshark program, numerical characteristics of random variables, Lindleys equation, method of spectral decomposition


Proceedings of the Institute for System Programming, vol. 27, issue 3, 2015, pp. 303-314.

ISSN 2220-6426 (Online), ISSN 2079-8156 (Print).

DOI: 10.15514/ISPRAS-2015-27(3)-21

Full text of the paper in pdf Back to the contents of the volume