The document describes a Traffic Analyzer for GPRS UMTS (TAN) network tool. TAN decodes charging data records to create a database for querying and analyzing network traffic and user behavior. It features a fast decoder, database interface, ready queries, query designer, chart viewer, and GUI. TAN provides traffic analysis like volume by hour, APN, cell, and other metrics. It helps uncover user behavior and identifies top users, busy cells, traffic types, and more.

1. hi
Traffic Analyzer for GPRS UMTS
Network (TAN)
Motorola Jordan GPRS Team
Muhannad Aulama
Hamzeh Salah

2. Introduction
• Because Charging CDRs are the only complete
and comprehensive source of network traffic,
TAN gives all kinds of traffic analysis and
users behavior while still being accurate and
fast.
• It decodes R4, R99, SGSN, and GGSN CDRs
and creates a database. Many different queries
can be applied to unveil all kinds of traffic
analysis and users behavior.

3. Features
• R4, R99, SGSN, and GGSN fast C++ decoder.
• Fast Database interfacing module.
• Ready-to-use commonly used queries.
• Easy-to-use SQL query designer.
• Chart Viewer.
• User-friendly GUI.
• 50 MB of btf files are decoded and saved in
database is less than a minute.

4. Procedure
• Click
“Convert”
and Choose
directory
where btf
files reside.

5. Procedure
• Choose a file
where
database is to
be saved.

6. Procedure
• Conversion Starts. Progress bar shows
pregress.
• Conversion is finished.

7. Procedure
• Choose
from
ready-to-
use
queries for
immediate
result.

8. Procedure
• Or build your own customized query.
Customized query
relieves the user
from learning SQL
while still able to
design almost all
queries

9. Procedure
• The result
of the
query is
shown.

10. Procedure
• Draw
the
results.

11. Procedure
• Export to Excel for
further analysis
and drawing.

12. Results
• Many results, traffic analysis and users
behavior can be drawn by TAN. Charging
CDRs contain all traffic information in terms
of volume, distribution, time, and type.
• Some of the resulting traffic analysis are:
– Traffic volume per hour.
– Traffic volume per APN.
– Traffic volume per GGSN.
– Traffic volume per Cell.
– Traffic volume per QoS.

13. Results
• Some of the resulting statistics are: (Cont.)
– Traffic volume per LAC.
– Traffic volume per RAC.
– Number of PDPs per Hour.
– Number of PDPs per APN.
– Inbound roaming traffic.
– Outbound roaming traffic.
– Top 10 IMSIs.
– Number of PDPs for each billing method.
– And much more.

14. Results
• What advantages does TAN have over normal stats?
– PDP distribution in day. Finding busy hour.
– Finding top Congested Cells.
– Traffic volume and type per RAC, LAC, and Cell.
– Where certain traffic type, for example internet traffic, or
certain QoS, is mostly used.
– Percentage of roaming traffic to local traffic.
– Most accessed roaming APNs.
– Distribution of traffic among local and roaming GGNS.
– Distribution of Traffic among QoS categories.
– Distribution of traffic among different billing methods,
for example, hot billing vs normal billing.

15. Results
Number of PDPs Distribution of PDPs in Day
16000
14000
12000
10000
8000
Number of PDP
6000
4000
2000
0
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
Hour in Day
MB/hour Throughput (MB/hour)
450.0 414.2
400.0
350.0
300.0
250.0 190.2
200.0
150.0
100.0
50.0 8.7 3.6 1.9 0.5 0.5 0.4 0.3 0.3
0.0
48
47
3
5
6
2
4
2
1
3
.8
23
23
24
24
4.
4.
4.
.1
.1
95
16
16
16
4.
4.
1.
1.
37
37
14
14
16
16
4.
0.
0.
0.
.1
.1
16
.9
.9
.9
3.
3.
5.
5.
50
50
80
80
80
7.
18
18
15
15
.1
.1
21
2.
2.
6.
6.
62
62
21
21
21
21
GGSN Address

16. Results
APNs Total Throuput
270
250
200
MB/hour
150
100
68 80
50 35 39 34
14
7 0 3 0 13 6
0 0 3
0
ptt streampre stream internetpre wap mms internet wappre
Downlink Throuput (MB/hour) Uplink Throuput (MB/hour)
MB/hour Top 10 Cell Throuput (MB/hour)
20.0
18.5
18.0
16.0
14.0
12.0
10.0
8.3
8.0
5.4 5.4 5.1
6.0
4.4 4.0 4.0 4.0 4.0
4.0
2.0
0.0
25162 22131 49292 49092 16143 22033 20011 13201 49411 16243
Cell ID

17. Results
Cell 16243 Traffic Type (MB/day)
12.00
9.99
10.00
8.00
(MB/day)
6.00
3.48 2.92
4.00
2.00 1.29 1.16
0.03 0.01
0.00
ET
E
S
S
E
AP
AE
PR
PP
M
PR
RN
S.
W
M
ET
AP
PR
TE
RN
W
IN
G
TE
IN
Top 10 Internet Traffic Cells (MB/day)
Top 10 WAP Traffic Cells (MB/day)
120 112
60 95
49 100
50
37 80
MB/day
40
MB/day
64 58
30 25 60
18 43 40 39
20 14 12 12 35 32 31 30
9 9 9 40
8
10 20
0
0
33
1
3
3
2
3
0
1
1
2
2
51
42
15
26
03
09
32
08
24
45
22
3
1
2
3
1
1
1
3
2
3
91
14
20
22
12
22
04
10
25
25
20
25
40
44
10
32
42
39
40
22
24
90
16
13
32
10
19
21
39
25
25
23
Cell ID
Cell ID

18. Results
MB/hour LAC Throuput (MB/hour)
80 76
70
60 55 54 52
50 43
38 36 35
40
29 27
30 25 24 24 23
20 17 14 14 14 13 11
10
0
0
800 700 900 101 602 400 301 503 100 601 201 402 701 802 202 502 401 300 901 702 333
LAC ID
No. of CDRs
CDR Closing Causes Distribution per Day
200000 188032
150000
100000
48552
50000
7522
0
normalRelease timeLimit volumeLimit
Cause for Record Closing

19. Results
Local vs Roaming Throuput (MB/day)
Roaming
Throuput, 439,
3%
Local Throuput,
14552, 97%
Local Throuput Roaming Throuput
Local vs Roaming BlackBerry Throuput (MB/day)
Local
BlackBerry
Throuput, 32,
40%
Roaming
BlackBeryy
Throuput, 49,
60%

20. PP
bl S.
ac
kb M
NC
er 00
ry
.n 2.
W e M
0
50
100
150
200
250
t.M C 300
AP
M N C4
.V C2
9 1
o ice
YL
6
AN 0.
M
294
st .M
re NC
CC
am 31
W .c 01 0
AP om 5.
23
.C .M M
IN N C
G C
U
C2 23
LA 60 4
bl
ac R .M 19
.M CC
kb N
er C 31
ry 41 0
Results
.n 0.
15
IN
et
.M M
CC
TE N 31
R C4
0
N 10
14
ET .M
.M CC
BL NC
EW 31
AC 01 0
7
KB AP 5.
.M M
ER
N C
R C0 C2
Y. 34
N 02
7
ET .M
Top 10 Roaming APNs Throuput (MB/day)
IN .M C
TE NC C
42
R 01 4
N
7
5.
ET M
M C
N C
C0 23
01 4
6
.M
CC
23
8
4

21. About