PacketScan HD High Density All-IP Analyzer 1 to 10 GigE Networks

Size: px

Start display at page:

Download "PacketScan HD High Density All-IP Analyzer 1 to 10 GigE Networks"

Gladys Ford
5 years ago
Views:

Gaithersburg, MD 20878 Phone: (301) 670-4784 Fax:

1 PacketScan HD High Density All-IP Analyzer 1 to 10 GigE Networks 818 West Diamond Avenue - Third Floor, Gaithersburg, MD Phone: (301) Fax: (301) gl-info@gl.com Website: 1

2 As of 2014, broadband was ubiquitous around the world, with a global average connection speed exceeding 4 Mbit/s. Fixed broadband Internet subscriptions in 2012 as a percentage of a country's population Mobile broadband Internet subscriptions in 2012 as a percentage of a country's population Source: International Telecommunications Union 2

3 High Speed Internet Services AT&T U-verse - speeds up to 45Mbps Mobile Wideband - Sprint 4G mobile internet service Fiber-to-the-X (Home, Curb, Business, Desk, Node) 3

More and More Traffic Applications that account for Internet traffic include: Peer-to-Peer file transfers, E-mail, Company VPNs, Machine-to- Machine APIs, (iphone apps talking to

4 More and More Traffic Applications that account for Internet traffic include: Peer-to-Peer file transfers, , Company VPNs, Machine-to- Machine APIs, (iphone apps talking to Twitter APIs) Skype calls, World of Warcraft / online games, Xbox Live, itunes, Voiceover-IP phones, ichat, Facebook, Wikipedia, Google YouTube uploads, HBO GO and Netflix movie streaming. 4

5 Next Generation Network One network transports all information and services (voice, data, and media such as video) by encapsulating these into packets. NGNs built around the Internet Protocol Sometimes known as all IP Describes the transformation of formerly telephone-centric networks toward NGN. Voice from fixed TDM to IP IP Multimedia Subsystem 5

6 PacketScan HD VoIP Traffic Analysis SIP / H323 / MEGACO / MGCP / RTP / RTCP / Video Analysis 6

7 What PacketScan HD does? SIGNALING Protocol analysis: SIP, MGCP, MEGACO, H.323, SCTP, SCCP (Skinny), SS7 SIGTRAN, ISDN-SIGTRAN, GSM A over IP, GPRS over IP, UMTS over IP, LTE, Diameter VOICE/FAX - Captures, segregates, and monitors packets; perform voice quality testing in real-time over VoIP network. G.711, G726, GSM, GSM EFR, GSM HR, G729/B, G.722, G.722.1, ILBC, SPEEX, SMV, T.38 VIDEO CALLS - Video quality statistics such as MDI (Media Delivary Index), Packet Lost, Duplicate, out of sequence and Frame Rates are provided for each video session. NETSURVEYOR - Can be deployed as a Probe for a centralized monitoring system connected to an Oracle database 7

8 Why this product? Ability to capture and analyze high volume calls with traffic. Process up to simultaneous calls with bidirectional RTP traffic from 1 Gbps to 10 Gbps rate 2U rack mounted Network Monitoring Appliance w/ 4x 1GigE (PKV120) or 2x 10GigE (PKV122) network interface cards For more capacity, PacketScan FB (Near Real-time File Based Packet Processing Tool) Create up to 10 user defined hardware filters to filter-out traffic based on MAC, 802.1Q (VLANs), IPv4, TCP, UDP, SIP, and RTP parameters Supports almost all industry standard IP and Wireless Protocols (from SIP to LTE) Supports all RTP traffic Voice, Video, Fax T.38, Digits, Tones, Impairments 8

9 Why this product?... Offers powerful features to capture and monitor live signaling and traffic over IPv4 and IPv6. Long-Term activity reporting. Captures, Segregates, Monitors, Build CDRs, and Collects Statistics on all IP calls In-depth real-time and post-process data investigation using Packet Data Analysis feature. Complex Filtering and Search capabilities to record all or filtered traffic into a trace file. Provides Call Quality Scores like MOS, R-Factor, Delay, Jitter, Packet Loss and more. Supports Centralized Remoter Network Monitoring with NetSurveyorWeb - a web-based client that can connect to PacketScan probes through a web server that facilitates display of call data records using a web interface 9

