Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
MONITORING SYSTEM
Table of Content
1
Executive Summary.......................................................................3
1.1
The Need For Real-Time...........................................................4
1.2
Enhanced Correlated Intelligence.............................................5
1.3
Customer Centric Service Management....................................5
Business Benefits..........................................................................7
Solution Overview.........................................................................9
Core Concepts.............................................................................43
6.1
Group Concepts.....................................................................43
6.2
Correlation Concept...............................................................43
6.3
Synchronization Technique....................................................44
6.3.1 Synchronization at IPXPlorer Flex level...........................................45
6.3.2 Synchronization of IPXPlorer Flex at site level.................................45
6.3.3 Synchronization of QXManager and IPXPlorer Flex at network level46
1 Executive Summary
globeOSS Monitoring Solution is the truly the one-stop
service/customer oriented solution available in the industry. It
www.globeoss.com
www.globeoss.com
www.globeoss.com
possible. The increased data volumes and requirement for near real
time information availability will require a system that can collect
information from the network in real-time and presenting the data in
near real-time.
Moving into IP, the data rate is at gigabyte level. Traditional passive
probe providers doing processing at the software level is going to
make the solution extremely expensive and clunky. A new approach
is needed in terms of processing. The passive probe has to collect
and process the signaling data at the hardware level to achieve the
performance level required and therefore driving down the cost of
the solution significantly.
www.globeoss.com
www.globeoss.com
2 Business Benefits
The challenge by modern network operators to move from network
based management to customer centric management. The drive
towards customer centricity is no longer an option as the network is
getting more complex with many complex services. The challenges
are described in the diagram below and globeOSS Service
Assurance Solution addresses those needs.
www.globeoss.com
www.globeoss.com
This is where we play the major role. By using the new affordable
passive probe technology, we are able to correlate the signaling
plane, user plane and transport plane in real-time. What this means
is that we can view the user experience and relate that to
the handset/devices
network parts end-to-end
location of the faults
services
network elements
protocols etc.
3 Solution Overview
The proposed solution is described as per the diagram below.
www.globeoss.com
www.globeoss.com
10
Whats New?
www.globeoss.com
11
Specifically designed for the high performance for IP, NGN and
monitoring User Traffic in real-time
Full analysis and correlation of Control and User planes
Top down approach for Analysis and Problem Resolution
Next Generation IPDR: Evolution of Call Detail Record towards
Application and Service Detail Record ->ASDR
Intuitive and straight forward web-based and built-in GUIs
Cuts over 70% the weight, size, and the power consumption of
traditional Protocol Analyzers
Integration with Net-Flow and IP-Fix
The IPXPlorer applications covers all the legacy, current and future
networks.
www.globeoss.com
12
www.globeoss.com
13
4.1IP Core
Telecommunication network is moving towards all IP network and
the solution provides an evolution path towards LTE and SAE.
www.globeoss.com
14
www.globeoss.com
15
www.globeoss.com
16
www.globeoss.com
17
www.globeoss.com
18
www.globeoss.com
19
www.globeoss.com
20
iii. QoS: probes calculate QoS scores for audio and video
streams payloads (for telephony, videocommunication) and for signalling sections like call
completion, PDP context attach-detach, multicast
joining and releasing etc. The results of QoS are
stored in the ASDR. QXManager aggregates QoS
statistics for site, service, group, or specific end to
end communication and present the results to the
User.
iv. Trend: This group is similar to Traffic but based on
historical data that allows the operator to have a
view on how events, parameters, and traffic figures
have changed over a period as shown in the example
of the next figure.
www.globeoss.com
21
5.3IPXPlorer Flex
IPXPlorer Flex is a rack mount solution for IP and
telecommunication centres. Its High Performance, Large Storage,
and Analysis capabilities make IPXPlorer Flex the perfect tool for
broad Network Monitoring; Data, Voice and Video Recording; End-toEnd Session Trace and Troubleshooting; and Quality of Service and
Quality of Experience measurements.
