Patent application number | Description | Published |
20090190511 | Method and apparatus for detecting wireless data subscribers using natted devices - A system and method for network based detection of wireless data subscribers using network address translation devices is provided. The method includes identifying a minimum number of devices showing the same internet protocol address. Packet identification sequences may include port numbers or internet protocol identification numbers. The method continues with grouping these applications by their packet identification sequences and applying detection logic where detection logic yields a conclusion that there are multiple host computers when a set of applications appears in a plurality of packet identification sequences. This method is particularly useful when internet protocol addresses are dynamic, as opposed to static. This method overcomes previous embodiments known in the art by being able to account for and work with live traffic, which enables real time detection. | 07-30-2009 |
20100299287 | Monitoring time-varying network streams using state-space models - In one embodiment, a statistical model is generated based on observed data, the observed data being associated with a network device, online parameter fitting is performed on parameters of the statistical model, and for each newly observed data value, a forecast value is generated based on the statistical model, the forecast value being a prediction of a next observed data value, a forecasting error is generated based on the forecast value and the newly observed data value, and whether the data of the network stream is abnormal is determined based on a log likelihood ratio test of the forecasting errors and a threshold value. | 11-25-2010 |
20100329145 | METHOD AND APPARATUS FOR MOBILE FLOW RECORD GENERATION AND ANALYSIS - A method, apparatus, and computer-readable storage medium for generating a mobile flow record for a mobile flow of a mobile node are provided. A method includes receiving information associated with signaling traffic of the mobile node, receiving information associated with bearer traffic of the mobile node, and generating the mobile flow record by correlating the information associated with signaling traffic of the mobile node and the information associated with bearer traffic of the mobile node. The mobile flow record includes IP layer information associated with the mobile flow and wireless layer information associated with the mobile flow. | 12-30-2010 |
20100332755 | METHOD AND APPARATUS FOR USING A SHARED RING BUFFER TO PROVIDE THREAD SYNCHRONIZATION IN A MULTI-CORE PROCESSOR SYSTEM - An apparatus and method for improving synchronization between threads in a multi-core processor system are provided. An apparatus includes a memory, a first processor core, and a second processor core. The memory includes a shared ring buffer for storing data units, and stores a plurality of shared variables associated with accessing the shared ring buffer. The first processor core runs a first thread and has a first cache associated therewith. The first cache stores a first set of local variables associated with the first processor core. The first thread controls insertion of data items into the shared ring buffer using at least one of the shared variables and the first set of local variables. The second processor core runs a second thread and has a second cache associated therewith. The second cache stores a second set of local variables associated with the second processor core. The second thread controls extraction of data items from the shared ring buffer using at least one of the shared variables and the second set of local variables. | 12-30-2010 |
20110010327 | METHOD AND APPARATUS FOR INCREMENTAL TRACKING OF MULTIPLE QUANTILES - A method and apparatus for incremental tracking of multiples quantiles is provided. A method for performing an incremental quantile update using a data value of a received data record includes determining an initial distribution function, updating the initial distribution function to form a new distribution function based on the received data value, generating an approximation of the new distribution function, and determining new quantile estimates from the approximation of the new distribution function. The initial distribution function includes a plurality of initial quantile estimates and a respective plurality of initial probabilities. The initial distribution function is updated to form the new distribution function based on the received data value. The new distribution function includes a plurality of quantile points identifying the respective initial quantile estimates and a respective plurality of new probabilities associated with the respective initial quantile estimates. The approximation of the new distribution function is generated by, for each pair of adjacent quantile points in the new distribution function, connecting the adjacent quantile points using a linear approximation of a region between the adjacent quantile points. The new quantile estimates and the new probabilities associated with the new quantile estimates may then be stored. | 01-13-2011 |
20110010337 | METHOD AND APPARATUS FOR INCREMENTAL QUANTILE TRACKING OF MULTIPLE RECORD TYPES - A method and apparatus are provided for incrementally tracking quantiles in the presence of multiple record types. A method for performing incremental quantile tracking includes receiving a first data record of a first record type having a first data value, determining whether a second data record of a second record type is received, determining an initial distribution function, updating the initial distribution function to form a new distribution function based on the first data value and whether a second data record is received, generating an approximation of the new distribution function, determining at least one new quantile estimate associated with at least one new probability of the new distribution function using the approximation of the new distribution function, and storing the at least one new quantile estimate and the at least one new probability associated with the at least one new quantile estimate. | 01-13-2011 |
20110038269 | Estimation method for loss rates in a packetized network - A method is provided, according to which data are collected on downstream packet losses at a single point in a network. From from the collected data, packet loss rates are estimated on at least two subnetworks downstream of the collection point. The respective subnetworks may differ by one or more links. | 02-17-2011 |