10 Supported Protocols and Codecs Supported Codecs Supported Protocols G.711 A/µ-law G.722, G (AMR-WB), G.722.1, G.726, G.729A/B GSM (EFR, FR and HR) AMR (Narrowband and Wideband) EVRC, EVRCB, EVRC-C, ilbc, Speex, SpeexWB, RFC 2833, and user-defined codecs for voice and tones. Visit Voice Codec webpage for more details SIP, SIP-I, SIP-T, H.323, MEGACO, MGCP, Diameter, Skinny (SCCP) LTE SIGTRAN SS7, ISDN GSM A and Abis over IP GPRS Gb and Gn over IP UMTS IuCS and IuPS over IP T.38 Fax and Video calls Visit Supported Protocols for more details For more information on other features, refer to PacketScan Basic (PKV100) presentation. 10

11 High Density Traffic With higher traffic rates, monitoring is a challenge. 11

12 High Density Ethernet & Optical Hardware Platform (2 x 10 GigE Setup) 12

13 High Density Ethernet & Optical Hardware Platform (4 x 1 GigE Setup) 13

(maximum) Option to record filtered calls of interest only 30000 calls with bi-directional RTP traffic Extracting/recording voice 2500

14 RTP Traffic Capabilities and Performance Product Version Max Simultaneous Calls Signaling + RTP Voice Traffic PacketScan 1G (4x 1GigE) SIP 64-bit PacketScan 10G (2x 10GigE) SIP 64-bit calls with bi-directional RTP traffic Extracting/recording voice 2500 simultaneous calls (maximum) Option to record filtered calls of interest only calls with bi-directional RTP traffic Extracting/recording voice 2500 simultaneous calls (maximum) Option to record filtered calls of interest only ** The above performance is evaluated on a high-end Core i7 system with typical 12GB RAM

15 WireSpeed Filtering Filtering can be based on the following: Pattern match Protocol information Frame size Checksum errors Port number IP address and address ranges 15

16 3 Stages of Filtering HardWareFilter (HWF) Special NIC with hardware filtering - very fast Capture Filter (CF) Powerful software filtering but a little slower View Filter (VF) applies on the captured frames to filter only frames of interest PacketScan HD captured files to/from WireShark PacketScan HD PDA for detailed voice, fax, and video analysis 16

17 3 Stages of Filtering 17

18 Lab Setup 18

19 Actual Hardware MAPS SIP MAPS SIP G mirror Layer 3 Traffic 19

20 Applications PacketScan High Density Hardware Filter PCAP / HDL (GL) File Conversion Utility 20

21 Real-time Analysis Summary View Detail View Hex Dump View Statistics View Call Detail Records View Default panes - summary, detail, and hex dump of the frame data views Optional panes statistics and call trace views 21

22 Packet Data Analysis Graphs PDA Call Graph SIP Call Displays the message sequences of captured VoIP calls Decodes of the selected SIP message is displayed on the right pane 22

23 Packet Data Analysis Graphs PDA Detail View and Wave Graph 23

24 Real-time Analysis... Real-time & Offline Filters Filtering and search capability isolates required frames from original frames in real-time / offline based on parameters set in Data Link layer, MAC layer, IP, TCP/UDP and more. 24

25 Ethernet Frame Structure RTP Protocol - UDP RTP ports even RTCP ports - odd RTP Version SIP Port 5060 TLS

26 Hardware Filters for Ethernet Fields MAC 802.1Q (VLANs) IPv4 IPv6 26

27 Ethernet Frame Structure Filtering using fields in IP frame 27

28 Example 1: Filtering SIP and RTP Traffic 28

29 Example 2: Filtering Checksum Errors 29

30 Example 3: Filtering HTTP Traffic HTTP port 80 HTTPS port

31 Demo MAPS SIP MAPS SIP Switch 10G mirror Layer 3 Traffic 31

32 Open System Interconnection Layer Cables, NIC Basic Network Hardware 10BASE-T, 100BASE-T, 1000BASE-T Routers Internet layer - packet forwarding path determination, logical addressing IPv4, IPv6, MPLS Session/Port Layer interhost connection. SIP, RTP, HTTP, DNS Network process to application , Database Physical Data Link Network Transport Session Presentation Application Switches Link Layer physical addressing MAC, ARP, L2TP Transport layer End-to-end connection and reliability UDP, TCP, SCTTP Presentation layer Data representation Encryption 32

OSI TCP Model The Transmission Control Protocol/Internet Protocol (TCP/IP) suite was created by the U.S. Department of Defense (DoD) to ensure that communications could survive any conditions and that data integrity wouldn t be compromised under malicious attacks.

