Application layer metrics monitoring
View Patent ↗The present invention enables the monitoring of application layer metrics of data packets for subscribers or groups of subscribers. In one embodiment, an edge routing node, such as an edge router or the like, between an access network and a core network will identify a subscriber associated with the incoming data packets and then identify an application layer policy to apply to the data packets. The application layer policy may identify the application layer metrics to monitor, how to analyze the application layer metrics, and perhaps actions to take in light of identifying certain application layer metrics, as well as identifying how, where, and when to report the application layer metrics, or an aggregation thereof. With the present invention, application layer metrics can be obtained and analyzed in real time on a subscriber-by-subscriber basis.
1. A method comprising:
identifying a subscriber associated with data traffic;
identifying, in an edge routing device, an application layer policy for the subscriber;
monitoring, in the edge routing device, application layer metrics of the data traffic of the subscriber based on the application layer policy; and
determining from the application layer metrics at least one web search for the subscriber.
2. The method of claim 1 wherein the application layer metrics comprise metrics to identify an application associated with the data traffic.
3. The method of claim 1 wherein the application layer metrics comprise metrics to identify a type of application associated with the data traffic.
4. The method of claim 1 wherein the application layer metrics comprise data content of at least one data packet of the data traffic.
5. The method of claim 1 further comprising analyzing the application layer metrics based on the application layer policy to create an application layer metrics analysis.
6. The method of claim 1 further comprising aggregating the application layer metrics based on the application layer policy to create an application layer metrics analysis.
7. The method of claim 1 further comprising reporting to a service node at least one of the group consisting of the application layer metrics, an analysis of the application layer metrics, and an aggregation of the application layer metrics.
8. The method of claim 1 further comprising:
identifying a plurality of subscribers associated with data traffic; and
monitoring application layer metrics of the data traffic of the plurality of subscribers based on the application layer policy.
9. The method of claim 8 further comprising reporting to a service node at least one of the group consisting of the application layer metrics, an analysis of the application layer metrics, and an aggregation of the application layer metrics for the plurality of subscribers, which includes the subscriber.
10. The method of claim 1 wherein identifying the subscriber comprises identifying at least one of the group consisting of a source, destination, session, port, and address associated with the data traffic of the subscriber.
11. The method of claim 1 further comprising effecting an action other than routing on at least one data packet of the data traffic based on the application layer policy.
12. The method of claim 1 further comprising receiving data packets of the data traffic from a first network and routing the data packets toward a destination over a second network.
13. An edge routing device comprising:
an access network interface;
a core network interface; and
a data plane processor associated with the access network interface and the core network interface and adapted to:
identify a subscriber associated with data traffic;
identify an application layer policy for the subscriber;
monitor application layer metrics of the data traffic of the subscriber based on the application layer policy; and
determine from the application layer metrics at least one web search for the subscriber.
14. The edge routing device of claim 13 wherein the application layer metrics comprise metrics to identify an application associated with the data traffic.
15. The edge routing device of claim 13 wherein the application layer metrics comprise metrics to identify a type of application associated with the data traffic.
16. The edge routing device of claim 13 wherein the application layer metrics comprise data content of at least one data packet of the data traffic.
17. The edge routing device of claim 13 wherein the data plane processor is further adapted to analyze the application layer metrics based on the application layer policy to create an application layer metrics analysis.
18. The edge routing device of claim 13 wherein the data plane processor is further adapted to aggregate the application layer metrics based on the application layer policy to create an application layer metrics analysis.
19. The edge routing device of claim 13 wherein the data plane processor is further adapted to report to a service node at least one of the group consisting of the application layer metrics, an analysis of the application layer metrics, and an aggregation of the application layer metrics.
20. The edge routing device of claim 13 wherein the data plane processor is further adapted to:
identify a plurality of subscribers associated with data traffic; and
monitor application layer metrics of the data traffic of the plurality of subscribers based on the application layer policy.
21. The edge routing device of claim 20 wherein the data plane processor is further adapted to report to a service node at least one of the group consisting of the application layer metrics, an analysis of the application layer metrics, and an aggregation of the application layer metrics for the plurality of subscribers, which includes the subscriber.
22. The edge routing device of claim 13 wherein to identify the subscriber, the data plane processor is further adapted to identify at least one of the group consisting of a source, destination, session, port, and address associated with the data traffic of the subscriber.
23. The edge routing device of claim 13 wherein the data plane processor is further adapted to effect an action other than routing on at least one data packet of the data traffic based on the application layer policy.
24. The edge routing device of claim 13 wherein the data plane processor is further adapted to receive data packets of the data traffic from a first network and route the data packets toward a destination over a second network.
25. The method of claim 1 wherein the method further comprises applying, in the edge routing device, the application layer policy of the subscriber to at least one data packet of the data traffic of the subscriber.
26. The method of claim 1 wherein the at least one web search for the subscriber comprises a popular web search for the subscriber.
27. The method of claim 1 wherein the method further comprises determining from the application layer metrics at least one web destination for the subscriber.
28. The method of claim 27 wherein the at least one web destination for the subscriber comprises at least one popular web destination for the subscriber.
29. The method of claim 1 wherein the method further comprises:
determining from the application layer metrics a number of emails that the subscriber has sent during at least one time interval;
determining that the number of emails that the subscriber has sent during the at least one time interval exceeds a threshold; and
generating an alarm upon determining that the number of emails that the subscriber has sent during the at least one time interval exceeds the threshold.
30. The edge routing device of claim 13 wherein the data plane processor is further adapted to apply the application layer policy for the subscriber to at least one data packet of the data traffic of the subscriber.
31. The edge routing device of claim 13 wherein the at least one web search for the subscriber comprises a popular web search for the subscriber.
32. The edge routing device of claim 13 wherein the data plane processor is further adapted to determine from the application layer metrics at least one web destination for the subscriber.
33. The edge routing device of claim 32 wherein, wherein the at least one web destination for the subscriber comprises at least one popular web destination for the subscriber.
34. The edge routing device of claim 13 wherein the data plane processor is further adapted to:
determine from the application layer metrics a number of emails that the subscriber has sent during at least one time interval;
determine that the number of emails that the subscriber has sent during the at least one time interval exceeds a threshold; and
generate an alarm upon determining that the number of emails that the subscriber has sent during the at least one time interval exceeds the threshold.
35. A method comprising:
identifying a subscriber associated with data traffic;
identifying, in an edge routing device, an application layer policy for the subscriber;
monitoring, in the edge routing device, application layer metrics of the data traffic of the subscriber based on the application layer policy; and
reporting to a service node at least one of the group consisting of the application layer metrics, an analysis of the application layer metrics, and an aggregation of the application layer metrics.