Print

C2TECH LI Decoding and Mediation Solution

Decoding and Mediation of IP data flows enable extraction of metadata which is a critical processing stage of LI. C2TECH Decoding and Mediation solution can be either integrated to Probing and Packet Inspection solutions or works standalone to enable decoding of pre-captured/intercepted traffic.

Decoding and Mediation solution supports scalability for high traffic with its distributed architecture. Based on the traffic volume that needs to be decoded, new decoder servers can be added to the system.

The decoder and mediation engine works in an integrated structure. The decoded traffic (IRI and CC) will be stored in a database/file system.

 

The decoder and mediation engine runs on Linux OS (preferably Ubuntu distribution).


C2TECH LI Decoding and Mediation Solution

Decoder

  • Accepts PCAP files which includes intercepted data and transferred to law enforcement office.
  • Has plug-in architecture enabling developers to easily build additional, custom protocol plugins
  • Easy installation and setup
  • Extraction of VoIP traffic
  • Session correlation of multiple sessions (e.g. RTP and SIP) relating to an application (e.g. VoIP)
  • Extraction of traffic metadata (caller, type of file downloaded, IMSI, etc.) and content (e.g. email text or VoIP stream based on RTP data)
  • Session reconstruction/management and packet reordering
  • Fully documented APIs and tutorials for easy development of custom modules
  • Supported Protocols (If there is no encryption):
  • POP3
  • SMTP
  • IMAP
  • Web Mails
    • Yahoo!
    • Hotmail
    • Gmail
  • Instant Messengers (Text Messages Only)
    • Windows Live Messenger
    • ICQ
    • AIM
    • Google Talk
    • Facebook Chat
    • IRC
    • Yahoo! Messenger

 

  • GPRS Traffic (IP Tunneling, WAP, MMS)
  • HTTP
  • FTP

 

Mediation

  • Generating CDR files and session files from extracted data
  • Processing CDR files and stores in database
  • Tied up with decoder or standalone (optional)
  • Multithreaded (optimized system sources and fast rational to the thread number).
  • Each CDR file is processed at once (Optimized DB sources).
  • Enhanced log mechanism.
  • Able to reconstruct http sessions at mediation level (tied up with decoder-cdr process, or standalone).

Download Decoding and Mediation Solution Brochure