Netscout Systems, Inc.

Sandeep Prasad

Abhishek Saraswati

Tauras Liubinskas

Pritish Vijay Aherrao

Vijayalakshmi Seshadri

Brandon Wayne Bass

Subappriya Muthuchamy

Loreto Di Resta

Rajeev Nadkarni

Daniel Andrew Hill

Yashovan B Neelakantamurthy

Shilpa Bansod

Alessandro Pinelli

Linda Nasi

Massimiliano Frigieri

Erdem Uysal

Domenico Aldrovandi

Bruce A Kelley, Jr

Apurva Prakash

Claudio Guerrini

Loreto DiResta

Saraswati Saraswati

A method is disclosed. A control plane signaling data packet transmitted from a first node to a second node may be collected via a probe. An identifier of the second node may be identified. A determination as to whether the message is a notification message is made. A key performance indicator type for the control plane signaling data packet may be determined. A key performance indicator of the key performance indicator type may be generate from content of the control plane signaling data packet.

Systems and methods for handling notification messages in a 5G network

In some embodiments, a non-transitory computer readable medium is disclosed. In some embodiments, the medium includes instructions for providing a mobile user monitoring solution that, when executed by a processor, cause the processor to capture a first message transmitted over an Ninterface, extract at least one type of session ID and a first Next Generation Application Protocol (NGAP) tunnel endpoint identifier (TEID) from the first message, store the at least one type of session ID and the first NGAP TEID in a first Nprotocol data unit (PDU) session record, capture a second message transmitted over an Ninterface, extract a general packet radio service (GPRS) tunneling protocol (GTP)-user plane (U) TEID from the second message, wherein the GTP-U TEID matches the first NGAP TIED, and retrieve information associated with session details record using the GTP-U TEID.

5G N3 data plane enrichment using N11 interface in a monitoring system

An illustrative embodiment disclosed herein is a non-transitory computer readable medium. The medium includes instructions for providing a mobile user monitoring solution that, when executed by a processor, cause the processor to identify a user database record associated with a user equipment (UE) using a mobile identity (ID), associate a Next Generation application protocol (NGAP) session with the user database record using an NGAP ID, capture a ciphered message associated with the NGAP session, decipher the ciphered message associated with the NGAP session, extract, from the deciphered message, session details associated with the UE, and store the session details in a session detail record.

5G N1/N2 interface monitoring system

A method for restoring an HPACK table is disclosed. A static table is maintained. Control plane signaling data packets are collected via a probe. A dynamic table is generated from the control plane signaling data packets. An event affecting operation of the probe may be detected. A first control plane signaling data packet may be collected by the probe subsequent to detection of the event. The dynamic table may be reorganized. The reorganized dynamic table may be stored in memory.

Systems and methods for HPACK table restoration

An illustrative embodiment disclosed herein is a non-transitory computer readable medium. In some aspects, the non-transitory computer readable medium includes instructions for providing a mobile user monitoring solution that, when executed by a processor, cause the processor to capture a transaction transmitted over an N12 interface, extract, from the transaction, one of an expected response (XRES) or an authentication token (AUTN), a user identifier (ID), and a cipher key, capture a first message transmitted over an N1 interface, and determine that the first message is associated with the user ID and the cipher key extracted from the transaction.

5G NAS deciphering enhance rate of convergence mechanism

In some embodiments, a non-transitory computer readable medium is disclosed. In some embodiments, the medium includes instructions for providing a mobile user monitoring solution that, when executed by a processor, cause the processor to capture a first message transmitted over an N11 interface, extract at least one type of session ID and a first Next Generation Application Protocol (NGAP) tunnel endpoint identifier (TEID) from the first message, store the at least one type of session ID and the first NGAP TEID in a first N11 protocol data unit (PDU) session record, capture a second message transmitted over an N3 interface, extract a general packet radio service (GPRS) tunneling protocol (GTP)-user plane (U) TEID from the second message, wherein the GTP-U TEID matches the first NGAP TIED, and retrieve information associated with session details record using the GTP-U TEID.

A system and method is provided for calculating session initiation protocol (SIP) key performance indicators (KPIs) for multimedia communication in a network accessing network packets monitored over time. The method includes accessing network packets monitored over time, detecting a SIP response message of the monitored network packets, and accounting for the detected SIP response message in a time window of a series of consecutive time windows that includes the SIP response message's associated observed time. The SIP response message has an associated observed time at which the monitored SIP message was observed during monitoring. The method further includes pairing a SIP request message expected to be paired with the detected SIP response message with the detected SIP response message and accounting for the paired SIP request message in the time window with which the detected SIP response message is accounted. The method further includes calculating a KPI for the time window using the detected SIP response message and its paired SIP request message that are accounted for in the time window.

System and method for calculating SIP KPIs for a time window

First and second pluralities of packets transmitted between UE and the USN over a first interface and a second interface are continuously captured. The first, second and third pluralities contains temporary and permanent identifying information and ciphering key information. A fourth plurality of packets transmitted between the USN and a HSS over a fourth interface is captured. The temporary, permanent identifying information and the ciphering key information are correlated to determine mappings stored in a data repository. A fifth plurality transmitted over a fifth interface is continuously captured. Permanent identifying information corresponding to the temporary identifying information retrieved from the unciphered packets of the fifth plurality is retrieved from the data repository based on the stored mappings. NAS deciphering key information corresponding to the retrieved permanent identifying information is retrieved. The ciphered packets of the fifth plurality of packets are deciphered based on the retrieved NAS deciphering key information.

Monitoring deciphered S1 packets on unified serving nodes

A plurality of data packets is received from a wireless communication system. At least one of SIP signaling messages and S1-AP signaling messages associated with calls being made or attempted in the wireless communication system are analyzed for a specified time period to identify one or more dropped calls. At least one of SIP signaling error codes and S1-AP signaling cause codes associated with the identified dropped calls are analyzed to identify one or more call drop reasons. An ASI data set is generated based on the analysis of the at least one of the SIP signaling messages and the S1-AP signaling messages and based on the analysis of the at least one of the SIP signaling error codes and the S1-AP signaling cause codes.

Growing community of inventors

San Jose, CA, United States of America

Sandeep Prasad