Real-time Service Monitor (RSM) is a highly scalable packet captures solution, seamless to deploy and with an intuitive user experience. Troubleshoot your problems faster with RSM.

1. Real-time Service Monitor
Network monitoring and troubleshooting solution for voice service providers
1

2. Service Provider Problems
● Time and effort capturing voice sessions for diagnosis and root cause analysis.
● Disperse troubleshooting tools (capture, search, troubleshoot, share).
● Capture disparity (i.e. not able to capture certain traffic).
● Existing tools do not scale well.
● Inability to intercept media at volume (dialer, wholesale traffic).
● Limitations based on network (Layer-2 switches or cloud infrastructure).
● Costly deployment includes installing and maintaining probes.
● Cloud infrastructure does not allow traditional port mirroring.
2

3. Real-time Service Monitor: What is it?
● A scalable network capturing solution for voice service providers that streamlines
troubleshooting and media interception.
● Accelerates troubleshooting with advanced search, call correlation, and analysis
tools.
● Built for scalability on the signaling and media plane.
● Unique architecture accelerates deployment, cloud & datacenter friendly and
reduces cost.
● Collects service data to save your business time and money.
3

4. Real-time Service Monitor: Key Benefits
● Fast and accurate problem localization provides time savings.
● Reduce risk and security breaches associated with access to critical systems.
● Architecture delivers cost effectiveness and reduces maintenance.
● Extensive protocol support.
● Centralized management provides ease of use and single place for great majority of
root cause analysis.
● Cloud and datacenter ready to support the modern telco.
4

5. Real-time Service Monitor: Key Features
● Scalable capture of SIP & RTP, SIP/TLS, SRTP, RTCP and WebRTC sessions.
● Fast and intuitive search to quickly locate sessions and other transactions.
● Single point of search and management simplifies service monitoring.
● Advanced call correlation provides a complete view of a session.
● Call ladder diagrams and audio playback for rapid troubleshooting.
● Embedded SHAKEN decoder accelerates STIR/SHAKEN investigations.
● Selective media intercept for lawful intercept.
● Flexible capture filters: broad or narrow criteria, permanent or temporary.
● Workspace facilitates collaborative troubleshooting.
5

6. How it Works - Packet Capture
● Cluster architecture provides centralized
searching, locality and scalability.
● VSXi is the probe. No external probes or
SPAN/mirroring port needed provides cost
savings, flexibility and coverage.
● Non-Sansay third-party clients supported*.
● Tap rules allow for granular control of traffic
that needs to be captured.
6
* Third-party support is subject to limitations of device as probe.

7. How it Works - Tapping
● Tapping rules provide capturing intelligence
with granular control.
● Facilitate media intercept enablement.
● Permanent, temporary, scheduled.
● Tapped by IP, TN, Service Interface.
7

8. 8
Live Demo

9. Use Cases
● Troubleshoot call issues associated with signaling or media.
● Simplify encrypted VoIP (SIP/TLS & SRTP) troubleshooting including cloud
calling (e.g. Microsoft Teams, Zoom Phone, Webex Calling) and WebRTC.
● Resolve billing disputes with customers and vendors.
● Automatic alerts based on traffic identification.
● Trace repository to streamline response to regulatory traceback requests.
● Media intercept.
9

10. Features Matrix - Party 1
10
Feature Summary
Supported Protocols SIP/UDP, SIP/TCP, SIP/TLS, RTP, SRTP, RTCP, WebRTC, DTLS-SRTP.
TLS 1.0-1.3
Captured Traffic Calls, Registrations, Subscriptions, OPTIONS
Media Intercept Criteria All, per IP address, per TN, service interface
Searching ANI, DNIS, Call-ID, IP/Host, Media IP, Deep Search
Relative Time (e.g. Last 15 minutes) and Absolute Time
Retention Policies Calls, Media, Registrations, Other (Options, Subscriptions).
Configurable from 8 hours to 90 days.
Built-in Tools Audio Playback, Call Ladder Diagram, SHAKEN Decoder, Session Correlation

11. Feature Matrix - Part 2
11
Feature Summary
Architecture Centralized searching with optional distributed packet capture.
Distributed packet capture facilitates for locality, scalability.
Interfaces Desktop and mobile web UI.
Multi-role Access Admins, users, guests.
Notification Method Web UI, e-mail notifications.
Notification Type Tapping event detected, TN call detected
Workspace Shared space of marked packet captures.
Ability to comment on specific capture messages.
Option to download full PCAP if preferred.