33 OSI TCP Model The Transmission Control Protocol/Internet Protocol (TCP/IP) suite was created by the U.S. Department of Defense (DoD) to ensure that communications could survive any conditions and that data integrity wouldn t be compromised under malicious attacks. Application (layer 4): Acts as final endpoints at either end of a communication session between two network hosts Host-to-host (layer 3): Manages the flow of traffic between two hosts or devices, ensuring that data arrives at the application on the host for which it is targeted Internet (layer 2): Contains all functionality that manages the movement of data between two network devices over a routed network Network interface (layer 1): Deals with all physical components of network connectivity between the network and the IP protocol 33

34 Ethernet Frame (FCS) Frame Check Sequence (FCS) The FCS field contains a number that is calculated by the source node based on the data in the frame. TRUE/FALSE 34

35 Ethernet Frame (VLANs) IEEE 802.1Q is the networking standard that supports virtual LANs (VLANs) on an Ethernet network. Tag Protocol Identifier (TPID) Tag Control Information (TCI) The TCI field is further divided into Priority code point (PCP) Drop eligible indicator (DEI) VLAN identifier (VID) 35

datagram. Flags - used to control or identify fragments.

36 Internet Protocol IPv4 Internet Header Length Differentiated Services Code Point Explicit Congestion Notification Identification - used for uniquely identifying the group of fragments of a single IP datagram. Flags - used to control or identify fragments. Fragment Offset - 13 bits long and specifies the offset of a particular fragment relative to the beginning of the original unfragmented IP datagram. 36

UDP Frame UDP Port FTP 20 Data Transfer FTP 21 FTP Control SSH 22 Telnet 23 SMTP 25 E-Mail

37 UDP Frame UDP Port FTP 20 Data Transfer FTP 21 FTP Control SSH 22 Telnet 23 SMTP 25 HTTP 80 HTTPS 443 RTP even RTCP odd SIP 5060 (Destination Port) SIP over TLS

38 TCP Frame 38

Dos Based Tools - Statistics Ch2: Packets=0x1A9475F1A : Bytes=0x0009D9C535E200 : Mbps=pending : Util=pending Hardware counters for channelmask 0x00000004: Frames size 64 : 0x00000000000001 Frames

39 Dos Based Tools - Statistics Ch2: Packets=0x1A9475F1A : Bytes=0x0009D9C535E200 : Mbps=pending : Util=pending Hardware counters for channelmask 0x : Frames size 64 : 0x Frames size : 0x Frames size : 0x Frames size : 0x Frames size : 0x Frames size : 0x000001A9475F12 Frames size : 0x Frames size : 0x Frames size : 0x Frames size 8192-Max : 0x Total frames : 0x000001A9475F1A Oversize frames : 0x Oversize Hard sliced : 0x Jabber frames : 0x Jabber Hard sliced : 0x Undersized frames : 0x Ok pause bad MAC ctrl: 0x Good bytes : 0x0009D9C507460F Bad bytes : 0x E9BF1 Unicast frames : 0x000001A947573D Multicast frames : 0x Broadcast frames : 0x Pause frames : 0x Unsupported MAC Ctrl: 0x Crc Errors : 0x DA Fragments : 0x Code Violation Errors: 0x Alignment Errors : 0x XGMII Small Drop : 0x Packet Merge Drop : 0x Smoother Drop: Counter not supported. Load driver with "PerPortStatistics=1" 39

40 RTP Packets Graph RTP Packets graph plots and compares out of ordered packets, missing packets and duplicate packets against Total Audio Packets 40

41 MOS Graph MOS Graph plots Mean Opinion Score values throughout the duration of the call 41

42 Packet Data Analysis R-Factor Statistics Quality Metrics 42

43 PDA Completed Calls Report (CSV) Provides the ability to export PDA summary and detail reports of all terminated calls in CSV file format which can later be imported easily into Excel using the custom addin (Excel-Dashboard-Tool-IP.xlsm). 43

44 NetSurveyorWeb Multiple PacketScan probes can be used for network monitoring, with call detail reports exported to an central database. Results can be accessed remotely using NetSurveyorWeb, a simple web browser based application. 44

45 NetSurveyorWeb NetSurveyorWeb Reports 45

46 Thank you! 46

10 Gbps (or) 1 Gbps Ethernet Tester PacketExpert

10 Gbps (or) 1 Gbps Ethernet Tester PacketExpert 818 West Diamond Avenue - Third Floor, Gaithersburg, MD 20878 Phone: (301) 670-4784 Fax: (301) 670-9187 Email: gl-info@gl.com Website: http://www.gl.com