公开(公告)号：US11588718B2

公开(公告)日：2023-02-21

申请号：US17837730

申请日：2022-06-10

Applicant: NetScout Systems, Inc. ,  NetScout Systems, Inc

Inventor： Rajeev Nadkarni ,  Abhishek Saraswati ,  Anil K. Singhal ,  Bruce A. Kelley, Jr. ,  Narendra Byrapuram ,  John Peter Curtin ,  Tauras Liubinskas

IPC: H04L43/12 ,  H04L43/028 ,  H04L43/062

Abstract: A system and method for monitoring one or more Mobility Management Entities (MMEs) with a plurality of scalable Virtual Machines (VM)/probes arranged in a cluster format. A ciphered packet is received from a MME at a smart cluster device/probe whereby data is aggregated from the individual clustered VMs/probes for distribution to a monitoring device. The smart cluster device/probe is preferably configured to decipher the ciphered packet received from the MME and extract metadata from the deciphered packet to identify subscriber information for the received packet. The deciphered packet is then distributed to one of the plurality of clustered probes to balance the load amongst the plurality of clustered probes. The balancing of loads is based upon prescribed load balancing criteria such that each packet received for an identified subscriber is sent to a same probe such that load balancing is performed on a per subscriber basis and/or with other state-based criteria. KPI session related data associated with a subscriber is generated in a clustered probe that receives the distributed packet from the smart cluster device/probe. Subscriber related data from each clustered probe is then aggregated with at least one monitoring device operably coupled to the clustered probes such that a user of the monitoring device is provided with the perception that the monitoring device is coupled to a single probe.

公开(公告)号：US20220321445A1

公开(公告)日：2022-10-06

申请号：US17837730

申请日：2022-06-10

Applicant: NetScout Systems, Inc. ,  NetScout Systems, Inc

Inventor： Rajeev Nadkarni ,  Abhishek Saraswati ,  Anil K. Singhal ,  Bruce A. Kelley, JR. ,  Narendra Byrapuram ,  John Peter Curtin ,  Tauras Liubinskas

IPC: H04L43/12 ,  H04L43/028 ,  H04L43/062

Abstract: A system and method for monitoring one or more Mobility Management Entities (MMEs) with a plurality of scalable Virtual Machines (VM)/probes arranged in a cluster format. A ciphered packet is received from a MME at a smart cluster device/probe whereby data is aggregated from the individual clustered VMs/probes for distribution to a monitoring device. The smart cluster device/probe is preferably configured to decipher the ciphered packet received from the MME and extract metadata from the deciphered packet to identify subscriber information for the received packet. The deciphered packet is then distributed to one of the plurality of clustered probes to balance the load amongst the plurality of clustered probes. The balancing of loads is based upon prescribed load balancing criteria such that each packet received for an identified subscriber is sent to a same probe such that load balancing is performed on a per subscriber basis and/or with other state-based criteria. KPI session related data associated with a subscriber is generated in a clustered probe that receives the distributed packet from the smart cluster device/probe. Subscriber related data from each clustered probe is then aggregated with at least one monitoring device operably coupled to the clustered probes such that a user of the monitoring device is provided with the perception that the monitoring device is coupled to a single probe.

公开(公告)号：US20240275766A1

公开(公告)日：2024-08-15

申请号：US18108202

申请日：2023-02-10

Applicant: NetScout Systems, Inc.

Inventor： Bruce Kosbab ,  Bob Vogt ,  Paul Alexander Barrett ,  Anil K. Singhal ,  Ashwani Singhal ,  Narendra Byrapuram

IPC: H04L9/40 ,  H04L9/08 ,  H04L43/10 ,  H04L69/22

CPC classification number: H04L63/0428 ,  H04L9/0819 ,  H04L9/0894 ,  H04L43/10 ,  H04L63/126 ,  H04L63/166 ,  H04L69/22

Abstract: Decrypting synthetic transactions with beacon packets is provided. A probe receives, from a client device, a start beacon packet that identifies a test of a service provided by one or more servers. The probe establishes, responsive to receipt of the start beacon packet, a log for the test. The probe stores, in the log established responsive to the start beacon packet, data packets transmitted between the client device and the one or more servers subsequent to the start beacon packet and encrypted with a key using a security protocol. The probe receives, from the client device, key information used to decrypt the data packets of the test encrypted with the key using the security protocol. The probe provides at least one of the data packets for evaluation or decryption using the key information to determine a performance of the service.

