Abstract: The subject matter described herein includes methods, systems and computer media for monitoring communications networks using cross-correlation of packet flows. One method for monitoring a communications network using cross-correlation of packet flows includes receiving a plurality of packets copied from a communications network. The method further includes classifying the packets into flows. The method further includes, for at least one of the flows, generating a trace value sequence, where the trace value sequence is sequence of values that characterizes the flow according to a cross-correlation metric. The method further includes performing a frequency domain cross-correlation for the at least one flow using the trace value sequence. The method further includes outputting an indication of a network or flow characteristic based on results of the cross-correlation.

Abstract: The subject matter described herein includes methods, systems and computer media for monitoring communications networks using cross-correlation of packet flows. One method for monitoring a communications network using cross-correlation of packet flows includes receiving a plurality of packets copied from a communications network. The method further includes classifying the packets into flows. The method further includes, for at least one of the flows, generating a trace value sequence, where the trace value sequence is sequence of values that characterizes the flow according to a cross-correlation metric. The method further includes performing a frequency domain cross-correlation for the at least one flow using the trace value sequence. The method further includes outputting an indication of a network or flow characteristic based on results of the cross-correlation.

Abstract: The subject matter described herein includes methods, systems and computer media for monitoring communications networks using cross-correlation of packet flows. One method for monitoring a communications network using cross-correlation of packet flows includes receiving a plurality of packets copied from a communications network. The method further includes classifying the packets into flows. The method further includes, for at least one of the flows, generating a trace value sequence, where the trace value sequence is sequence of values that characterizes the flow according to a cross-correlation metric. The method further includes performing a frequency domain cross-correlation for the at least one flow using the trace value sequence. The method further includes outputting an indication of a network or flow characteristic based on results of the cross-correlation.

Abstract: A system for mapping dissimilar communication protocols is disclosed. In one embodiment, the system comprises user communication information that spans at least two dissimilar communication networks, a first communication protocol associated with a first communication network, a second communication protocol associated with a second communication network, and a software code segment configured to detect a call setup identifier and a call tear-down identifier associated with the first communication protocol, the software code segment also configured to detect a call setup identifier and call tear-down identifier associated with the second communication protocol, where the call setup identifier and the call tear-down identifier associated with the second communication protocol may occur within a predetermined amount of time before or after the call setup identifier or the call tear-down identifier associated with the first communication protocol.

Abstract: A system for correlating and displaying dissimilar communication protocols is disclosed. In one embodiment, the system comprises user communication information that spans at least two dissimilar communication networks, a first communication protocol associated with a first communication network, a second communication protocol associated with a second communication network, and a software code segment configured to detect a first call identifier associated with the first communication protocol, the software code segment also configured to detect a second call identifier associated with the second communication protocol, where the first call identifier and the second call identifier are correlated to a particular call. The system displays the correlated call identifiers to a user in a real-time call flow record.

Abstract: Request and response messages conforming to a protocol such as Media Gateway Control Protocol between media gateways and a media gateway controller are examined to enable them to be correlated. The correlated messages are assembled to produce a call detail record describing a voice or data call established over an IP network via the media gateways under the control of the media gateway controller.

Abstract: A multi-channel network monitoring apparatus has input connectors for network signals to be monitored and four channel processors in a rack-mountable chassis/enclosure for receiving and processing a respective pair of incoming signals to produce monitoring results. Each processor operates independently of the others and is replaceable without interrupting their operation. LAN connectors enable onward communication of the monitoring results. A cross-point switch routes each incoming signal to a selected processor and can re-route a channel to another processor in the event of processor outage. Each processor has a self-contained sub-system of processing modules interconnected via a CPU-peripheral interface in a backplane, which provides a separate peripheral interface for each processor.

Abstract: A system for correlating and displaying dissimilar communication protocols is disclosed. In one embodiment, the system comprises user communication information that spans at least two dissimilar communication networks, a first communication protocol associated with a first communication network, a second communication protocol associated with a second communication network, and a software code segment configured to detect a first call identifier associated with the first communication protocol, the software code segment also configured to detect a second call identifier associated with the second communication protocol, where the first call identifier and the second call identifier are correlated to a particular call. The system displays the correlated call identifiers to a user in a real-time call flow record.

Abstract: A system for mapping dissimilar communication protocols is disclosed. In one embodiment, the system comprises user communication information that spans at least two dissimilar communication networks, a first communication protocol associated with a first communication network, a second communication protocol associated with a second communication network, and a software code segment configured to detect a call setup identifier and a call tear-down identifier associated with the first communication protocol, the software code segment also configured to detect a call setup identifier and call tear-down identifier associated with the second communication protocol, where the call setup identifier and the call tear-down identifier associated with the second communication protocol may occur within a predetermined amount of time before or after the call setup identifier or the call tear-down identifier associated with the first communication protocol.

Abstract: Request and response messages conforming to a protocol such as Media Gateway Control Protocol (MGCP) between media gateways and a media gateway controller (MGC) are examined to enable them to be correlated. The correlated messages are assembled to produce a call detail record (CDR) describing a voice or data call established over an IP network via the media gateways under the control of the MGC.

Abstract: Request and response messages conforming to Media Gateway Control Protocol (MGCP) between media gateways 12 and 16 and a media gateway controller (MGC) 22 are examined to enable them to be correlated. The correlated messages are assembled to produce a call detail record (CDR) describing a voice or data call established over an IP network via the media gateways under the control of the MGC.

Abstract: In order to relieve the loading of a service control point SCP in a telecommunications signalling network, query messages addressed to the SCP are intercepted prior to receipt by the SCP. These intercepted query messages are examined and response data generated, at least for certain query types. For a query message for which response data is generated, the query message is replaced by a response message addressed to the querying entity. The response message is then forwarded on in the same sense as the received query message. In a preferred implementation, the forwarded response message will next be received by a signalling transfer point STP and be directed back to the querying entity.

Abstract: A method of providing a service, such as local number portability (LNP), in a switched telecommunications system, in which a message interceptor is disposed in a signalling link of an SS7 signalling network of the system. The message interceptor detects calls for which service implementation is required, by comparing the content of intercepted circuit-related SS7 messages with service trigger conditions, such as message type (checked directly by the interceptor) and message content (e.g. called number, which the interceptor checks by reference to a database). When service implementation is detected as being required, the message interceptor may implement at least part of the required service by modifying parameters of the intercepted message; alternatively, the interceptor may re-direct the message to a service control function for service implementation.

Abstract: A method is disclosed that avoids the need to enlarge the translation tables held by Signal Transfer Points (STPs), for the purpose of effecting global title routing of certain signalling messages to enable number portability. Signalling links are monitored to detect messages needing to be routed by global title; the global title of each such message is then checked to see if it relates to a ported number and if this is the case, the global title is modified to a number that will result in the appropriate routing of the message on the basis of the existing translation tables of the STPs.

Abstract: A programmable message substitution unit PMSU (60) is provided for modifying signalling messages passing across a link (61) of a telecommunications signalling network without disrupting the link-level procedures operating over the link. In the event of a power failure or upon the detection of an operational anomaly, a bypass relay arrangement (65) is used to bypass the PMSU (60). The PMSU (60) comprises a substitution block for modifying selected messages, a database block for doing database lookups to ascertain new message parameter values to be substituted for existing ones, and a supervision block for checking the operation of the substitution block. The PMSU may be used to implement local number portability or other services.