Enrichment of monitoring user plane data using PFCP monitoring

1. A non-transitory computer readable medium comprising instructions for providing a mobile user monitoring solution that, when executed by a processor, cause the processor to:

capture a first message over a packet forwarding control protocol (PFCP) interface;

extract (a) a permanent ID from the first message, (b) an uplink (UL) general packet radio service (GPRS) tunneling protocol (GTP)-user plane (U) tunnel endpoint identifier (TEID) from a packet detection rule (PDR) of the first message, and (c) a downlink (DL) GTP-U TED from a forwarding action rule (FAR) of the first message;

store the permanent ID, the UL GTP-U TEID, and the DL GTP-U TEID in a PFCP protocol data unit (PDU) session record;

store the permanent ID in a session details record;

capture a second message transmitted over a user plane interface after the first message is transmitted;

extract a first GTP-U TEID from the second message; and

retrieve the session details record using the first GTP-U TEID by retrieving the permanent ID from the PFCP PDU session record using the first GTP-U TED and retrieving the session details record associated with the permanent ID.

2. The medium of claim 1 , wherein the session details record include two or more of network information, session information, user information, or a user location, wherein the network information includes one or more of a client internet protocol (IP) address, a service IP address, a service/data network name (DNN), the session information includes one or more of the DNN, a radio access technology (RAT) type, or a quality of service (QoS), the user information includes one or more of a subscriber permanent identifier (SUPI), an international mobile subscriber identity (IMSI), a permanent equipment identifier (PEI), a general public subscription identifier (GPSI), subscriber IP addresses, a mobile subscriber international integrated services digital network (MSISDN) number, or a mobile equipment identity (MEI), and the user location includes a public land mobile network (PLMN).

3. The medium of claim 1 , wherein the instructions cause the processor to:

extract data from the second message and data from the session details record; and

correlate the data from the second message with the data from the session details record.

4. The medium of claim 1 , wherein the PFCP interface is one of an N4 interface, an Sxa interface, or an Sxb interface and wherein the user plane interface is one of an N3 interface, an N9 interface, an S1-U interface, or an S5/S8-U interface.

5. The medium of claim 1 , wherein the first message is one or more of a PFCP modify request or a PFCP deletion request.

6. The medium of claim 1 , wherein the permanent ID is one of an international mobile subscriber identity (IMSI) or a permanent equipment identifier (PEI).

7. The medium of claim 1 , wherein each of the UL GTP-U TEID, the DL GTP-U TED, and the first GTP-U TEID is a GTP-U TEID from an access side of a user plane function (UPF).

8. The medium of claim 1 , wherein each of the UL GTP-U TEID, the DL GTP-U TED, and the first GTP-U TEID is a GTP-U TEID from a core side of a user plane function (UPF).

9. The medium of claim 1 , wherein the instructions further cause the processor to:

capture a third message transmitted over the user plane interface;

extract, from the third message, one of the UL GTP-U TEID or the DL GTP-U TED, a first user plane internet protocol (IP) address, a second user plane IP address, an identifier of one of a user datagram protocol (UDP) or a transmission control protocol (TCP), a first user plane port, and a second user plane port;

capture a fourth message transmitted over the user plane interface;

extract, from the fourth message, the other of the UL GTP-U TEID or the DL GTP-U TED, the first user plane internet protocol (IP) address, the second user plane IP address, the identifier of one of a user datagram protocol (UDP) or a transmission control protocol (TCP), the first user plane port, and the second user plane port; and

determine that the UL GTP-U TED and the DL GTP-U TEID are associated with a same tunnel based on the first user plane internet protocol (IP) address, the second user plane IP address, the identifier of one of a user datagram protocol (UDP) or a transmission control protocol (TCP), the first user plane port, and the second user plane port being the same in the third and fourth message.

10. An apparatus comprising a processor and a memory, wherein the memory includes programmed instructions that, when executed by the processor, cause the apparatus to:

capture a first message over a packet forwarding control protocol (PFCP) interface;

extract (a) a permanent ID from the first message, (b) an uplink (UL) general packet radio service (GPRS) tunneling protocol (GTP)-user plane (U) tunnel endpoint identifier (TEID) from a packet detection rule (PDR) of the first message, and (c) a downlink (DL) GTP-U TED from a forwarding action rule (FAR) of the first message;

store the permanent ID, the UL GTP-U TEID, and the DL GTP-U TEID in a PFCP protocol data unit (PDU) session record;

store the permanent ID in a session details record;

capture a second message transmitted over a user plane interface after the first message is transmitted;

extract a first GTP-U TEID from the second message; and

retrieve the session details record using the first GTP-U TEID by retrieving the permanent ID from the PFCP PDU session record using the first GTP-U TED and retrieving the session details record associated with the permanent ID.

