Detection and reporting of keepalive messages for optimization of keepalive traffic in a mobile network
Detection of network transactions or keepalives for maintaining long lived connections are disclosed. A keepalive detector can detect keepalive traffic based on keepalive parameters determined from an analysis of socket level network communication log data that record data transfer events including data sent from mobile applications or clients on a mobile device and data received by the mobile applications or clients on the mobile device, timing characteristics, protocol types, etc. Various statistical analyses can be performed on the network communication data to detect keepalives, taking into account variability in intervals of the data transfer events and sizes of data sent and received on each event. The keepalive detector can also detect keepalives from stream data on a mobile device by analyzing socket level communication messages including timing characteristics and amount of data transferred to detect keepalives and report keepalives using a data structure.
1. A method of detecting keepalives being used by a mobile application on a mobile device, comprising:
monitoring a plurality of data transfers over a network to and from the mobile application;
analyzing one or more characteristics of a data transfer to identify a pattern indicating that the data transfer may include a keepalive,
wherein the characteristics of the data transfer include the amount of time elapsed between the data transfer and a previous data transfer, and the pattern is identified based on a variance in the amount of time elapsed between the data transfer and previous data transfers being less than a threshold;
detecting a keepalive based on the identified pattern;
maintaining a record of the detected keepalives;
reporting the detected keepalives to a server; and
performing keepalive optimization based on the detected keepalives.
2. The method of claim 1 , wherein the plurality of data transfers over a network are part of a Transport Control Protocol (“TCP”) stream.
3. The method of claim 1 , wherein the characteristics of the data transfer include the amount of data in the data transfer, and the pattern is identified based on the amount of data in the data transfer being less than a threshold.
4. The method of claim 1 , wherein the pattern is identified based on the amount of time elapsed since the last data transfer being greater than a threshold.
5. The method of claim 1 , wherein the identified pattern includes data of a regular byte size being transferred at regular intervals.
6. The method of claim 1 , wherein:
analyzing one or more characteristics of the data transfer includes associating a keepalive weight value with the data transfer; and
detecting a keepalive based on the identified pattern includes determining that the keepalive weight value is greater than a threshold.
7. The method of claim 1 , wherein the characteristics of the data transfer include similarity between the data transfer and the previous data transfer.
8. A mobile device, comprising:
a memory; and
a processor configured to:
monitor a plurality of data transfers over a network to and from the mobile application;
analyze one or more characteristics of a data transfer to identify a pattern indicating that the data transfer may include a keepalive,
wherein the characteristics of the data transfer include the amount of time elapsed between the data transfer and a previous data transfer, and the pattern is identified based on a variance in the amount of time elapsed between the data transfer and previous data transfers being less than a threshold;
detect a keepalive based on the identified pattern;
maintain a record of the detected keepalives, wherein the record is stored in the memory;
reporting the detected keepalives to a server; and
performing keepalive optimization based on the detected keepalives.
9. The mobile device of claim 8 , wherein the plurality of data transfers over a network are part of a Transport Control Protocol (“TCP”) stream.
10. The mobile device of claim 8 , wherein the characteristics of the data transfer include the amount of data in the data transfer, and the pattern is identified based on the amount of data in the data transfer being less than a threshold.
11. The mobile device of claim 8 , wherein the pattern is identified based on the amount of time elapsed since the last data transfer being greater than a threshold.
12. The mobile device of claim 8 , wherein the identified pattern includes data of a regular byte size being transferred at regular intervals.
13. The mobile device of claim 8 , wherein:
analyzing one or more characteristics of the data transfer includes associating a keepalive weight value with the data transfer; and
detecting a keepalive based on the identified pattern includes determining that the keepalive weight value is greater than a threshold.
14. The mobile device of claim 8 , wherein the characteristics of the data transfer include similarity between the data transfer and the previous data transfer.
15. A method of detecting keepalives being used by a mobile application on a mobile device, comprising:
monitoring, on the mobile device, a plurality of data transfers over a network to and from the mobile application;
analyzing, on the mobile device, one or more characteristics of a data transfer to identify a pattern indicating that the data transfer may include a keepalive, wherein the characteristics of the data transfer include at least one of connection information of the data transfer, the amount of data in the data transfer, the amount of time elapsed between the data transfer and a previous data transfer, and similarity between the data transfer and the previous data transfer,
wherein analyzing one or more characteristics of the data transfer includes associating a keepalive weight value with the data transfer;
detecting, on the mobile device, a keepalive based on the identified pattern,
wherein detecting the keepalive includes determining that the keepalive weight value is greater than a threshold;
maintaining, on the mobile device, a record of the detected keepalives;
reporting the detected keepalives to a server; and
performing keepalive optimization based on the detected keepalives.
16. The method of claim 15 , wherein the plurality of data transfers over a network are part of a Transport Control Protocol (“TCP”) stream.
17. The method of claim 15 , wherein the pattern is identified based on the amount of data in the data transfer being less than a threshold.
18. The method of claim 15 , wherein the pattern is identified based on the amount of time elapsed since the last data transfer being greater than a threshold.
19. The method of claim 15 , wherein the identified pattern includes data of a regular byte size being transferred at regular intervals.
20. The method of claim 15 , wherein a keepalive is detected based on the identified pattern of a plurality of the characteristics of the data transfer.