NetScan Real-time network monitoring

Transcription

1 NetScan Real-time network monitoring

2 NetScan in brief Real-time, continues mobile network monitoring, processing and data analysis. Covers 2G RAN (A, Abis) and selected 3G RAN (IuCS, IuPS) interfaces. Shared-RAN (MOCN & MORAN) support including secure separation of data between MNO s involved. Reach set of pre-defined KPI s (CSSR, CSTR, ) aggregated per cell, project, region and BSC/RNC, and cluster of cells. Selected KPI s are aggregated per roaming partner, terminal type and vendor. Performance statistics database and real-time alarming per cell and VIPs. Network-wide call tracing with message decoding down to bit level. Open architecture ready to deploy new features (new interfaces like Gb, Iub, Core-network interfaces). 2

3 NetScan in 2014 (plans) Support for Gn interface at 10Gb/s (User and Control Plane monitoring and archiving) at the end of Alpha-version trial in September (1Gb/s). Completed! Support for CS-core interfaces (ISUP, MAP, CAP) Support for S1 interface at the end of Completed! 3

4 System architecture Highly distributed, scalable system architecture to cope with high load. Network signaling monitored through a chain of smart TAP s feeding local servers with pre-filtered data. Captured PDU s are decoded and processed to calculate KPI s and correlate on various levels. Supports multi-interface correlation, including inter-bsc and intersystem handovers. 4

5 NetProbe 1G 40 inputs 1 GbE optical (splitter 80/20, 20 pairs). 5 outputs (1 x 1GbE copper, 4 x 10/1GbE). HW/SW filter. Power 48 V DC. Size: 1U (E2000) or 1,5 U (SC). 10 GbE version currently under development. Expected in Q

6 NetProbe 10G Higher port speeds comparing to NetProbe 1G model. Passively connected to the monitored network. Active data aggregation and processing. Up to 880 Gbps real-time interception and analysis of 10G data streams. Full Packet Capture (FPC). Deep Packet Inspection (DPI). Optional, extendable in 5GB/s steps DPI+ functionality covering full packet inspection and modification available for up to 120Gbps of processed data in real time (covering ca. 60% of total switching capacity). 6

7 NetProbe 10G Customisable data filtering rules. Individual tagging of output streams according to the user criteria (VLAN, QOS). 20 x 10GbE optical SFP+ ports for network monitoring (supporting 10 x 10GbE links). 20 x two-way 10GbE optical SFP+ ports for data forwarding. 1 x 1GbE electrical port for management. 2U casing to be installed in 19 racks. 7

8 Local Server (for CP processing) Chassis: 2U 826TQ-R500LPB Motherboard: X9SRL-F Processor Intel E v2 (12 cores). RAM: max. 64 GB (8x Hynix 8GB DDR3 1600) HD matrix: max 40 TB (10x WD 4TB Re) LAN: max 6x 10Gb (3x Intell X520-DA2) 8

9 Two-step data processing Captured PDU s are streamed transparently into a file to guarantee lossless data acquisition and buffer picks of traffic. PDU s from recorded streams are processed, correlated into transactions at various levels and indexed. Some low-level statistics are also calculated at this stage. Records and statistics are stored into a local DB while processed PDU s are kept in indexed files. 9

10 Distributed information storage Captured data-streams are processed in real time on local servers. Captured PDU s are correlated at various levels to form DCH transaction, RAN-Core association, NAS transaction, etc. Transaction records and statistics are stored in distributed database. Users access data in a system through central server and WEBbased application. 10

11 User-friendly interface Users access system via easy-to-use, intuitive WEB application. No single component needs to be installed on the end-user computer. Just WEB browser. Secure access via ciphered connection and domain-based user login (SSO - Single Sign-On). User access-rights are controlled by system administrator and allows for geographical and MNO s data isolation. All user activity is securely logged to prevent sensitive data leakage. 11

12 User-friendly interface 12

13 Network status indication Network-status screen visualises values of statistics with colours indicating violation of statistics' pre-defined thresholds. All elements on screen are active with a single click one can see statistic details, detailed cell analysis or signalling transactions. 13

14 Statistics Multiple statistics in one table. Graphical visualisation of many statistics in common geo- and time contexts. Graphical visualisation of a single statistic in many geo- and time contexts. 14

15 Statistics - table 15

16 Statistics - charts 16

17 Statistics - details 17

18 Statistics - daily trends 18

19 Statistics - hourly trends 19

20 Statistics - details 20

21 Roaming statistics Selected statistics are calculated per Home Network of each mobile visitor. Roaming statistics can be narrowed into region, project or particular BSC/RNC. Table can be sorted per each column. 21

22 Roaming statistics 22

23 User-terminal statistics Selected statistics are distributed per terminal model and terminal vendor (TAC distribution). 23

24 Real-time monitoring module Statistic-based alarming: Selected RNC/BSC statistic values can be monitored in 1-minute intervals. Selected Cell statistic values can be monitored in 30-minute (or longer) intervals. Statistic values are compared with dynamic thresholds for Warning/Alarm levels. Statistic thresholds might dynamically change based on the day of the week and/or time of day. 24

25 Real-time monitoring module High Value Account (HVA) based alarming: NetScan holds database of HVA subscribers (IMSI s and/or IMEI s). HVA Subscribers might be grouped by SLA-based classes. QoE related events for HVA Subscribers are monitored in real-time: CS / PS Registration Failure. Call Setup Failure. Call Drop. PS Session Setup Failure. PS Service Access Failure. Alarm/Warning event is generated based on a number of events detected over the course of an hour. Alarm/Warning criteria can be configured per event type and SLA class. 25

26 Real-time monitoring module - threshold configuration Statistic alarm/warning thresholds can dynamically adopt to the day of the week and time of day. 26

27 Real-time monitoring module - HVA alarm criteria configuration HVA related alarms can be triggered per SLA-class and type of event. 27

28 Real-time monitoring module - alarm status on map Alarms can be aggregated into network regions. Alarm details are shown on request. After map zooming, cell and controllers with active alarms are visualised. User can select which alarms are visible on a map. 28

29 Real-time monitoring module - alarm details view, statistics 29

30 Real-time monitoring module - alarm details view, HVA events 30

31 Call tracing Calls can be traced based on: localization (Region -> Project -> BSC/RNC -> cell), terminal or user identity (IMEI, IMSI, TMSI), selected transaction parameters (termination cause, type of transaction, etc.), specific events like unsuccessful HO. 31

32 Call tracing - list 32

33 Call tracing - message list 33

34 Call tracing - graph 34

35 Transaction details Calls can be analysed in tabular and graphical formats. Another window conveniently illustrates handover flows. Last but not least, a window shows all parameters reported in MR messages and all important RAN events. Measurements are correlated with particular cells. 35

36 Transaction details 36

37 Cell analysis 3-dimensional graphs illustrate correlation between specific measurements reported in MR messages for the selected cell and time. Graphs are available for: down-link Rx level vs quality, up-link Rx level vs quality, timing advance vs up-link quality, timing advance vs down-link quality. 37

38 Roadmap Support for 3G RAN interfaces (Iub, Iur). eutran monitoring (S1 interface, Uu based on enb trace ports). Geo-location. Advanced algorithms to support radio-planning (HO relations optimisation, coverage analysis, geo-service analysis). Support for PS & CS Core interfaces. 38

39 Thank you!