20110194447 | METHOD AND APPARATUS FOR MOBILE FLOW RECORD GENERATION AND ANALYSIS - A method, apparatus, and computer-readable storage medium for generating a mobile flow record for a mobile flow of a mobile node are provided. A method includes receiving information associated with signaling traffic of the mobile node, receiving information associated with bearer traffic of the mobile node, and generating the mobile flow record by correlating the information associated with signaling traffic of the mobile node and the information associated with bearer traffic of the mobile node. The mobile flow record includes IP layer information associated with the mobile flow and wireless layer information associated with the mobile flow. | 08-11-2011 |
20120257628 | MAPPING PRIVATE AND PUBLIC ADDRESSES - Various exemplary embodiments relate to a method and related network node including one or more of the following: identifying, at the network node, a packet associated with a first address; determining, at the network node, that an alternate address mapping is unknown to the network node for the first address; generating a request message based on at least a portion of the packet; transmitting the request message to a different node; receiving a response message, the response message including a second address, wherein the second address is an alternative address for the first address; and storing the first address and the second address together as an alternate address mapping. | 10-11-2012 |
20130005297 | METHOD AND APPARATUS FOR MAPPING OPERATING PARAMETER IN COVERAGE AREA OF WIRELESS NETWORK - A method for mapping an operating parameter in a coverage area of a wireless network includes obtaining parameter measurements for an operating parameter associated with mobile stations operating in a select portion of a network coverage area for a wireless network, the network coverage area formed by base stations defining cellular coverage areas, the select portion formed by at least one base station, each at least one base station including multiple sector antennas, each sector antenna defining a sector coverage area within the cellular coverage area; and, for each obtained parameter measurement, estimating an instant geographic location of the mobile station in relation to the at least one base station serving the mobile station, each instant geographic location based on a round trip measurement and a signal strength measurement associated with the mobile station, each round trip measurement associated with the serving base station. | 01-03-2013 |
20130005348 | METHOD AND APPARATUS FOR GEO-LOCATING MOBILE STATION - A method for estimating a geographic location of a mobile station within a coverage area of a wireless network includes: determining a radial distance of the mobile station from a serving base station based on a round trip measurement and calculating an angular position of the mobile station in relation to the radial distance based on a first signal strength measurement, a second signal strength measurement, and an angular position reference that extends outward from the serving base station. The signal strength measurements representative of power characteristics of RF signals received by the mobile station from first and second sector antennas of the serving base station. An apparatus associated therewith includes a distance module to perform the determining and an angular position module to perform the calculating. The apparatus may be implemented in a base station, a geo-location service node, a network management node, or other communication nodes. | 01-03-2013 |
20130005349 | METHOD AND APPARATUS FOR GEO-LOCATING MOBILE STATION - A method for estimating a geographic location of a mobile station includes calculating an angular position of a mobile station to a base station based on first and second signal strength measurements and an angular position reference for the base station, the signal strength measurements from the mobile station for RF signals from first and second sector antennas of the base station. Another method includes calculating a radial distance of a mobile station from a base station serving the mobile station, determining a signal strength report from the mobile station includes a signal strength measurement for an RF signal from a first sector antenna of the base station, and identifying a geographic location of the mobile station based on intersection of a circle around the base station with a radius of the radial distance with a sub-sector geographic area in an RF coverage map for the first sector antenna. | 01-03-2013 |
20130217413 | METHOD AND APPARATUS FOR GEO-LOCATING MOBILE STATION - A method for estimating a geographic location of a mobile station includes calculating an angular position of a mobile station to a base station based on first and second signal strength measurements and an angular position reference for the base station, the signal strength measurements from the mobile station for RF signals from first and second sector antennas of the base station. Another method includes calculating a radial distance of a mobile station from a base station serving the mobile station, determining a signal strength report from the mobile station includes a signal strength measurement for an RF signal from a first sector antenna of the base station, and identifying a geographic location of the mobile station based on intersection of a circle around the base station with a radius of the radial distance with a sub-sector geographic area in an RF coverage map for the first sector antenna. | 08-22-2013 |
20130238782 | METHOD AND APPARATUS FOR IDENTIFYING AN APPLICATION ASSOCIATED WITH AN IP FLOW USING DNS DATA - A method of identifying application data associated with IP flows traveling between a plurality of mobiles and a network element in a communications network includes receiving, at a network element, one or more domain name system (DNS) packets being sent to one or more mobiles from among of the plurality of mobiles; and building, at the network element, a mapping table mapping one or more IP addresses, respectively, to corresponding application information, based on mapping information within the one or more DNS packets received at the network element. | 09-12-2013 |