12. General Specifications per Node
Note: Performance will vary based on vCPU, RAM and SSD disk I/O.
Baseline hardware: 10 cores Xeon Silver 4210R, 48GB RAM, SSD Micron 5300 Max 3.84TB (520MB/sec)
Traffic Maximum Capacity Hardware Specs
Signaling only 30,000 concurrent calls
1,000 calls per second
12vCPU, 32GB RAM
1TB+ SSD storage
Signaling and media 8,000 concurrent calls 16vCPU, 48GB RAM
16TB+ SSD storage
12

13. Pricing - Cloud
Features Starter Small Medium Large
Concurrent Calls
Signaling Only
500 1000 2500 10000
Media Intercept Sessions* N/A N/A 100 250
Miscellaneous Transactions
Registrations, SIP OPTIONS, Subscribe/Notify
N/A Yes Yes Yes
Storage 1 day 3 days 7 days
1 day (media)
7 days
1 day (media)
Monthly Subscription $250/mo $375/mo $750/mo $1550/mo
13
* We recommend on-prem deployment for media intercept at higher volumes when required.

14. Pricing - Premises (VM)
Features Starter Small Medium Large XL
Sessions (no media) 500 1000 5000 30000 50000
Media Intercept Sessions* 100 250 5000 30000 50000
Miscellaneous Transactions N/A Yes Yes Yes Yes
Distributed Cluster N/A N/A Yes Yes Yes
Storage Unlimited Unlimited Unlimited Unlimited Unlimited
Network License Free** $250/mo $750/mo $2000/mo $3500/mo
14
* Media Intercept beyond 5000 sessions requires additional VM nodes and required specs to match performance goals.
** Setup fee of $750.

15. Pricing - Premises (Appliance)
Features Medium Large XL
Sessions* 5000 30000 50000
Packets per second 1.6M 1.6M 1.6M
Media Intercept Yes Yes Yes
Storage 16TB SSD 16TB SSD 16TB SSD
Network License** $750/mo $2000/mo $3500/mo
Server $18,000 $18,000 $18,000
Optional Hardware Warranty Custom per deployment type.
15
* Maximum sessions with media may require additional RSM node/server based on packets per second load.
** Network License is maximum allowed capacity on one or more RSM servers.

16. RSM + PSM Bundle
● Proactive Monitoring bundle extends service monitoring beyond PCAPs.
● Monitor a comprehensive list of metrics at various levels:
○ SBC
○ Trunk ID
○ IP Address
○ Telephone Number
● Monitoring includes:
○ Histograms and Tables
○ E-mail and SNMP alerts
○ CDR Intelligence
16

17. PSM KPIs
17
Traffic Volume Traffic Quality Events
Concurrent Calls ASR (Answer Seizure Ratio) No Audio
Calls per Second FCR (Failed Call Ratio) One-way Audio
Call Attempts PDD (Post Dial Delay) Long duration
Completed Calls MOS (Mean Opinion Score) Short duration
Total Minutes FAS (False Answer Supervision) SIP OPTIONS Status
Disconnect Codes SIP Registration
SHAKEN Attestation Levels
SHAKEN Verifications

18. PSM Feature Matrix - Part 1
18
Feature Summary
Supported Devices Sansay VSXi, MST3, HRS, NSS, RSM.
Data Sampling Options include every 5-minutes or every 1-minute.
Reports Scheduled or on-demand via e-mail delivery.
Data Streams Real-time and historic data searchable in tables. Includes:
● SBC Traffic Stats
● Trunk ID Traffic Stats
● Subscriber/Registration Stats
● CDR search
● STIR/SHAKEN stats

19. PSM Feature Matrix - Part 2
19
Feature Summary
Graphs Histograms with alerting capabilities on defined thresholds.
Histograms include all SBC available metrics and the following
Trunk ID metrics (Concurrent Calls, CPS, ASR, MOS).
Reports Scheduled or on-demand via e-mail delivery.
Data Streams Real-time and historic data searchable in tables. Includes:
● SBC Traffic Stats
● Trunk ID Traffic Stats
● Subscriber/Registration Stats
● CDR search
● STIR/SHAKEN stats

20. Up Next
● Support for More Devices
○ Add support for port mirroring.
○ Native support for other Sansay products beyond VSXi.
● API
○ Allow integration with existing customer-facing systems, e.g. Search and download PCAP.
○ Enable media intercept remotely.
● CDR Ingestion
○ CDR insights.
○ Automated root cause analysis (e.g. one-way audio, long PDD, poor call quality, dropped call).
○ Trunk ID context.
● Enhanced Media Analysis
○ Media stream reports, DTMF decoder.
20