High Speed Network Monitoring

and Traffic Analysis Peter Tatai

AITIA International, Inc.

AITIA Divisions

• Telecom – passive monitoring and active service solutions

• Speech – continuous speech recognition, voice portals, word spotting (poster)

• Simulation – simulation of complex systems, multiagent simulation tools

• Web – content & work flow management, portal development

• Design – innovative graphical solutions, chatbot information systems

Introduction of AITIA by a Chatbot

An example of chatbot information solutions

Telecommunication Division

Developing and providing software for•Network-wide Monitoring Systems•Telecommunications Traffic Analysis•Application Gateways & Service Logic•Fraud Detection Systems•Short Message (SMS) Handling•Support for Roaming Services and Testing•Location Based Services•Missed Call Notifications•EIR: Equipment Identity Register

Interface cards

Based on in-house developed cards:• 2x2 (1.5) Mbps PDH (E1/T1)• 2x155 Mbps SDH/SONET and ATM• 4x100 BaseT, copper• 4x1000 BaseT, fiber, copper

Utilizing L2 and L3 technologies:• SS7 MTP• HSL - many - e.g.30 links bundled• MTP3b, AAL-5• Ethernet, SIGTRAN, ATM

The Present

Our PassiveMonitoring Systems in Use

for 1…10 yearsSS7 & GPRS monitoring to cover complete networks

analyzes and stores traffic and call data (30 million calls/day)

creates statistics and debug info real-time call tracing filtering fraudulent calls right tool for handling customer complaints

Gigabit EthernetMonitoring monitoring Tbytes of data for traffic analysis to detect bottlenecks and other traffic problems on-line filtering and off-line processing software

GSM Monitoring System(SS7/PCM signaling links)

statisticsCDR

(TCP/IP)

CDRs(SQL/Net)

PMSServer statistics(TCP/IP)

NOC

alarms(SNMP/UDP/IP)

ProbeProbe

ProbeSS7bits

SS7bits

SS7bits

Monitor Probe Architecture

PCM / SS7 signaling links

SGA47 SGA47

SS7 decoder

MSUs

Signaling Linkconfiguration

Alarm thresholdson statistics results

CDR elements(IAM,ACM,...)

Signaling Link statistics,events

Remoteconfiguration

SS7bits

Server

Call Tracerequests &

results

RemoteCapture

Cli

ent X

Cli

ent Y

Call Trace

TS k. TS i. TS j.. . .

Some ReferencesT-Mobile

Entire GSM and GPRS network monitored (15 million calls/day)SMS handling (Welcome, Bon voyage, Info, Mass SMS)Gateways, Roaming Testers, USSD, Fraud Detection

Pannon GSM (Telenor)SMS handling (Welcome and Mass SMS)LBS – Location Based Services solution

VodafoneSMS handling (Welcome and Mass SMS)Roaming Testers

InvitelSS7 network monitoring and call statistics

Ericsson Network Emulator for VoIP services, Semi-Transparent Relay Function

NTT, Japan IP/ATM Network monitoring (1999) for the Japanese Gigabit network

Why to monitor?

• Everyday network maintenance • Traffic analysis• Debugging• Fraud detection • Bottleneck detection• Quality of Service • Handling customer complaints• Network optimization and planning

The Future

Aims

To develop a multipurpose board for NGN networks as a monitoring and data-processing unit with

• very high performance• low power consumption• high scalability• composability

Hardware Architecture of C-Board2x10 Gbit/s --- 8…16x0.1…3.5 Gbit/s

Foreseen Main Applicationsfor the C-Board

• Measuring traffic mix• Deep packet inspection• IMS SIP platform (IP Multimedia Subsystem, Session

Initiation Protocol)• Routing at Layer 2, Layer 3, GMPLS (Gigabit

Multiprotocol Label Switching)• Video transcoding• Media Gateway• Firewall• Traffic generator

The Team

AITIA and BME (Budapest University of Technology) common project

+ SCALOPES (Artemis) European project with 37 European

partners

Project leader: Pal Varga

Thank you for your attention!

AITIA International, Inc.www.aitia.ai