netscan real-time network monitoring - gs systems · pdf filereal-time network monitoring...
TRANSCRIPT
NetScanReal-time network monitoring
Real-time, continues mobile network monitoring, processing and data analysis.
Covers 2G RAN (A, Abis) and selected 3G RAN (IuCS, IuPS) interfaces.
Shared-RAN (MOCN & MORAN) support including secure separation of data between MNO’s involved.
Reach set of pre-defined KPI’s (CSSR, CSTR, …) aggregated per cell, project, region and BSC/RNC, and cluster of cells.
Selected KPI’s are aggregated per roaming partner, terminal type and vendor.
Performance statistics database and real-time alarming per cell and VIPs.
Network-wide call tracing with message decoding down to bit level.
Open architecture ready to deploy new features (new interfaces like Gb, Iub, Core-network interfaces).
2
NetScan© in brief
Support for Gn interface at 10Gb/s (User and Control Plane monitoring and archiving) at the end of 2014. Alpha-version trial in September (1Gb/s). Completed!
Support for CS-core interfaces (ISUP, MAP, CAP)
Support for S1 interface at the end of 2014. Completed!
3
NetScan© in 2014 (plans)
Highly distributed, scalable system architecture to cope with high load.
Network signaling monitored through a chain of smart TAP’s feeding local servers with pre-filtered data.
Captured PDU’s are decoded and processed to calculate KPI’s and correlate on various levels.
Supports multi-interface correlation, including inter-BSC and inter-system handovers.
4
System architecture
40 inputs 1 GbE optical (splitter 80/20, 20 pairs).
5 outputs (1 x 1GbE copper, 4 x 10/1GbE).
HW/SW filter.
Power 48 V DC.
Size: 1U (E2000) or 1,5 U (SC).
10 GbE version currently under development. Expected in Q4 2014.
5
NetProbe 1G
Higher port speeds comparing to NetProbe 1G model.
Passively connected to the monitored network.
Active data aggregation and processing.
Up to 880 Gbps real-time interception and analysis of 10G data streams.
Full Packet Capture (FPC).
Deep Packet Inspection (DPI).
Optional, extendable in 5GB/s steps DPI+ functionality covering full packet inspection and modification available for up to 120Gbps of processed data in real time (covering ca. 60% of total switching capacity).
6
NetProbe 10G
Customisable data filtering rules.
Individual tagging of output streams according to the user criteria (VLAN, QOS).
20 x 10GbE optical SFP+ ports for network monitoring (supporting 10 x 10GbE links).
20 x two-way 10GbE optical SFP+ ports for data forwarding.
1 x 1GbE electrical port for management.
2U casing to be installed in 19’’ racks.
7
NetProbe 10G
Chassis: 2U 826TQ-R500LPB
Motherboard: X9SRL-F
Processor Intel E5‐2695 v2 (12 cores).
RAM: max. 64 GB (8x Hynix 8GB DDR3‐1600)
HD matrix: max 40 TB (10x WD 4TB Re)
LAN: max 6x 10Gb (3x Intell X520-DA2)
8
Local Server (for CP processing)
Captured PDU’s are streamed transparently into a file to guarantee lossless data acquisition and buffer picks of traffic.
PDU’s from recorded streams are processed, correlated into transactions at various levels and indexed. Some low-level statistics are also calculated at this stage. Records and statistics are stored into a local DB while processed PDU’s are kept in indexed files.
9
Two-step data processing
Captured data-streams are processed in real time on local servers.
Captured PDU’s are correlated at various levels to form DCH transaction, RAN-Core association, NAS transaction, etc.
Transaction records and statistics are stored in distributed database.
Users access data in a system through central server and WEB-based application.
10
Distributed information storage
Users access system via easy-to-use, intuitive WEB application.
No single component needs to be installed on the end-user computer. Just WEB browser.
Secure access via ciphered connection and domain-based user login (SSO - Single Sign-On).
User access-rights are controlled by system administrator and allows for geographical and MNO’s data isolation.
All user activity is securely logged to prevent sensitive data leakage.
11
User-friendly interface
12
User-friendly interface
Network-status screen visualises values of statistics with coloursindicating violation of statistics' pre-defined thresholds.
All elements on screen are active – with a single click one can see statistic details, detailed cell analysis or signalling transactions.
13
Network status indication
Multiple statistics in one table.
Graphical visualisation of many statistics in common geo- and time contexts.
Graphical visualisation of a single statistic in many geo- and time contexts.
14
Statistics
15
Statistics - table
16
Statistics - charts
17
Statistics - details
18
Statistics - daily trends
19
Statistics - hourly trends
20
Statistics - details
Selected statistics are calculated per Home Network of each mobile visitor.
Roaming statistics can be narrowed into region, project or particular BSC/RNC.
Table can be sorted per each column.
21
Roaming statistics
22
Roaming statistics
Selected statistics are distributed per terminal model and terminal vendor (TAC distribution).
23
User-terminal statistics
Statistic-based alarming:
Selected RNC/BSC statistic values can be monitored in 1-minute intervals.
Selected Cell statistic values can be monitored in 30-minute (or longer) intervals.
Statistic values are compared with dynamic thresholds for Warning/Alarm levels.
Statistic thresholds might dynamically change based on the day of the week and/or time of day.
24
Real-time monitoring module
High Value Account (HVA) based alarming:
NetScan holds database of HVA subscribers (IMSI’s and/or IMEI’s). HVA Subscribers might be grouped by SLA-based classes.
QoE – related events for HVA Subscribers are monitored in real-time:
• CS / PS Registration Failure.
• Call Setup Failure.
• Call Drop.
• PS Session Setup Failure.
• PS Service Access Failure.
Alarm/Warning event is generated based on a number of events detected over the course of an hour.
Alarm/Warning criteria can be configured per event type and SLA class.
25
Real-time monitoring module
Statistic alarm/warning thresholds can dynamically adopt to the day of the week and time of day.
26
Real-time monitoring module - threshold configuration
HVA–related alarms can be triggered per SLA-class and type of event.
27
Real-time monitoring module - HVA alarm criteria configuration
Alarms can be aggregated into network regions.
Alarm details are shown on request.
After map zooming, cell and controllers with active alarms are visualised.
User can select which alarmsare visible on a map.
28
Real-time monitoring module - alarm status on map
29
Real-time monitoring module - alarm details view, statistics
30
Real-time monitoring module - alarm details view, HVA events
Calls can be traced based on:
localization (Region -> Project -> BSC/RNC -> cell),
terminal or user identity (IMEI, IMSI, TMSI),
selected transaction parameters (termination cause, type of transaction, etc.),
specific events – like unsuccessful HO.
31
Call tracing
32
Call tracing - list
33
Call tracing - message list
34
Call tracing - graph
Calls can be analysed in tabular and graphical formats.
Another window conveniently illustrates handover flows.
Last but not least, a window shows all parameters reported in MR messages and all important RAN events.
Measurements are correlated with particular cells.
35
Transaction details
36
Transaction details
3-dimensional graphs illustrate correlation between specific measurements reported in MR messages for the selected cell and time.
Graphs are available for: down-link Rx level vs quality, up-link Rx level vs quality, timing advance vs up-link quality, timing advance vs down-link quality.
37
Cell analysis
Support for 3G RAN interfaces (Iub, Iur).
eUTRAN monitoring (S1 interface, Uu based on eNB trace ports).
Geo-location.
Advanced algorithms to support radio-planning (HO relations optimisation, coverage analysis, geo-service analysis).
Support for PS & CS Core interfaces.
38
Roadmap
Thank you !WWW.NETSCAN.PL