Packet Monitoring Solutions I KEY FEATURES

m telesoft \j TECHNOLOGIES

A range of packet monitoring solutions benefiting from hardware acceleration for commercial and homeland security. To monitor, filter, groom and extract data from mixed traffic 10-100G Ethernet and SDH/SONET core telecoms networks.

acket acceleration hardware I Pre-filtering engine reduce and load i balance data flows in DPI processing !

acket Probe Complete integrated solution for U i

Cellular data and packet telephony support r

Packet Extractor

I -Access packet data over SDH/SONET or Ethernet and pre-filter monitored traffic I I

1 Designed for use with Ethernet and I I SDH/SONET (16, 106, 406 & 1006) packet networks W Hardware acceleration by pre-filtering allows full rate monitoring of lOOG packet networks

Independent from network pre-provisioning through use of continuous survey

Reduce cost, power and footprint of monitoring solution

Extracting specific data from increasingly complex, multi-traffic converged networks presents scaleability, provisioning and performance challenges to intelligence gathering agencies. Telesoft Technologies addresses these challenges with a family of 10G to 100G and SDH/SONET monitoring, filtering and grooming products that are able to capture specific packet types and data streams including T l / E l , Vole cellular data, e-mail and web traffic. Continuous auto-discovery simplifies provisioning, whilst hardware acceleration and direct routing of extracted traffic over LAN Ethernet reduce probe and application complexity.

The Packet Probe is a complete integrated solution that provides law enforcement and intelligence agencies with real-time, classified content from 10 to 100Gb and SDH/SONET core networks, delivered over an ETSl handover interface.

I . Integrated complete solution for lawful interception Monitors high-capacity Ethernet and SDH/SONET Automatic survey and classification

I The Packet Extractor provides system integrators with the means to massively reduce the unwanted traffic routed to IP Probes, enabling efficient use of expensive IP Probe assets.

- Highly scaleable through the use of pluggable interface modules - Extracted, classified content delivered over IP LAN

Continuous survey, independent of network re-provisioning

MPAC-IP Monitoring Cards provide a specialist pre-filtering of 10Gb/s and SDH/SONES infrastructure for organizations developing deep packet inspection (DPI) solutions.

Onboard n-tuple filters (IP address, TCe UDP, ...) - Onboard libpcap BPF filter support - Onboard hardware based protocol parsing

Lawful intercept and data retention l

I I Passive Probe

Network survey and flow analysis

Traffic management and flow control

Network QoS assurance

Fraud and intrusion detection

Load distribution between servers

Ask about our other monitoring products for:

Fixed/cellular network TDM Interception

Extraction and grooming of TDM data

Monitoring A b i interfaces for location data

1 i t Switched

HINTON Packet Probe

ml, nu, nu . - LEMF

\ \ Packet mactor

I

'\ packets

MPAC-lP packet \ monitoring cards

3rd party probe 4 Third party platform

HINTON Packet Probe Complete solution for Law Enforcement 1 to lOOGb Ethernet SDH/Sonet with Auto Discovery

Integrated compt& sdution far lawful interception

Monitors high-capacity Ethernet/ SDH/SONET core networks

Dediited hardware accelemtes filtering and extraction

Automated survey and classification

2U CompactPC1 & Rackmount Server option

Monitors packet based core telecoms networks for telephony and cellular data

Monitors and captures telephony and cellular data: - Votk SIP/RTP - GPRS/HSDPA cdlular data (GTP v0

and vl) - HRPD cellular data (GRE)

lGbE, lOGbE, 406bF2 and 100GbF2, SDH/SONET

Powerful DPI processes mnitored traffic I

Generates mmmuniwtiom d-1 records for data retention and OSS/VAS

Support for data Mori from MPU and UTP

Integration to existing tdlection/mediatior systems via standard rnl interfaces: - ElS1 TS 102 232 - ETSI TS 133 108 - 3GPP TS 33.108

The Packet Probe is a highly integrated complete solution that provides law enforcement and government agencies with classified, real-time content from 1-100 Gigabit Ethernet and SDH/SONET core networks. The probe uses auto discovery and deep packet inspection to deliver metadata and targeted content to a collection function via a standard ETSl handover interface.

Intelligent layer 2-4 pre-filtering is applied to multiple lGbE, lOGbE, ~ O G ~ E * ~ , 1 0 0 G b ~ " ~ and SDH/SONET streams by hardware acceleration technology, extracting specific transport and data streams. Advanced deep packet inspection operates on layers 5-7 to identify content for selected targets, based on filtering rules including SIP URI, telephone number, MSISDN, IMSl and IMEl.

Modular construction ensures both scaleability and flexibility, with interface modules available for 4 X lGb, l X lOGb, 4 X 1 0 ~ b " ~ 2 X 4 0 ~ b * ~ and 1 X 100Gb**.

P Probe Classified &

filtered

manager

Classification

I SUN^ & discovery --

Deep park& inspection

U i n Rates, El No Loss

VotP - data

*' CompactPCl model shown. Other hardware platforms are supported includ~ng Rack Mount Server and BladecenterB. *2 Some configurations currently under development. Contact sales for availability.