11. The apparatus of claim 10 , wherein the session details record include two or more of network information, session information, user information, or a user location, wherein the network information includes one or more of a client internet protocol (IP) address, a service IP address, a service/data network name (DNN), the session information includes one or more of the DNN, a radio access technology (RAT) type, or a quality of service (QoS), the user information includes one or more of a subscriber permanent identifier (SUPI), an international mobile subscriber identity (IMSI), a permanent equipment identifier (PEI), a general public subscription identifier (GPSI), subscriber IP addresses, a mobile subscriber international integrated services digital network (MSISDN) number, or a mobile equipment identity (MEI), and the user location includes a public land mobile network (PLMN).

12. The apparatus of claim 10 , wherein the programmed instructions cause the processor to:

extract data from the second message and data from the session details record; and

correlate the data from the second message with the data from the session details record.

13. The apparatus of claim 10 , wherein the PFCP interface is one of an N4 interface, an Sxa interface, or an Sxb interface and wherein the user plane interface is one of an N3 interface, an N9 interface, an S1-U interface, or an S5/S8-U interface.

14. The medium of claim 10 , wherein the first message is one or more of a PFCP modify request or a PFCP deletion request.

15. The apparatus of claim 10 , wherein the permanent ID is one of an international mobile subscriber identity (IMSI) or a permanent equipment identifier (PEI).

16. The apparatus of claim 10 , wherein each of the UL GTP-U TEID, the DL GTP-U TEID, and the first GTP-U TEID is a GTP-U TEID from an access side of a user plane function (UPF).

17. The apparatus of claim 10 , wherein each of the UL GTP-U TEID, the DL GTP-U TEID, and the first GTP-U TEID is a GTP-U TEID from a core side of a user plane function (UPF).

18. The apparatus of claim 10 , wherein the programmed instructions further cause the processor to:

capture a third message transmitted over the user plane interface;

extract, from the third message, one of the UL GTP-U TEID or the DL GTP-U TEID, a first user plane internet protocol (IP) address, a second user plane IP address, an identifier of one of a user datagram protocol (UDP) or a transmission control protocol (TCP), a first user plane port, and a second user plane port;

capture a fourth message transmitted over the user plane interface;

extract, from the fourth message, the other of the UL GTP-U TEID or the DL GTP-U TED, the first user plane internet protocol (IP) address, the second user plane IP address, the identifier of one of a user datagram protocol (UDP) or a transmission control protocol (TCP), the first user plane port, and the second user plane port; and

determine that the UL GTP-U TED and the DL GTP-U TEID are associated with a same tunnel based on the first user plane internet protocol (IP) address, the second user plane IP address, the identifier of one of a user datagram protocol (UDP) or a transmission control protocol (TCP), the first user plane port, and the second user plane port being the same in the third and fourth message.

19. A method comprising:

capturing a first message over a packet forwarding control protocol (PFCP) interface;

extracting (a) a permanent ID from the first message, (b) an uplink (UL) general packet radio service (GPRS) tunneling protocol (GTP)-user plane (U) tunnel endpoint identifier (TED) from a packet detection rule (PDR) from the first message, and (c) a downlink (DL) GTP-U TEID from a forwarding action rule (FAR) from the first message;

storing the permanent ID, the UL GTP-U TEID, and the DL GTP-U TEID in a PFCP protocol data unit (PDU) session record;

storing the permanent ID in a session details record;

capturing a second message transmitted over a user plane interface after the first message is transmitted;

extracting a first GTP-U TED from the second message; and

retrieving the session details record using the first GTP-U TEID by retrieving the permanent ID from the PFCP PDU session record using the first GTP-U TEID and retrieving the session details record associated with the permanent ID.

20. The method of claim 19 , wherein the session details record include two or more of network information, session information, user information, or a user location, wherein the network information includes one or more of a client internet protocol (IP) address, a service IP address, a service/data network name (DNN), the session information includes one or more of the DNN, a radio access technology (RAT) type, or a quality of service (QoS), the user information includes one or more of a subscriber permanent identifier (SUPI), an international mobile subscriber identity (IMSI), a permanent equipment identifier (PEI), a general public subscription identifier (GPSI), subscriber IP addresses, a mobile subscriber international integrated services digital network (MSISDN) number, or a mobile equipment identity (MEI), and the user location includes a public land mobile network (PLMN).