Traffic Perspective Application Intelligence

Total Page:16

File Type:pdf, Size:1020Kb

Traffic Perspective Application Intelligence DATASHEET Traffic Perspective Application Intelligence Traffic Perspective is the core technology that drives Sandvine’s Subscriber Experience Intelligence for thousands Intelligence solutions. Based on Datastream Recognition Definition Language (DRDL), Sandvine’s industry-leading deep packet inspection (DPI) engine, Traffic Perspectives of Internet Applications identifies thousands of applications and protocols on broadband networks. This updated weekly application visibility is used throughout Sandvine’s solutions, and the speed and quality Traffic Perspective leverages of our application signatures is a competitive differenatiator for our customers for Sandvine’s Datastream analytics and enforcement. Recognition Definition DRDL can identify both encrypted and unencrypted applications with a high degree of Language (DRDL) industry granularity. Many “DPI” engines recognize encrytped streams solely by their protocol leading DPI engine. container - HTTPS, TLS, etc - and not as the core application generating the traffic. Traffic Perspective will break out traffic into the individual datastreams that use encryption protocols Traffic Perspective combines as a transport layer - popular applications like Skype and uTorrent as well as content from multiple recognition methods Facebook and YouTube. DRDL combines multiple recgonition techniques including hueristics, to identify encrypted and pattern matching, protocol inspection, and property extraction to quickly identify the unencrypted applications applications with minimal latency to ensure that policies are enforced in real time for all traffic on the network. Each connection on the network is inspected and categorized with the Sandvine Categories (Web, Streaming Video, Messaging, Gaming, etc) as well as associated with the application generating the traffic. The PRE inspecting the traffic collects the statistics and application properties for each connection for us in analytics and policy enforcement. These statistics are stored in the Insights database or streamed via IPFix for Big Data Integration. HIGH-VALUE USE CASES • Network & Subscriber Analytics Understand the applications that your subscribers are consuming and feed that into the Insights platform or Big Data systems • Service Creation Gain insights into what content and applications your subscribers are consuming for marketing offers or service plans • Policy Enforcement & Charging Differentiated charging and zero rating at the application and content level • Congestion Management & Fair Usage Subscriber-based fairness and congestion management based on subscriber tiers and application-based policies • First Call Resolution for Customer Care Integration with Customer Care Insights provides a subscriber-centric view to enable first call resolution for fixed, mobile, or WiFi subscribers through Root Cause Analysis and real-time application visibility 1 SANDVINE.COM DATASHEET TRAFFIC PERSPECTIVE TECHNOLOGY Traffic Perspective is visualized throgh the PacketLogic Client and the Insights product family. Within the PacketLogic client, Dynamic LiveView displays the aggregate of all of the traffic active on the network, and can drill down to a single flow for a subscriber to provide all of the attributes of that flow for network forensics or troubleshooting. The types of information available for each flow includes bytes and packets, length of the flow, policy or statistics rules matched, packets dropped and latency due to traffic shaping, URLs, and many other attributes that are associated with the flow. Dynamic LiveView can also create dynamic views that filter out specific information based on network attributes, i.e. “What applciations are iPhone subscribers consuming at Cell Site XYZ?”. The Insights product family uses Traffic Perspective to analyze network and subscriber trends based on the applications being consumed by subscribers. Customer Care Insights has a real-time view of the applications being used by a subscriber to assist in troublshooting and problem isolation, providing a unique view into the subscriber experience for customer care agents. Figure 1 TRAFFIC Service Provider Access Network Service Provider Core Network Applications PERSPECTIVE IN OSS/BSS/PCRF Subscriber FIXED, MOBILE, AND /OCS/OFCS Perspectives WIFI DEPLOYMENTS Traffic Policy Perspective Mobile Interfaces Radio Access Network (RAN) Cable/DSL/FTH Router Internet Wi-Fi/Fixed PacketLogic Client PacketLogic Insights Wireless (Dynamic LiveView) (Engineering, Customer Care Executive) Content v20171219 ABOUT SANDVINE Sandvine helps organizations run world-class networks with Active Network Intelligence, leveraging machine learning analytics and closed-loop automation to identify and adapt to network behavior in real-time. With Sandvine, organizations have the power of a highly automated platform from a single vendor that delivers a deep understanding of their network data to drive faster, better decisions. For more information, visit sandvine.com or follow Sandvine on Twitter at @Sandvine. USA EUROPE CANADA ASIA 47448 Fremont Blvd, Birger Svenssons Väg 408 Albert Street, Ardash Palm Retreat, Fremont, 28D Waterloo, Bellandur, Bangalore, CA 94538, 432 40 Varberg, Ontario N2L 3V3, Karnataka 560103, USA Sweden Canada India T. +1 510.230.2777 T. +46 (0)340.48 38 00 T. +1 (0)519.880.2600 T. +91 80677.43333 Copyright © © 2018 2015 Sandvine. Sandvine All Networks.rights reserved. All rights All other reserved. trademarks All other are propertytrademarks of their are respectiveproperty of owners. their respective owners. SANDVINE.COM.
