Qosmos ixEngine DPI & Metadata Extraction SDK

Development Tools For Best-In-Class Network Intelligence

Qosmos ixEngine is a DPI and metadata

extraction software development kit

used by TEMs and Solution Vendors to embed

state of the art flow decoding technology

into their applications.

Product: Packet lnsp#t~on and 1 Network lnteltigence ! % h i e

i- i E. I

Development Ki

Applications: Embedding DPI and

a' I metadata lnto various network appl~cat~ons

Users: Developerr vvork~ng for

1 Equ~pment Vendors and Solut~on Vendors

Key Features: Embedded software l~brar~es for full traffic v ~ s i b ~ l ~ t y at w e network s p e d

Application Program

..-*-A-.- r - -A -

CPU +OS

ixEngine delivers complete visibility into

network traffic in real time, including protocol

and application classification and the delivery

of communication metadata. This enables

developers to inject application-level insight into

their solutions.

Designed with developers in mind, ixEngine

accelerates the product development cycle.

Ready-to-use software libraries reduce effort

and lower risks associated with developing

and maintaining a highly complex technology

internally.

Beyond DPI Qosmos delivers enhanced Network Intelligence

by going beyond traditional DPI to also extract

protocol and application metadata, enabling

detailed understanding of network transactions

up to the application level.

High performance The only DPI SDK that can handle a data plane of 10 Gbps on Linux

Optimized for multicore processors such as Cavium, Tilera and NetLogic

Many configuration options enable developers to optimize integration

Optimized R&D Qosmos ready-to-use software reduces development cycles, costs and risks

Developers can focus on building complete solutions and rely on Qosmos for its domain 'lThere is a trend towards using expertise in protocol, application and metadata extraction niche specialists in the DPI area.

Future-proof technology with continuously Outsourcing updated protocols and applications technical capabilities allows Independent core decoding engine and protocol plugin library for fast protocol Telecom Equipment Manufacturers updates while preserving engine stability to focus on overall solutions Protocol Plugin Creator to add customized protocol and application plugins to ixEngine development. "

Technology at a glance Classification of network flows using stateful Deep Packet Inspection and statistical protocol identification

Real-time extraction of metadata and content from traffic flows

Correlation at flow, session, application, service and user levels

1000+ protocol and application plugins to classify flows and extract information

Designed for:

Passive-mode applications: processing of extracted traffic information

Inline-mode applications: managing traffic based on extracted information

Graham Finnie Chief Analyst, Heavy Reading

Your Network is Information

Qosmos ixEngine DPI & Metadata Extraction SDK

% QOSMOS

Beyond DPI: Network Intelligence Technology with metadata extraction Software libraries provide complete traffic

visibility at flow, session, application, service

and user levels. Users can configure the

mechanisms to activate/deactivate depending

on feature and performance requirements:

Protocol signature using Layer 7 stateful DPI (no use of TCPIUDP ports)

Statistical protocol recognition

Automatic de-capsulation of tunneledl encapsulated traffic

Operates on fragmented, duplicated, de-sequenced packets

Operates on bidirectional and unidirectional traffic

Parsing of IP flows enables real-time extraction of traffic metadata (caller, type of file downloaded, IMSI, etc.) and content (e.g. email text or VolP stream based on RTP data)

Advanced condition-matching mechanism based on session context to filter data and packets

High-speed keyword search leveraging flow metadata

Delivery of structured traffic information over simple APls

Memory footprint 400 KB for executable code

400 KB for the full set of protocol & application plugins

2 KB per session

Flexible integration Tunable ratio for granularity of flow analysis/ packet processing rate to fit your application requirements

User-defined metadata extraction

Switchable IP and TCP flow reassembly process for packet reordering

Customizable early packet discard mechanism

Optional packet pre-filtering: depending on application requirements, all packets or only a subset of packets are parsed by ixEngine (e.g. classification only requires the first packets of a flow)

Included in ixEngine Software libraries for flow decoding

Fully documented APls, tutorials and code samples to facilitate integration into third- party solutions

Protocol plugin watch and updates as technology evolves

Frequent delivery of new protocol plugins

Protocol Plugin Creator

Protocol Plugin Creator to easily build Supported environments additional, customized protocol plugins

Linux distributions Debugging information delivery to secure Linux %mdard Base 3.x implementation CPU architectures

Qosmos SessionizerTM ixEngine dynamic session context contains flow identification and observed metadata

Session context is available to users (e.g. for packet management leveraging flow metadata)

Correlation of control and data sessions

Inheritance of traffic attributes on correlated sessions (e.g. SIP session attribute "caller" inherited in RTP session state)

Performance Scalability up to core network speeds at 10's of Gbps

X8632 / X86-64 Linux User Mode

X86-32 Linux Kernel Mode Netlogic XLR 7xx 1 RMI 05 Cavium Octeon 38xx I Simple Executive Cavium Octeon 58xx / Simple Executive Tilera TILEPro64 Freescale PowerQUlCC / Linux User mode Freescale 8572 / Linux User mode

Hardware platforms IBM X-Series servers Bivio 7000 Tilera TILExpress-20GTM card Cavium Networks PCI-Express 10GbE Adapters GE Fanuc NPA-38x4 card

Optimized symmetric multiprocessing (SMP) Continuous Computing Flexpacket PP50 support for scalability up to 96 cores

Optimized code for the industry's highest services performance multicore processors such as Training, certification and support programs Cavium Octeon, NetLogic and Tilera TilePro

Integration of ixEngine into your solution

i Protocol & Application Support

l ~ f l u g i n s M i t e

* 100[k p m d s and appliatiom.

I 0 450Qt metadata extracted

1 EmmpIerof -and ' idmif id 1

I 1 * AudidVideo streaming: RTIf RTSE YVMk

YoarTube, Dai&tottMn. Reb F%px etc.

* VolR H323, g!? MCQ a. Enterprise: Cirw Or& MS Exchamp, M c r Z k m. Peer-to-Per: W f e . B i t T m t efc

* Newark: rrwIE M, 5IX2 etc.

Instant Meaaging: skypea EUYY, Gtalk, etc

Webrnail: GmaiI, Hc~m-rait Yahoo!W7, &c 1 l

flaw level: IPa;ddrezr, r m p o r q , eff

1 S e s i o n M : @ t e r P w U ~ ~ ~ u ' ~ y t 9 1 mfcrrmatiinz etc. &&&."; is%t-

;k*z-".Ie% * Snnakwr: w q d p m p r r u p e r

User h l : cdfec; &gin, fMSf, etc.

Maximum evolutim

I C o n t i w s protocd frequent updates. ~ y p i ~ a l proto~r updates ' imitable within days

l I Qn-demand devdcpnent of custom pratDcof

rerognition

* Prom& Rugh Crca(rr to dewhp your- arstomired protecd and applitltlan phrgif l~

l I

Contacts EMEA Americas APAC

1 Pars - France Germantown, USA S~ngapore - 3 17809 1440 +l 301 5288301 +6563966401

'a-sales@qosrnos corn us-ralesOqosmos corn apac-sales@qosrnos corn