Monitoring and logging voice traffic on data network
A method, article of manufacture, and apparatus for monitoring data traffic on a network is disclosed. In an embodiment, this includes obtaining intrinsic data from at least a portion of the traffic, obtaining extrinsic data from at least a portion of the traffic, associating the intrinsic data with the extrinsic data, and logging the intrinsic data and extrinsic data. The portion of the traffic from which the intrinsic data and extrinsic data are derived may not be stored, or may be stored in encrypted form.
1. A method for monitoring voice traffic on a network comprising network equipment, the method comprising:
identifying a voice portion of the traffic;
submitting the voice portion of the traffic to a speaker recognition engine;
receiving a speaker template from the speaker recognition engine;
obtaining data from the voice portion of the traffic, wherein the data includes intrinsic data and extrinsic data,
wherein intrinsic data is derived from packet headers of the traffic,
wherein extrinsic data is derived from payload of the traffic,
wherein obtaining extrinsic data includes obtaining an associated lexicon identification, wherein the associated lexicon identification is used to classify the traffic, and
associating the intrinsic data with the extrinsic data;
associating the speaker template with the data, wherein a speaker identification number is associated with the speaker template, wherein the speaker identification number and information regarding the speaker template is included in the intrinsic data;
logging the speaker template, the data, and the association in a log, wherein the log is stored on a storage device;
comparing the speaker template to at least one existing speaker template;
creating a new speaker template if the speaker template does not match to the at least one existing speaker template; and
not retaining the portion of the traffic from which the speaker template was obtained.
2. The method as recited in claim 1 , wherein obtaining intrinsic data includes examining headers of packets in a portion of the traffic.
3. The method as recited in claim 2 , wherein the intrinsic data includes at least one of the group comprising source address, destination address, source media access control (MAC) address, destination MAC address, protocol, route taken, time, date, package size, bandwidth, physical port number, and logical port number.
4. The method as recited in claim 1 , wherein obtaining extrinsic data includes deriving data based on content within a portion of the traffic.
5. The method as recited in claim 4 , wherein the extrinsic data includes information about at least one of the group comprising application, file or object type, event data, hash signature, location, encryption, identity, and locale depicted.
6. The method as recited in claim 1 , further comprising receiving a provided speaker template and comparing the provided speaker template to a speaker template in the log to determine if there is a match.
7. The method as recited in claim 6 , further comprising retrieving the data associated with the speaker template if there is a match.
8. The method as recited in claim 1 , wherein comparing the speaker template to at least one existing speaker template includes retrieving the at least one existing speaker template from the log.
9. The method as recited in claim 1 , further comprising indicating a match between the speaker template and the at least one existing speaker template if there is a match.
10. The method as recited in claim 9 , further comprising logging the indication of the match.
11. A method for monitoring voice traffic on a network comprising network equipment, the method comprising:
identifying a voice portion of the traffic;
comparing the voice portion of the traffic to a lexicon to determine if there is a match, wherein the lexicon includes audio elements;
obtaining data from the voice portion of the traffic, wherein the data includes intrinsic data and extrinsic data,
wherein intrinsic data is derived from packet headers of the traffic,
wherein extrinsic data is derived from payload of the traffic,
wherein obtaining extrinsic data includes obtaining an associated lexicon identification, wherein the associated lexicon identification is used to classify the traffic, and
associating the intrinsic data with the extrinsic data;
logging the data with an identification of the lexicon in a log if there is a match between the voice portion of the traffic and the lexicon, wherein the log is stored in a storage device.
12. The method as recited in claim 11 , wherein obtaining intrinsic data includes examining headers of packets in a portion of the traffic.
13. The method as recited in claim 12 , wherein the intrinsic data includes at least one of the group comprising source address, destination address, source media access control (MAC) address, destination MAC address, protocol, route taken, time, date, package size, bandwidth, physical port number, and logical port number.
14. The method as recited in claim 11 , wherein obtaining extrinsic data includes deriving data based on content within a portion of the traffic.
15. The method as recited in claim 14 , wherein the extrinsic data includes information about at least one of the group comprising application, file or object type, event data, hash signature, location, encryption, identity, and locale depicted.
16. The method as recited in claim 11 , wherein the method is performed without retaining the voice portion of the traffic.
17. The method as recited in claim 11 , further comprising:
submitting the voice portion of the traffic to a speaker recognition engine;
receiving a speaker template from the speaker recognition engine;
associating the speaker template with the data; and
logging the speaker template.
18. A computer program product for monitoring voice traffic in a network, comprising a non-transitory computer-readable storage medium encoded with a computer program, causing a computer to execute:
identifying a voice portion of the traffic;
submitting the voice portion of the traffic to a speaker recognition engine;
receiving a speaker template from the speaker recognition engine;
obtaining data from the voice portion of the traffic, wherein the data includes intrinsic data and extrinsic data,
wherein intrinsic data is derived from packet headers of the traffic,
wherein extrinsic data is derived from payload of the traffic,
wherein obtaining extrinsic data includes obtaining an associated lexicon identification, wherein the associated lexicon identification is used to classify the traffic, and
associating the intrinsic data with the extrinsic data;
associating the speaker template with the data, wherein a speaker identification number is associated with the speaker template, wherein the speaker identification number and information regarding the speaker template is included in the intrinsic data;
logging the speaker template, the data, and the association in a log, wherein the log is stored on a storage device;
comparing the speaker template to at least one existing speaker template;
creating a new speaker template if the speaker template does not match to the at least one existing speaker template; and
not retaining the portion of the traffic from which the speaker template was obtained.