公开(公告)号：US20200329391A1

公开(公告)日：2020-10-15

申请号：US16849470

申请日：2020-04-15

Applicant: NetScout Systems, Inc

Inventor： Rajeev Nadkarni ,  Abhishek Saraswati ,  Anil K. Singhal ,  Bruce A. Kelley, JR. ,  Narendra Byrapuram ,  John Peter Curtin ,  Tauras Liubinskas

IPC: H04W24/08 ,  H04L12/26 ,  G06F9/455 ,  H04W12/00

Abstract: A system and method for monitoring one or more Mobility Management Entities (MMEs) with a plurality of scalable network probe devices arranged in a cluster format. A ciphered packet is received from one or more MMEs at a packet switching device. The packet switching device in turn sends all the ciphered packets to each of the plurality of clustered probes. Each of the network probes then in turn deciphers the packets received from the MME and extracts metadata from the deciphered packet to identify subscriber session information contained in the received packet. Each of the network probes then selectively retains deciphered packet information relating to a subscriber session and/or other prescribed criteria designated for that particular network probe and discards the remaining deciphered packet or portions of the packet so as to balance the load amongst the plurality of probes based upon prescribed load balancing criteria. KPI and other session related data is generated in a network probe associated with a subscriber session from the retained deciphered packet information. Subscriber session related data from each clustered network probe is then aggregated with at least one monitoring device operably coupled to the clustered probes such that a user of the monitoring device is provided with the perception that the monitoring device is coupled to a single probe.

公开(公告)号：US20190104426A1

公开(公告)日：2019-04-04

申请号：US15808762

申请日：2017-11-09

Applicant: NetScout Systems, Inc

Inventor： Anil K. Singhal ,  Bruce A. Kelley, JR. ,  Rajeev Nadkarni ,  Narendra Byrapuram

IPC: H04W24/08 ,  H04L12/46

Abstract: A system for selective user plane (UP) monitoring includes a service gateway (SGW) having a plurality of units. The system further includes a network packet broker (NPB) configured to receive packets including UP data from tunnels created to enable transmission of the UP packets from UE to the plurality of SGW units. The NPB is also configured to receive packets including control plane (CP) data from channels enabling transmission of the CP packets from a base transceiver station to the SGW. The system also includes a plurality of probes operatively coupled to the NPB. The probes are configured to generate first metrics associated with the received CP packets and to selectively generate second metrics associated with the received UP packets based on one or more identifiers. The NPB is configured to forward UP packets being processed by a particular SGW unit to a particular probe of the plurality of probes.

公开(公告)号：US20240422137A1

公开(公告)日：2024-12-19

申请号：US18815752

申请日：2024-08-26

Applicant: NetScout Systems, Inc.

Inventor： Bruce Kosbab ,  Bob Vogt ,  Paul Alexander Barrett ,  Anil K. Singhal ,  Ashwani Singhal ,  Narendra Byrapuram ,  Colm Toomey ,  Connor Monk

IPC: H04L9/40 ,  H04L9/08 ,  H04L43/10 ,  H04L69/22

Abstract: Decrypting synthetic transactions with beacon packets is provided. A probe receives, from a client device, a start beacon packet that identifies a test of a service provided by one or more servers. The probe establishes, responsive to receipt of the start beacon packet, a log for the test. The probe stores, in the log established responsive to the start beacon packet, data packets transmitted between the client device and the one or more servers subsequent to the start beacon packet and encrypted with a key using a security protocol. The probe receives, from the client device, key information used to decrypt the data packets of the test encrypted with the key using the security protocol. The probe provides at least one of the data packets for evaluation or decryption using the key information to determine a performance of the service.

公开(公告)号：US11601406B2

公开(公告)日：2023-03-07

申请号：US16997370

申请日：2020-08-19

Applicant: NetScout Systems, Inc.

