High Speed Network Monitoring and Traffic Analysis Peter

High Speed Network Monitoring and Traffic Analysis Peter Tatai AITIA International, Inc.

AITIA Divisions • Telecom – passive monitoring and active service solutions • Speech – continuous speech recognition, voice portals, word spotting (poster) • Simulation – simulation of complex systems, multiagent simulation tools • Web – content & work flow management, portal development • Design – innovative graphical solutions, chatbot information systems

Introduction of AITIA by a Chatbot An example of chatbot information solutions

Telecommunication Division Developing and providing software for • Network-wide Monitoring Systems • Telecommunications Traffic Analysis • Application Gateways & Service Logic • Fraud Detection Systems • Short Message (SMS) Handling • Support for Roaming Services and Testing • Location Based Services • Missed Call Notifications • EIR: Equipment Identity Register

Interface cards Based on in-house developed cards: • 2 x 2 (1. 5) Mbps PDH (E 1/T 1) • 2 x 155 Mbps SDH/SONET and ATM • 4 x 100 Base. T, copper • 4 x 1000 Base. T, fiber, copper Utilizing L 2 and L 3 technologies: • SS 7 MTP • HSL - many - e. g. 30 links bundled • MTP 3 b, AAL-5 • Ethernet, SIGTRAN, ATM

The Present

Our Passive Monitoring Systems in Use for 1… 10 years SS 7 & GPRS monitoring to cover complete networks § analyzes and stores traffic and call data (30 million calls/day) § creates statistics and debug info § real-time call tracing § filtering fraudulent calls § right tool for handling customer complaints Gigabit Ethernet. Monitoring § monitoring Tbytes of data for traffic analysis § to detect bottlenecks and other traffic problems § on-line filtering and off-line processing software

GSM Monitoring System (SS 7/PCM signaling links) Probe SS 7 bits Probe (TCP/IP) statistics CDR SS 7 bits CDRs (SQL/Net) Server statistics (TCP/IP) PMS alarms (SNMP/UDP/IP) NOC

Monitor Probe Architecture PCM / SS 7 signaling links . . . SGA 47 TS j. SGA 47 Signaling Link configuration Remote Capture MSUs Alarm thresholds on statistics results SS 7 bits SS 7 decoder Call Trace Remote configuration Client X TS i. CDR elements (IAM, ACM, . . . ) Server Signaling Link statistics, events Call Trace requests & results Client Y TS k.

Some References T-Mobile Entire GSM and GPRS network monitored (15 million calls/day) SMS handling (Welcome, Bon voyage, Info, Mass SMS) Gateways, Roaming Testers, USSD, Fraud Detection Pannon GSM (Telenor) SMS handling (Welcome and Mass SMS) LBS – Location Based Services solution Vodafone SMS handling (Welcome and Mass SMS) Roaming Testers Invitel SS 7 network monitoring and call statistics Ericsson Network Emulator for Vo. IP services, Semi-Transparent Relay Function NTT, Japan IP/ATM Network monitoring (1999) for the Japanese Gigabit network

Why to monitor? • • Everyday network maintenance Traffic analysis Debugging Fraud detection Bottleneck detection Quality of Service Handling customer complaints Network optimization and planning

The Future

Aims To develop a multipurpose board for NGN networks as a monitoring and data-processing unit with • • very high performance low power consumption high scalability composability

Hardware Architecture of C-Board 2 x 10 Gbit/s --- 8… 16 x 0. 1… 3. 5 Gbit/s

Foreseen Main Applications for the C-Board • Measuring traffic mix • Deep packet inspection • IMS SIP platform (IP Multimedia Subsystem, Session Initiation Protocol) • Routing at Layer 2, Layer 3, GMPLS (Gigabit Multiprotocol Label Switching) • Video transcoding • Media Gateway • Firewall • Traffic generator

The Team AITIA and BME (Budapest University of Technology) common project + SCALOPES (Artemis) European project with 37 European partners Project leader: Pal Varga

Thank you for your attention! AITIA International, Inc. www. aitia. ai