Abstract: A method for inferring a domain for an IP address, the method including receiving a computerized flow record from a communication service provider including the IP address, wherein the IP address corresponds to a request from a subscriber for an Internet resource, performing an in-stream lookup including: determining whether any SSL exchanges result from the request for the Internet resource, when the SSL exchanges exist, attempting to retrieve domain information corresponding to the IP address from the SSL exchanges, determining whether any DNS records exist that include the IP address, and when the DNS records exist that include the IP address, attempting to retrieve the domain information corresponding to the IP address from the DNS records, performing contextual mapping including: performing a whois query using the IP address in an attempt to identify the domain information corresponding to the IP address, performing a reverse DNS lookup in an attempt to identify the domain information corresponding to th

Abstract: A network monitoring apparatus in a communications network detects TCP data flows (to at least one network-served end user) to provide corresponding detected data flows. This apparatus then measures data throughput to this (or these) end user(s) via the TCP data flows and during the TCP data flows and calculates an average effective data throughput to this end user. This calculation can be based, by one approach, upon use of time variables that represent the detected data flows (to effectively gamer a beginning-to-end view oft be various TCP data flows while avoiding inclusion of periods that represent no (or possibly only a little) volume in these regards as may be due to application idle time or end-user idle time while including periods that represent no (or possibly only a little) volume due to network buffering, device performance problems, and so forth).

Abstract: A method and apparatus for storing data on application-level activity and other user information to enable real-time multi-dimensional reporting about a user of a mobile data network. A data manager receives information about application-level activity from a mobile data network and stores the information to provide dynamic real-time reporting on network usage. The data manager comprises a database, data processing module, and analytics module. The database stores the application-level data for a predetermined period of time. The data processing module monitors the data to determine if it corresponds to a set of defined reports. If the data is relevant, the processing module updates the defined reports. The analytics module accesses the database to retrieve information satisfying operator queries about network usage. If the operator chooses to convert the query into a defined report, the analytics module creates a newly defined report and populates it accordingly.

Abstract: Method and apparatus for real-time collection of information about application level activity and other user information on a mobile data network. A collector device communicates with a router in a mobile data network so that the collector can obtain substantially all of the data coming from the router in real-time and correlate the data to specific users. The collector device comprises a user identity subsystem, filter, and data transfer subsystem. The user identity subsystem inspects the data for source IP addresses and correlates them to corresponding mobile phone numbers. The filter then inspects the collected data and retains only application-level data. Lastly, the data transfer subsystem transfers the filtered data to a data reporting and analysis system.

Abstract: A method and apparatus for real-time, multi-dimensional reporting and analyzing of data on application level activity and other user information on a mobile data network. A report manager communicates with a data manager to develop and test real-time reports about aggregate and user-level network usage. The data manager provides a database of non-aggregate, user-specific event data and a set of tables specifying combinations of monitored variables satisfying a set of defined reports. The report manager comprises a report generation module, which receives operator instructions for aggregate usage information. The report module determines whether the requested information can be satisfied by combinations of monitored aggregate variables, or whether it must be retrieved from a non-aggregate, user-specific, event data database. Furthermore, the report module is responsive to operator instructions to add a test report to the set of defined real-time reports.

Abstract: System and method for capturing, analyzing, and accessing application level activity and other user information on a mobile data network based on various privacy controls. A platform non-intrusively and transparently monitors data activity on a mobile data network in real-time. The platform comprises collectors, data managers, and a reports manager. The collectors capture information from routers and correlate IP addresses with phone numbers. The collectors retain data allowed by a set of capture filter rules. Data managers receive the retained data and augment it with additional information. A set of usage filter rules determines the communications and additional information that can go to each data manager for use in real-time reports on aggregated usage of the network. The report manager works with the data manager to provide real-time reports to an operator. A set of access usage rules determines the reports that the operator can access.

Abstract: The invention provides a system and method for sharing anonymous user profiles with a third party. In one aspect of the invention, the system shares user profiles with content servers on a mobile data network so that they may select content responsive to the user's profile. The system provides a store of user profiles for associating profile information with either a source IP address or mobile phone number, where the profile includes information on the user and the user's network usage. The system detects a user's transaction request and inspects it for either an IP address or phone number, which it uses to retrieve the appropriate profile. The system subsequently applies predetermined opt-out policies to determine how much of the user profile may be provided in response to the profile request. The system then returns the profile information such that the user's identity is masked.

Abstract: System and method for collecting and analyzing information on application-level activity and other user information on a mobile data network. A platform non-intrusively and transparently monitors data activity on a mobile data network in real-time so that user-level information can be reported to an operator. The platform comprises a plurality of collectors, a data manager, and a report manager. The collectors communicate with network routers to almost all network data. The collectors inspect the data for IP addresses and correlate them to user mobile phone numbers. The data manager receives the data and augments it with information obtained by querying carrier information. The data manager stores the data and monitors it to see if it satisfies a set of defined real-time reports. The report manager then works with the data manager to develop and test new reports based on operator instructions for a specific report.

Abstract: The invention provides a system and method for sharing anonymous user profiles with a third party. In one aspect of the invention, the system shares user profiles with content servers on a mobile data network so that they may select content responsive to the user's profile. The system provides a store of user profiles for associating profile information with either a source IP address or mobile phone number, where the profile includes information on the user and the user's network usage. The system detects a user's transaction request and inspects it for either an IP address or phone number, which it uses to retrieve the appropriate profile. The system subsequently applies predetermined opt-out policies to determine how much of the user profile may be provided in response to the profile request. The system then returns the profile information such that the user's identity is masked.

Abstract: System and method for collecting and analyzing information on application-level activity and other user information on a mobile data network. A platform non-intrusively and transparently monitors data activity on a mobile data network in real-time so that user-level information can be reported to an operator. The platform comprises a plurality of collectors, a data manager, and a report manager. The collectors communicate with network routers to almost all network data. The collectors inspect the data for IP addresses and correlate them to user mobile phone numbers. The data manager receives the data and augments it with information obtained by querying carrier information. The data manager stores the data and monitors it to see if it satisfies a set of defined real-time reports. The report manager then works with the data manager to develop and test new reports based on operator instructions for a specific report.

Abstract: A method and apparatus for real-time, multi-dimensional reporting and analyzing of data on application level activity and other user information on a mobile data network. A report manager communicates with a data manager to develop and test real-time reports about aggregate and user-level network usage. The data manager provides a database of non-aggregate, user-specific event data and a set of tables specifying combinations of monitored variables satisfying a set of defined reports. The report manager comprises a report generation module, which receives operator instructions for aggregate usage information. The report module determines whether the requested information can be satisfied by combinations of monitored aggregate variables, or whether it must be retrieved from a non-aggregate, user-specific, event data database. Furthermore, the report module is responsive to operator instructions to add a test report to the set of defined real-time reports.