Inventor： Bruce Kosbab ,  Bob Vogt ,  Paul Alexander Barrett ,  Anil K. Singhal ,  Ashwani Singhal ,  Narendra Byrapuram

IPC: H04L9/00 ,  H04L9/40 ,  H04L9/08 ,  H04L43/10 ,  H04L69/22

Abstract: Decrypting synthetic transactions with beacon packets is provided. A probe receives, from a client device, a start beacon packet that identifies a test of a service provided by one or more servers. The probe establishes, responsive to receipt of the start beacon packet, a log for the test. The probe stores, in the log established responsive to the start beacon packet, data packets transmitted between the client device and the one or more servers subsequent to the start beacon packet and encrypted with a key using a security protocol. The probe receives, from the client device, key information used to decrypt the data packets of the test encrypted with the key using the security protocol. The probe provides at least one of the data packets for evaluation or decryption using the key information to determine a performance of the service.

公开(公告)号：US10992777B2

公开(公告)日：2021-04-27

申请号：US16905628

申请日：2020-06-18

Applicant: NetScout Systems, Inc

Inventor： Anil K. Singhal ,  Narendra Byrapuram ,  Rajeev Nadkarni ,  Mahesh Srinivasagowda ,  Nilesh Tayade ,  Anthony Peter Joch

IPC: H04L29/08 ,  H04L29/12 ,  H04L29/06

Abstract: A computer implemented method for determining the identity of an Over-the Top (OTT) application or service being accessed over the Internet from a HTTP, HTTPS or QUIC connection request received in a network monitoring device. Determine if one or more entries are present in the received connection request have an IP address that matches a known server IP address. A determination is then made as to whether if the received connection request is one of a HTTP, HTTPS or QUIC connection request, and if this cannot be determined than determine if a subject field in the received connection request is available. And determine if a candidate domain name is available from IP cache created from one or more of the above steps if a subject field is not available in the received connection request. Identify and categorize OTT applications associated with the received connection request if it is determined: the connection is either a HTTP, HTTPS or QUIC connection type; a subject field is available; or a candidate domain name is available utilizing a lookup table that is periodically updated with new OTT applications.

公开(公告)号：US20200328960A1

公开(公告)日：2020-10-15

申请号：US16849463

申请日：2020-04-15

Applicant: NetScout Systems, Inc.

Inventor： Rajeev Nadkarni ,  Abhishek Saraswati ,  Anil K. Singhal ,  Bruce A. Kelley, JR. ,  Narendra Byrapuram ,  John Peter Curtin ,  Tauras Liubinskas

IPC: H04L12/26

Abstract: A system and method for monitoring one or more Mobility Management Entities (MMEs) with a plurality of scalable Virtual Machines (VM)/probes arranged in a cluster format. A ciphered packet is received from a MME at a smart cluster device/probe whereby data is aggregated from the individual clustered VMs/probes for distribution to a monitoring device. The smart cluster device/probe is preferably configured to decipher the ciphered packet received from the MME and extract metadata from the deciphered packet to identify subscriber information for the received packet. The deciphered packet is then distributed to one of the plurality of clustered probes to balance the load amongst the plurality of clustered probes. The balancing of loads is based upon prescribed load balancing criteria such that each packet received for an identified subscriber is sent to a same probe such that load balancing is performed on a per subscriber basis and/or with other state-based criteria. KPI session related data associated with a subscriber is generated in a clustered probe that receives the distributed packet from the smart cluster device/probe. Subscriber related data from each clustered probe is then aggregated with at least one monitoring device operably coupled to the clustered probes such that a user of the monitoring device is provided with the perception that the monitoring device is coupled to a single probe.

公开(公告)号：US20190104045A1

公开(公告)日：2019-04-04

申请号：US15808691

申请日：2017-11-09

Applicant: NetScout Systems, Inc

Inventor： Anil K. Singhal ,  Bruce A. Kelley, JR. ,  Rajeev Nadkarni ,  Narendra Byrapuram

IPC: H04L12/26 ,  H04W24/08

Abstract: A system for selective user plane monitoring includes a network packet broker (NPB) configured to receive a plurality of packets including user plane data from one or more tunnels created to enable direct transmission of the user plane packets from user equipment to a service getaway (SGW). The NPB is also configured to receive a plurality of packets including control plane data from one or more channels created to enable transmission of the control plane packets from a base transceiver station to the SGW. The system further includes a monitoring probe operatively coupled to the NPB. The monitoring probe is configured to generate a first plurality of metrics associated with the received control plane packets and configured to selectively generate a second plurality of metrics associated with the received user plane packets based on one or more identifiers.