Recommended publications
  • Net Neutrality Reloaded
    Luca Belli Editor Net Neutrality Reloaded: Net Neutrality Reloaded: Zero Rating, Specialised Service, Ad Blocking and Traffic Management Zero Rating, Specialised Service, Annual Report of the UN IGF Dynamic Coalition on Net Neutrality Ad Blocking and Traffic Management Luca Belli Editor Annual Report of the UN IGF This Report is the 2016 outcome of the IGF Dynamic Coalition on Network Neutrality (DCNN). The Report gathers a series of case studies on a variety Dynamic Coalition of net neutrality issues from the perspective of different stakeholders. The double purpose of this report is to trigger meaningful discussion on net on Net Neutrality neutrality trends, while providing informative material that may be used by researchers, policy-makers and civil society alike. Researchers, practitioners and policy-makers regularly contribute to the DCNN report, providing a wide range of heterogeneous views. Preface by Tim Wu In 2016, Zero Rating was by large the most debated net neutrality issue, as reflected by the considerable number of contributions focusing on the topic within this report. Such high number of analyses on zero rating seems particularly useful to meet the increasing demand of research exploring the pros and cons of price discrimination practices. Furthermore, the report examines other very relevant and discussed topics, such as specialised services, ad blocking and reasonable traffic management, providing useful insight on some of the most recent policy evolutions in a variety of countries. Net Neutrality Reloaded: Zero Rating,
    [Show full text]
  • Government-Wide Cyber Security
    White Paper Government-Wide Cyber Security Leveraging Network Intelligence Technology April 2009 Enabling True Network Intelligence Everywhere White Paper Government-Wide Cyber Security Executive Summary Governments and multi-government organizations can better support IT network security across applications and government functions with a common technology platform leveraging Network Intelligence building blocks. IT security continues to be the greatest challenge facing government CIOs worldwide. Most experts agree that governments require stronger partnerships between the public and private sectors for both better protection of government IT systems from intruders and for greater visibility into operators’ network traffic to fight crime. However, government systems and intelligence activities constitute a very sensitive information environment. Governments must proceed with caution when forming technology partnerships for hardening their IT network security. Melissa E. Hathaway, who in February 2009 was named to be the Obama Administration’s top cyber security official, points out how government IT organizations should be asking questions such as: Who designed the security technology? Who built the technology? Who operates and maintains the technology? Who upgrades the technology? Who retires the technology?1 Commercial-Off-The-Shelf (COTS) products are not always suited for government network security needs. Governments can better support network security across applications and government functions with a common technology platform consisting of reusable technology building blocks. Such a global approach would enable government organizations to control the development, performance and maintenance of security applications, while preserving the confidentiality of security mechanisms for detecting cyber criminals and protecting information. Qosmos Network Intelligence provides this capability. Qosmos Network Intelligence provides this capability with technology to extract detailed IP metadata from network traffic.