www.globeoss.com
22
Performances:
o 4.5 Gbps packet recording
o 2.0 Million packet/second analysis capability
o 15 Gbps data capture and hardware filtering capability
Up to 10 Simultaneous Web Clients
AC Redundant Power Supply (DC -48 optional)
4U 19 rack mount
2 x 10GE analysis ports
4 to 8 LAN GE/SDH-SONET analysis ports
2 GE Management ports
8->48TB built in storage with high performance RAID system
24 Hot swappable disk bays
Fiber Channel for SAN
Performances:
o 4.5 Gbps packet recording
o 2.5 Million packet/second analysis capability
o Over 20 Gbps data capture and hardware filtering
capability
Up to 10 Simultaneous Web Clients
AC Redundant Power Supply (DC -48 optional)
www.globeoss.com
23
5.5IPXplorer Performances
IPXPlorer combines hardware and software to set new
performances records in the industry, such as:
www.globeoss.com
24
10GE ready
5.6Multiple Technologies
The IPXPlorer is a unique solution in the market that covers wide
range of technologies such as:
www.globeoss.com
25
ASDR generation
KPIs
Traffic analysis
Drill-down
Reporting
Protocol decode
ASDR to packets
Filtering for each field of ASDR and analysis
Detail Records Forwarding
www.globeoss.com
26
www.globeoss.com
27
5.8Open Connectivity
The IPXPlorer is designed to be open to interact with other OSS /
BSS systems.
This includes:
www.globeoss.com
28
ASDR
IPDR
TDR
CDR
limited to
Signaling
information and
call control in
telephony
mainly for
Control plane
information
such as
signaling for
roaming, sms,
mobility, and
intelligent
network
services
limited to the
UDP or TCP
session and
without any
reference to the
application or
service
www.globeoss.com
29
www.globeoss.com
30
5.10
IPXPlorer Flex has the ability to capture packets and frames and
elaborate them in sessions or transaction called xDR- Detail
Records. xDR are generated at different protocol levels which are
part of the same service transaction and are linked together into the
ASDR as explained in the previous section.
The ASDR has links to the different xDR (i.e. IPDR, CDR, TDR,
and/or SDR), so the User can zoom from a specific ASDR to the
xDR components and vice versa. The xDR has links to the packets
and frames stored in PCAP format in the IPXPlorer Flex. Therefore,
the User can drill-down from ASDR to xDR to frames and packets.
IPXPlorer Flex has also a built-in engine to decode packets and
frames. This engine is the Wireshark open-source that is derivate
from ethereal project. Because Wireshark does not support all the
protocols required by IPXPlorer Flex, MuTech has expanded and
completed the open-source project by fixing and adding the missing
and non working parts. When the User drills-down from ASDR or
xDR to packets, the protocol decode shown on screen is generated
with MuTech modified and supported Wireshark engine.
www.globeoss.com
31
With the decode engine, the User gets full decode with mnemonic
messages of all the main protocols fields, layers split presentation,
and hex-ASCII view.
IPXPlorer Flex has also a graphical engine called HEMS. It is able to
show the message flows between the hosts for each leg part of the
entire communication process. In this case, the User selects the
packets decode starting from ASDR, the entire end-to-end process
flow with packets/frames decode is shown.
This capability is available on the local and remote web-browser
based GUI. A sample of protocol decode with graphical message
flow on web GUI is shown in the previous figure.
The graphical presentation of message flow is also available at
QXManager level after the correlation process for a wide network
end-to-end communication process involving multiple IPXPlorer
Flex probes.
www.globeoss.com
32
5.11
Alarm Generation
www.globeoss.com
33
The main sources of the event that can be set to generate alarms
are the followings:
ASDR
xDR
Statistic Counters
Quality of Service Analysis
Call Completion Analysis.
www.globeoss.com
34
Warning
Notice
Informal
Debug
o Group: it allows the User to specify if the selected event
should be considered for all the traffic being monitored
or only the traffic related to a Group.
o Set Condition: it allows the User to set the number or
value, and the mathematical operator which an event
should match before the alarm conditions are met. This
does not necessarily mean that the alarm will be
generated, but indicates that the conditions have
become true. An alarm will be generated when these
conditions are satisfied and the conditions configured in
Set Mode are verified. The possible choices for the
mathematical operators for conditions are:
Greater Than (>)
Greater Than or Equal To (>=)
Less Than (<)
Less Than or Equal To (< =)
Equal To (=)
o Set Mode: a User can determine the frequency of an
event that would satisfy the conditions set in the
previous field (Set Condition) before the Instrument
generates a real alarm. This is how a User can set a
hysteresis cycle for an alarm. The Set Mode allows the
following choices:
Single Event: when enabled, the alarm will be
generated every time the alarm condition
becomes true.
Interval Time: this enables a period of time in
seconds over which the instrument evaluates the
events as set in the conditions. If it is the case
where the event is true (the event matches the
Set Condition described above), the instrument
calculates the percentage of true events against
the total number of the same events in the time
period (true and false events). If the percentage
of true events is equal to or greater than the value
set in the Threshold (%) field, the alarm will be
generated. This is a very sophisticated system
because it evaluates the true and false alarms
over a period of time to avoid false alarms, which
may be generated for transitional events.
