Method and apparatus for detecting tethering in a communications network
A method, non-transitory computer readable medium and apparatus for detecting a tethering function being performed by an endpoint device in a communications network are disclosed. For example, the method analyzes a data packet directed towards the endpoint device, detects a signature based upon analyzing the data packet, and identifies the endpoint device as performing the tethering function based upon detecting the signature.
1. A method for detecting a tethering function being performed by an endpoint device in a communications network, comprising:
analyzing, by a processor, a data packet directed towards the endpoint device;
detecting, by the processor, a signature based upon analyzing the data packet wherein the signature indicates the data packet is for a particular operating system and the detecting the signature comprises identifying the data packet as not being compatible with the endpoint device that is associated with a subscription; and
identifying, by the processor, the endpoint device as performing the tethering function based upon detecting the signature.
2. The method of claim 1 , wherein the analyzing comprises examining a header of the data packet.
3. The method of claim 1 , wherein the analyzing comprises examining the data packet for an announcement identifying the operating system that the data packet is intended for.
4. The method of claim 1 , wherein the analyzing comprises examining a source port and a destination port of the data packet.
5. The method of claim 1 , wherein the endpoint device is identified as performing the tethering function when a predetermined number of tethering instances is detected within a predetermined period of time.
6. The method of claim 1 , wherein the endpoint device is a wireless endpoint device associated with the subscription to a service provided by a network service provider of the communications network.
7. The method of claim 1 , further comprising:
when the endpoint device is identified as performing the tethering function, then if determining whether the endpoint device is an authorized tethering endpoint device; and
when the endpoint device is not an authorized tethering endpoint device, then notifying a user of the endpoint device to change to a tethering subscription plan for the endpoint device.
8. A non-transitory computer-readable medium storing a plurality of instructions which, when executed by a processor, cause the processor to perform operations for detecting a tethering function being performed by an endpoint device in a communications network, the operations comprising:
analyzing a data packet directed towards the endpoint device;
detecting a signature based upon analyzing the data packet, wherein the signature indicates the data packet is for a particular operating system and the detecting the signature comprises identifying the data packet as not being compatible with the endpoint device that is associated with a subscription; and
identifying the endpoint device as performing the tethering function based upon detecting the signature.
9. The non-transitory computer-readable medium of claim 8 , wherein the analyzing comprises examining a header of the data packet.
10. The non-transitory computer-readable medium of claim 8 , wherein the analyzing comprises examining the data packet for an announcement identifying the operating system that the data packet is intended for.
11. The non-transitory computer-readable medium of claim 8 , wherein the analyzing comprises examining a source port and a destination port of the data packet.
12. The non-transitory computer-readable medium of claim 8 , wherein the endpoint device is identified as performing the tethering function when a predetermined number of tethering instances is detected within a predetermined period of time.
13. The non-transitory computer-readable medium of claim 8 , wherein the endpoint device is a wireless endpoint device associated with the subscription to a service provided by a network service provider of the communications network.
14. The non-transitory computer-readable medium of claim 8 , further comprising:
when the endpoint device is identified as performing the tethering function, then determining whether the endpoint device is an authorized tethering endpoint device; and
when the endpoint device is not an authorized tethering endpoint device, then notifying a user of the endpoint device to change to a tethering subscription plan for the endpoint device.
15. An apparatus for detecting a tethering function being performed by an endpoint device in a communications network, comprising:
a processor; and
a computer-readable medium storing a plurality of instructions which, when executed by the processor, cause the processor to perform operations, the operations comprising:
analyzing a data packet directed towards the endpoint device;
detecting a signature based upon analyzing the data packet, wherein the signature indicates the data packet is for a particular operating system and the detecting the signature comprises identifying the data packet as not being compatible with the endpoint device that is associated with a subscription; and
identifying the endpoint device as performing the tethering function based upon detecting the signature.
16. The apparatus of claim 15 , wherein the endpoint device is identified as performing the tethering function when a predetermined number of tethering instances is detected within a predetermined period of time.
17. The apparatus of claim 15 , further comprising:
when the endpoint device is identified as performing the tethering function, then determining whether the endpoint device is an authorized tethering endpoint device; and
when the endpoint device is not an authorized tethering endpoint device, then notifying a user of the endpoint device to change to a tethering subscription plan for the endpoint device.