SIPFIX: a scheme for distributed SIP monitoring

  • Authors:
  • Sven Anderson;Saverio Niccolini;Dieter Hogrefe

  • Affiliations:
  • Institute of Computer Science, University of Göttingen, Germany;NEC Laboratories Europe, Heidelberg, Germany;Institute of Computer Science, University of Göttingen, Germany

  • Venue:
  • IM'09 Proceedings of the 11th IFIP/IEEE international conference on Symposium on Integrated Network Management
  • Year:
  • 2009
  • Scalable service performance monitoring

    AIMS'10 Proceedings of the Mechanisms for autonomous management of networks and services, and 4th international conference on Autonomous infrastructure, management and security

Quantified Score

Hi-index 0.00

Visualization

Abstract

Voice-over-IP (VoIP) is a key component of Next-Generation-Networks and rapidly becoming more and more common in the Internet in general. This also increases the demand of VoIP operators for a scalable, distributed and flexible monitoring. But current monitoring architectures are either not designed for including application layer protocol analysis and data acquisition, or they are very specific and static, interacting directly with a certain VoIP product and are not integrated into the general network monitoring. Fully based on the new standards of the IP Flow Information eXchange (IPFIX) and the concept of Mediators we specify a monitoring scheme for the Session-Initiation-Protocol (SIP), the most common protocol used for VoIP. Therefore it integrates the acquisition and processing of VoIP traffic measurements into the general traffic monitoring, building a cost-effective cross-layer monitoring system. In use case examples we show how SIPFIX can cope with many challenges and requirements of SIP monitoring, like correlation of SIP and media traffic observed at different probes, Quality-of-Service evaluation, security and integrity checks, Denial-of-Service defense and real-time status reports.