    [Show full text]
  • Understanding Packet Voice Protocols
    Understanding Packet Voice Protocols Introduction Over the past decade, the telecommunications industry has witnessed rapid changes in the way people and organizations communicate. Many of these changes spring from the explosive growth of the Internet and from applications based on the Internet Protocol (IP). The Internet has become a ubiquitous means of communication, and the total amount of packet-based network traffic has quickly surpassed traditional voice (circuit-switched) network traffic (DataQuest, 1998). In the wake of these technology advancements, it has become clear to telecommunications carriers, companies, and vendors that voice traffic and services will be one of the next major applications to take full advantage of IP. This expectation is based on the impact of a new set of technologies generally referred to as voice over IP (VoIP) or IP telephony. VoIP supplies many unique capabilities to the carriers and customers who depend on IP or other packet-based networks. The most important benefits include the following: · Cost Savings: By moving voice traffic to IP networks, companies can reduce or eliminate the toll charges associated with transporting calls over the public switched telephone network (PSTN). Service providers and end users can also conserve bandwidth by investing in additional capacity only when it is needed. This is made possible by the distributed nature of VoIP and by reduced operations costs as companies combine voice and data traffic onto one network. · Open Standards and Multivendor Interoperability: By adopting open standards, both businesses and service providers can purchase equipment from multiple vendors and eliminate their dependency on proprietary solutions. · Integrated Voice and Data Networks: By making voice "just another IP application," companies can build truly integrated networks for voice and data.
    [Show full text]
  • Using Social Media and Social Network Analysis in Law Enforcement
    C O R P O R A T I O N Using Social Media and Social Network Analysis in Law Enforcement Creating a Research Agenda, Including Business Cases, Protections, and Technology Needs John S. Hollywood, Michael J. D. Vermeer, Dulani Woods, Sean E. Goodison, Brian A. Jackson n April 2017, the National Institute of Justice convened an expert panel to assess, and identify high-priority needs Key Findings for, law enforcement’s use of two closely linked tech- nologies that have potential to provide key information • Expert panelists characterized business cases for employing social Ineeded to address crime risks, hold offenders accountable, media and social network analysis in law enforcement, including and ensure physical safety: social media analysis and social monitoring for short-term safety threats in postings; identifying network analysis. Social media analysis consists of meth- those at high risk of involvement in violence, either acutely or ods and tools to collect and analyze text, photos, video, chronically; and investigating specific crimes and organized crime and other material shared via social media systems, such networks. as Facebook and Twitter. Social network analysis is a type of data analysis that investigates social relationships and • The panel also specified a core case not to do: monitoring of First structures as represented by networks (which can also be Amendment–protected activity for vague purposes. called graphs). Social media, given that it reflects relation- • The panel specified a framework for providing computer security, ships inherently, is a key source of data for social network privacy, and civil rights protections when employing social media analysis; conversely, social network analysis is one key type and social network analysis.
    [Show full text]
  • The Development of Deep Packet Inspection Platform and Its Applications
    3rd International Conference on Intelligent Computational Systems (ICICS'2013) January 26-27, 2013 Hong Kong (China) The Development of Deep Packet Inspection Platform and Its Applications Yoonjae. Lee, Junseok. Oh, Joon Kyung. Lee, Dongwon. Kang, and Bong Gyou. Lee conditions of its development. In Chapter 3, we show the DPI Abstract— Due to the development of the mobile network platform that is developed in Korea. Lastly, the conclusion and and the wide use of mobile devices, mobile traffic has contribution will be presented in Chapter 4. significantly increased. Most advanced countries including Korea have developed various technologies to reduce heavy mobile traffic. This research has developed and utilized the DPI (Deep Packet Inspection) platform that has been considered as a solution for enhancing the mobile traffic flow. In this paper, the hardware and software components of the platform are described with its four utilization fields. Keywords—Deep Packet Inspection, Mobile Traffic, High-speed Internet Traffic Control and Analysis Platform (HITCAP), Data Traffic Control Fig. 1 Mobile Data Traffic Profile (Europe, Wi-Fi) I. INTRODUCTION (Source: Sandvine, 2012) ECENTLY, mobile traffic has increased due to the R advance of mobile telecommunication technologies and II. RELATED WORKS the advent of the various connected devices. According to the research of Sandvine company, mobile data has the peak traffic A. Deep Packet Inspection around 2 PM in Europe (See Fig. 1) [1]. The Internet service The DPI technology was first introduced for network providers (ISP) and the mobile carriers spend their network security. As the representative security technology prior to the management budgets by decreasing the traffic in congestion introduction of DPI, Stateful Packet Inspection (SPI) time [2].