20130262656 | SYSTEM AND METHOD FOR ROOT CAUSE ANALYSIS OF MOBILE NETWORK PERFORMANCE PROBLEMS - A method and system for identifying causes of performance metric changes in a network by selecting, from a pool of network event counters, a plurality of candidate counters relevant to a performance metric; grouping the candidate counters into clusters of similar counters; selecting, from each cluster, one or more representative counters; and fitting the selected representative counters to a model of the performance metric to determine thereby a set of representative counters most relevant to the performance metric. | 10-03-2013 |
20140153572 | SOFTWARE-DEFINED NETWORK OVERLAY - A software-defined network overlay capability is configured to control one or more overlay networks using software-defined networking (SDN) in which control functions and forwarding functions are separated. The software-defined network overlay capability may be configured to vertically move packets across network layers, e.g., into an overlay network (e.g., into a tunnel via encapsulation), out of an overlay network (e.g., out of a tunnel via decapsulation), or the like. The software-defined network overlay capability may be configured to move packets from native forwarding infrastructure into an overlay network, between overlay networks (e.g., into a first overlay network from a second overlay network without leaving the second overlay network, out of a first overlay network and into a second overlay network, out of a first overlay network while remaining within a second overlay network, or the like), from an overlay network onto native forwarding infrastructure, or the like. | 06-05-2014 |
Patent application number | Description | Published |
20090088147 | Method and system for correlating IP layer traffic and wirless layer elements in a UMTS/GSM network - The present invention relates to a correlation module for correlating IP layer traffic and wireless layer network elements in a network. According to an example embodiment, the correlation module includes an RNC analyzer, a Gn snoop unit, and/or a mapping unit. The RNC analyzer is configured to collect wireless layer network element information from at least one RNC. The Gn snoop unit is configured to collect wireless layer network element information and IP layer traffic information from at least one Gn interface between a serving GPRS support node and a gateway GPRS support node. The mapping unit is configured to map the IP layer traffic and the wireless layer network elements in the network based on the collected IP layer traffic information and the collected wireless layer network element information. A method of correlating IP layer traffic and wireless layer network elements in a network is also disclosed. | 04-02-2009 |
20090268623 | EFFICIENT PROBABILISTIC COUNTING SCHEME FOR STREAM-EXPRESSION CARDINALITIES - In one embodiment, a method of monitoring a network. The method includes, at each node of a fixed set, constructing a corresponding vector of M components based on data packets received at the node during a time period, M being an integer greater than 1, the fixed set being formed of some nodes of the network; and, based on the constructed vectors, estimating how many of the received data packets have been received by all of the nodes of the set or estimating how many flows of the received data packets have data packets that have passed through all of the nodes of the set. The constructing includes updating a component of the vector of one of the nodes in response to the one of the nodes receiving a data packet. The updating includes selecting the component for updating by hashing a property of the data packet received by the one of the nodes. | 10-29-2009 |
20100292995 | METHOD AND APPARATUS FOR INCREMENTAL QUANTILE ESTIMATION - A method and apparatus for incremental quantile estimation is provided. A method for performing incremental quantile estimation using an estimated cumulative distribution function includes receiving a record, identifying an entity with which the received record is associated, determining a record type of the received record based at least in part on the entity with which the received record is associated, updating the estimated cumulative distribution function based on the record type of the received record, and storing the estimated cumulative distribution function. The record type of the received record is indicative of whether the received record is an insertion record, an update record, or a deletion record. The estimated cumulative distribution function may be used to respond to quantile query requests in real-time or near-real-time. | 11-18-2010 |
20140181978 | DESIGN AND EVALUATION OF A FAST AND ROBUST WORM DETECTION ALGORITHM - A method and computer product are presented for identifying Internet worm propagation based upon changes in packet arrival rates at a network connection. First, unsolicited (i.e., packets that were not requested by the receiver) traffic is separated from solicited traffic at the network connection. The unsolicited traffic arrival patterns are monitored and analyzed for any changes. Once changes in the unsolicited traffic arrival patterns are detected, the changes are mathematically analyzed to detect growth trends. The presence of growth trends that follow certain key characteristics indicate whether the changes are due to worm propagation. | 06-26-2014 |
20140329525 | Methods And Devices For Associating Users To Base Stations In Third Generation Wireless Networks Using Fairness Considerations - The transmission of data from base stations to users (and their devices) in a wireless network is made using proportional fairness without sacrificing throughput by taking in to account fairness considerations at the time the devices are associated with a base station. | 11-06-2014 |
20150067814 | Methods And Systems For Providing Controlled Access To The Internet - Novel, Internet-related architectures, methods and devices are proposed that are based on a fundamentally different philosophy: hosts (e.g., source and destination nodes) are given the ability to specify their access control policies to the network they are a part of, and the network enforces these policies. The architecture proposed is mobility friendly to the ever increasing number of mobile hosts and is scalable as well. | 03-05-2015 |