Counts: when enabled, the alarm will be
generated when the number of true events
www.globeoss.com
35
5.12
KPIs
The solutions come with more than 3500 KPIs out of the box,
including the following:
o IP impairments such as network response time, latency, jitter,
packet loss, duplication, and retransmission, fragmentation
level
o Generic Applications impairments such as application
response time, traffic figures per direction, retransmissions,
speed in uplink & downlink.
o Specific Service impairments and performance such as session
established, released and duration time, real User perceived
speed, QoS scoring, telephony type analysis (ASR, ABR, Call
attempts etc)
o Inter-Protocol and inter-Site correlation impairments such as
transit delay, message loss, overhead, efficiency, speed
bottlenecks, QoS effectiveness .
*Please refer to the KPI document for further detail.
www.globeoss.com
36
5.13
Result Aggregation
www.globeoss.com
37
5.14
www.globeoss.com
38
5.15
www.globeoss.com
39
5.16
Probe Management
www.globeoss.com
40
5.17
Probe Inventory
www.globeoss.com
41
5.18
Flexible Dashboard
The solution comes with flexible dashboard. Each user can save
their own environment for future use. It can also be easily
customizable.
5.19
Results Collection
Complete Analysis is
applications-services:
available
for
network,
transports
and
www.globeoss.com
42
6 Core Concepts
6.1Group Concepts
One of the most interesting features of IPXPlorer Flex is the
capability to classify results in groups at the time of data acquisition
and analysis. In other words, the probes analyze the traffic in real
time and can divide the results of analysis in groups programmed by
the User.
Groups can be characterized by specific device or network
addresses, VLAN, point codes, services type, UDP or TCP ports and
many other elements. This grouping feature allows the User to get
results of specific traffic groups quickly without having to wait for
database query generation at a centralised level.
The results per-group as well as the global network results are
available locally at the probe level or at the centralised level.
In case of centralised system, MuTech provides the QXManager as
Centrex Viewer and Manager of IPXPlorer Flex probes.
6.2Correlation Concept
Correlation in the IPXPlorer Flex is the ability to link together
sessions, calls, transactions, pdp-context, or any signalling basedprocedures which belong to different protocols and running on
different type of physical interfaces, but are part of the same endto-end user communication.
For example, when a data connection is requested from a ADSL
Modem to retrieve emails from a remote POP3 server, this
connection goes through different network elements and are transcoded in different protocols (for example BRAS, Ip Interfaces and
then of generic IP connection with possible insertion of Gs in case of
automatic association for deciphering).
When IPXPlorer Flex is connected to the different network
elements monitoring points, it has the ability to monitor all the
messages belonging to the same call, in this result section a User
can see the actual end-to-end conversation between the two end
users linked together.
The correlation in IPXPlorer Flex architecture is always based on
xDR or better on ASDR. The intrinsic capability of ASDR to link
packets and frames, allows to the correlation engine to show the
www.globeoss.com
43
The operator at QXM level can recall on the console the correlation
at:
www.globeoss.com
44
6.3Synchronization Technique
When more measurement interfaces or ports are involved in
monitoring multiple network points, synchronization and timing
become an important issue to guarantee that the entire protocols
event captured are stamped with the same clock and precision.
This situation is even more important when multiple sites are
involved in a distributed monitoring network.
There are two different situations involving synchronization:
o Ensure all the measurements ports sample the incoming
packets and frames with a common time ticks (or clock);
o Guarantee the same absolute time through all the probes.
MuTech has developed a specific technique in the MT-OS running on
IPXPlorer Flex to provide all the necessary level of timing and
synchronization. There are three level of action:
o At probe level;
o At site level;
o At system level.
6.3.1 Synchronization at IPXPlorer Flex level
Each IPXPlorer Flex has multiple measurement interfaces as
described in the section 1.3.1. All these interfaces are synchronized
to a common timing signal provided by a timing card built-in the
probe.
This timing card generates and distributes a common clock called
Synch bus and all the interfaces synchronize its time stamp clock to
this clock (Please refer to the Figure 7).
The timestamp resolution of IPXPlorer Flex is 10 nanoseconds. The
frequency or phase shifting between measurements interface is
avoided thanks to the master clock.
www.globeoss.com
45
www.globeoss.com
46
7.1All-IP Package
www.globeoss.com
47
7.2WEB Package
7.3Email Package
7.4DNS Package
7.5AAA Package
7.6Sigtran Package
www.globeoss.com
48
7.7VoIP Package
7.8IMS Package
www.globeoss.com
49
IP, Point Code, area and country code Logical Mapping and
Symbolic name assignment
Correlation with ISUP
Sources: ALL-IP
7.9IPTV Package
7.10
7.11
VOD Package
P2P Package
www.globeoss.com
50