    [Show full text]
  • NENA Technical Information Document on the Network Interface to IP Capable PSAP
    NENA Technical Information Document on the Network Interface to IP Capable PSAP NENA-08-501 Issued June, 2004 - NENA Technical Information Document on the Interface between the E9-1-1 Service Provider Network and the Internet Protocol (IP) PSAP Prepared by: National Emergency Number Association (NENA) Migration Working Group of the Network Technical Committee Published by NENA Printed in USA NENA NENA Technical Information Document on Network to IP PSAP Interface – NENA-08-501, Issue 0, June 2004 (Original) TECHNICAL Information Document NOTICE This Technical Information Document is published by National Emergency Number Association (NENA) as technical information to guide providers of Emergency Service Networks and Data and their equipment suppliers, and for the designers and manufacturers of customer-premise systems that are used for the purpose of processing emergency calls at a Public Safety Answering Point (PSAP). It is not intended to provide complete design specifications or parameters nor to assure the quality of performance of such equipment. NENA reserves the right to revise this Technical Information Document for any reason including, but not limited to, conformity with criteria or standards promulgated by various agencies, utilization of advances in the state of the technical arts or to reflect changes in the design of equipment or services described therein. It is possible that certain advances in technology will precede these revisions. Therefore, this Technical Information Document should not be the only source of information used to implement network changes or to purchase Customer Premise Equipment (CPE). NENA members are also advised to contact their Telephone Company representative to ensure CPE compatibility with the Telco network.
    [Show full text]
  • Cyber Intelligence Tradecraft Report the State of Cyber Intelligence Practices in the United States Copyright 2019 Carnegie Mellon University
    Cyber Intelligence Tradecraft Report The State of Cyber Intelligence Practices in the United States Copyright 2019 Carnegie Mellon University. All Rights Reserved. This material is based upon work funded and supported by the Department of Defense under Contract No. FA8702-15-D-0002 with Carnegie Mellon University for the operation of the Software Engineering Institute, a federally funded research and development center. The view, opinions, and/or findings contained in this material are those of the author(s) and should not be construed as an official Government position, policy, or decision, unless designated by other documentation. References herein to any specific commercial product, process, or service by trade name, trade mark, manufacturer, or otherwise, does not necessarily constitute or imply its endorsement, recommendation, or favoring by Carnegie Mellon University or its Software Engineering Institute. NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING INSTITUTE MATERIAL IS FURNISHED ON AN “AS-IS” BASIS. CARNEGIE MELLON UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. [DISTRIBUTION STATEMENT A] This material has been approved for public release and unlimited distribution. Please see Copyright notice for non-US Government use and distribution. Internal use:* Permission to reproduce this material and to prepare derivative works from this material for internal use is granted, provided the copyright and “No Warranty” statements are included with all reproductions and derivative works.