3 telesoft C TECHNOLOGIES

Packet Extractor Pre-filter unwanted traffic Reduce IP Probe complexity 1 to IOOGbE, SDH/SONET with Auto Discovery

- Highly scaleable through use of pluggable The Packet Extractor provides system integrators with the means to massively reduce

interface modules the unwanted traffic routed to IP Probes, enabling efficient use of expensive IP Probe

Extracts selected traffic streams from assets. Embedded filters extract specific streams (such as VC-X, ATM, PoS) and packet

mixed optical S. IP networks types (UDP, TCP, Vole SMTP) from high-capacity telecommunications networks.

Controlled by external DPI engine Management and configuration are isolated from network re-provisioning by use of continuous Access IP data carried over SDH or SONET survey that scans multiple lGbE, lOGbE, 40GbE* and lOOGbE* and SDH/SONET (STM-x/OC-X) Continuous survey supports any m~xed traff~c. lndlv~dual extracted content is sw~tched in real time to single traff~c type output container structure, independent streams, either on Ethernet LAN or optionally on H13 handover interface. Filtering and extraction of network re-provisioning is controlled by a real time SNMP v3 control API.

l l I I The Packet Extractor also reduces costs and complexity of lawful interception and SIGIN1

switching based on targetting data. Content is routed directly over an ElS l compliant H13 interface from the Packet Extractor to the LEMF, bypassing the IP Probe. - extracts specific traffic from

high-capacity connections lGbE, lOGbE, 40GbE" and 100GbE" and SDH/SONET

Processing nodes Reduces monitoring system capex

Continuous survey classifies data type: Vole E-mail, IP, MPLS, TDM, PPP, VCAT etc Switching b

management < API

Targetted content

Filter

SIP, RTP

l0 to lOOGbE

data

i - D

IP Probe

MI r i rates, ~OSS

Using the EXTRACTOR to simplify SlGlNT IP Probe Fig 2: Probe reduction to lower capex/opex

L telesoft \j TECHNOLOGIES

Packet Acceleration Hardware

I KEY FEATURES

Powerful FPGA-based packet filtering I

= PCle form factor boards for integration with standard servers

Multi-lane PCle host interface

Full-line rate monitoring, 10-100Gb/s Ethernet and SDH/SONET

Zero loss of data

2-3 second data buffer at 100Gb/s

- 1st and 2nd stage packet filtering I

Packet acceleration hardware enables software developers to achieve high data- rate (>lOGb/s) monitoring by pre-filtering

~l lows system integrators and agencies to quickly integrate and use packet filtering technology

User-controlled filters recognize and trigger on layer 2-4 protocols (MAC address, lW4, lW6, port numbers, MPLS, TCP, UDP)

2nd stage filter allows interception of communication from start of message, not just from target match

PCle form factor fits standard servers

P I ACCELERATION

Packet Acceleration Hardware provides system integrators and government agencies the specialist pre-filtering hardware they need to support the operation of deep packet inspection (DPI) engines on lOGbE, ~ o G ~ E * ' , ~ O O G ~ E * ' and SDH/SONET networks. Pre-filtering hardware reduces the amount of data flowing into the DPI engine, reducing the complexity, power and footprint of downstream processing and enabling higher network speeds (>lOGb/s) to be monitored.

The PCle form factor board can be deployed in servers or blade centers. Specifically designed for pre-filtering high-capacity pipes, it accepts 1 0 - 1 0 0 ~ b ~ " ' and SDH/SONET inputs. Powerful FPGA-based packet acceleration allows filtering and load balancing based on layer 2-4 protocols (data, network and transport layers). Configurable filtering removes large volumes of unnecessary traffic (such as IPTV streams), reducing the burden on subsequent processing engines carrying out DPI or other monitoring processes.

A buffer"' keeps 2-3 seconds of data, at 100Gbs aggregate throughput, allowing a two-stage filter process. A 2nd stage filter allows interception of communication content from the beginning of transfer not just from the point of target match, which may occur later.

1 *' Some configurations currently under development. Contact sales for availability.

Headquarters:

Telesoft Technologies Ltd Observatory House Blandford Dorset DTl l 9LQ UK

Americas:

Telesoft Technologies Inc Suite 601 4340 Georgetown Square Atlanta GA 30338 USA

India:

Telesoft Technologies Ltd (Branch Office) Building FC-24 Sector 16A Noida 201301 Uttar Pradesh India Telemfl Technoioqus the Telesaft Techndogtes logo

~ n a n d ~ a r e ~ a ~ T. +l no 454 6001 T. +91 120 466 0300 tradimark of T h l t Technoiogles Ltd i- its subsidiaries. F. +I no 452 0130 E +91 120 466 0301 All olhw brand and product names may be trademark

of their mpeclive companies. Copyright 02011 by E. salesusa@telesoft-technologies.com E. salesindia@telesoft-technologies.com lelesoft Technologies ~td . AII rights resecved.