    [Show full text]
  • Intelligent Network Evolution
    Halfday Tutorial @ TINA 99 Intelligent Network Evolution - Impact of Internet, CORBA, TINA and Mobile Agent Technologies Dr. Thomas Magedanz IKV++ GmbH Email: [email protected] Abstract The main concern of this tutorial is the evolution of the "Intelligent Network (IN)" which is in principle designed as an evolvable telecommunications middleware solution. After a brief review of the IN principles, this tutorial looks at the main impacts on IN evolution derived from new bearer network environments / application domains (e.g., Voice over IP networks) and emerging middleware technologies (i.e., distributed object technologies and mobile agent technologies). Note that the contents of this book is subject of copyright! No part of this book may be reproduced or used in any fom or by any means - graphic, electronic, or mechanical, including photocopying, recording, taping, or information storage and retrieval system - without prior written permission of the author. © 1999, T. Magedanz - IN Seminar Introduction - 1 The Presenter Dr. Thomas Magedanz received his M.S. and his Ph.D. in computer sciences from the Technical University of Berlin, Germany in 1988 and 1993, respectively. In 1989 he was named as an assistant professor at the Department for Open Communication Systems (OKS) of the Technical University Berlin with focus on distributed computing and telecommunications. Besides the presentation of various courses he has been involved in several international research studies and projects related to Intelligent Networks, Telecommunications Management, Personal/mobile Communications, TINA and Intelligent/Mobile Agents within Deutsche Telekom AG, and EURESCOM and RACE / ACTS research programmes. From 1996 - 1998 he chaired the "Intelligent Communication Environments" research department at the GMD Research Center for Open Communication Systems (FOKUS), where he was responsible for several projects related to IN, TINA, UMTS and Intelligent/Mobile Agents.
    [Show full text]
  • Vmware Edge Network Intelligence User Guide
    VMware Edge Network Intelligence User Guide VMware Edge Network Intelligence VMware Edge Network Intelligence User Guide You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/ VMware, Inc. 3401 Hillview Ave. Palo Alto, CA 94304 www.vmware.com © Copyright 2021 VMware, Inc. All rights reserved. Copyright and trademark information. VMware, Inc. 2 Contents 1 About This Guide 5 2 Intended Audience 6 3 Introduction To VMware Edge Network Intelligence 7 Overview 7 Architecture Overview 8 4 Signing In and User / Role Administration 10 Signing In 10 Users and roles 11 Magic Link 12 Resetting your password 13 SSO 13 5 Basic Navigation 15 6 Adding Data Sources 17 Adding a Native ENI Crawler 17 Adding a VMware SD-WAN Edge Crawler for Branch Analytics 19 RADIUS Integration 20 Cisco ISE integration 20 Aruba HPEClearpass Integration 23 FreeRADIUS Integration 25 Microsoft RADIUS Integration 26 Adding Wireless Controllers 30 Cisco 31 Aruba Controller 32 Zoom API Connector 35 Crawler Data Collection Flow 37 7 Organizing Your Instance by Sites and Groups 39 Adding Sites 40 Adding Groups 41 8 Incidents 43 Navigating Incidents 43 Types of Incidents 46 VMware, Inc. 3 VMware Edge Network Intelligence User Guide Understanding an Individual Incident 47 Tuning Incidents 48 9 Detail Pages 51 Client Detail 51 AP Details 55 Application Details 64 DHCP/DNS/RADIUS Server Details 65 VLAN Details 67 10 Analytics 68 Network History 68 Hourly Data View 70 Health and Remediation 72 Understanding Relative Percent and Client Hours 73 Filtering in Health and Remediations 74 Benchmarks 77 Performance Metrics 78 11 Introduction to the API 81 12 VMware Edge Network Intelligence Client App 85 Client App Overview 85 Install the Client App 86 Register the Client App 87 Manage Client App Groups for Client App User 90 Access Client App Data in ENI Back-end Analytics Engine 93 Client App Capability Matrix 99 Uninstall the Client App 100 VMware, Inc.
    [Show full text]
  • Vmware Edge Network Intelligence
    DATASHEET VMware Edge Network Intelligence Introduction VMware Edge Network Intelligence™ (formerly Nyansa Voyance) is a vendor-agnostic artificial intelligence for IT operations (AIOps) solution focused on the enterprise edge that ensures end user and internet of things (IoT) client performance, security, and self- healing through wireless and wired LAN, SD-WAN and secure access service edge (SASE). Figure 1: VMware Edge Network Intelligence overview The solution employs machine learning (ML) algorithms and modern big data analytics to process high volumes of data from a wide range of network, device and application sources. In doing so, VMware Edge Network Intelligence auto-discovers end user and IoT devices, automatically establishes baselines, understands every single client interaction and monitors for deviations to provide actionable insights that operations teams can proactively remediate. Benefits Rich client experience Manage a distributed and secure enterprise deployment with a client experience that eliminates IT visits. Get deep visibility into client’s wireless or wired state and proactively manage end user and IoT device issues across the entire network stack. Proactive remediation Employ fault detection, isolation and remediation using ML algorithms to tackle application problems caused by wireless and wired LAN, WAN, network services, security services and application. Remediate faults isolated with each application performance measured at vantage points between distributed workforce and distributed cloud applications. DATASHEET | 1 VMware Edge Network Intelligence Datasheet Application assurance Assure performance of over 3000 applications with objective actionable data isolating faults. Identify the worst-performing clients, the number of clients affected and detect systemic issues, such as the number of sites impacted. Operational simplicity Address exponential growth in end-user and IoT devices with auto-discovery, baselining and monitoring.
    [Show full text]
  • Net Neutrality: a User’S Guide
    computer law & security report 22 (2006) 454–463 available at www.sciencedirect.com www.compseconline.com/publications/prodclaw.htm Regulating the Internet 5 Net neutrality: A user’s guide Paul Ganley, Ben Allgrove Baker & McKenzie LLP, London abstract Net neutrality is a complex issue that has generated intense levels of political discussion in the United States, but which has yet to attract significant attention from regulators in the UK. Nevertheless, the question of whether network operators should be prevented from blocking or prioritising certain network traffic or traffic from particular sources is a significant one for a wide range of stakeholders in the digital networked economy. Network operators contend that the build costs for the next generation of networks are so high that they must be permitted to monetise their control over this infrastructure as efficiently as possible. Meanwhile, an eclectic mix of interests including content and service providers, free speech and special interest groups and entertainers, argue that net neutrality re- gulation is necessary to guarantee that the Internet’s core values and social utility are preserved. This article offers an introduction to net neutrality from a UK perspective. The authors explain the technical, commercial, political and legal considerations that underpin the issue and suggest that, whilst net neutrality regulation in its strongest incarnation is not practical or desirable, a level of regulatory action designed to enhance the choices of end users is the best way forward. ª 2006 Baker; McKenzie LLP. Published by Elsevier Ltd. All rights reserved. 1. Introduction data or even drop them from their network altogether.
    [Show full text]
  • Technical Report TELECOMMUNICATION STANDARDIZATION SECTOR (June 2020) of ITU
    International Telecommunication U n i o n ITU-T Technical Report TELECOMMUNICATION STANDARDIZATION SECTOR (June 2020) OF ITU FG-NET2030 – Focus Group on Technologies for Network 2030 Network 2030 - Gap Analysis of Network 2030 New Services, Capabilities and Use cases - 2 - Keywords: Network 2030; High Precision Communications; Qualitative Communications; In- Time Guarantee; On-Time Guarantee; Coordination Guarantee; One-to-Many; Many- to-Many; Qualitative Communication; Haptic Communication; Holographic Type Communication; Digital Twin Abstract: The Technical Report on Gap Analysis presents the current work on network and communication services that has been carried out by different standards development organizations (SDOs) with respect to the Network 2030 services, capabilities, and representative use cases. Based on these inputs, this report identifies gaps, namely issues and technologies that are not currently addressed, and will be required for the support of new use cases and the network infrastructure of 2030 and beyond. ITU-T FG NET2030 Technical Report Network 2030 - Gap Analysis of Network 2030 New Services, Capabilities and Use cases Summary The Technical Report on Gap Analysis presents the current work on network and communication services that has been carried out by different standards development organizations (SDOs) with respect to the Network 2030 services, capabilities, and representative use cases. Based on these inputs, this report identifies gaps, namely issues and technologies that are not currently addressed, and will be required for the support of new use cases and the network infrastructure of 2030 and beyond. The report uses Network 2030 services and use case cluster reports as an input for the Network 2030 related requirements.
    [Show full text]