GL Communications Inc.
Home  >  Analysis  >  Software Applications  >  Protocol Analysis

Network Surveillance System
(Web based network surveillance system for IP, Wireless, and TDM Networks)

NetSurveyorWeb™  Software Ver 5.9.9  | Contact Us

Click here to get more information on "NetSurveyorWeb™ Live Demo”


The network backbone contains a wealth of information that can be monitored and collected to support diagnostic, troubleshooting, and fraud prevention activities. Surveillance of network characteristics is becoming more important than ever before. Few important aspects of network surveillance include, Performance Monitoring, Security, Fraud Prevention, Physical Layer monitoring, Billing Verification, Remote Protocol Analysis, Failure Prediction, Traffic Engineering, Call Quality Monitoring and Troubleshooting.

GL’s Passive Network Monitoring and Diagnostic Systems support operators, and service providers to perform all the above functions. The network monitoring systems facilitate real-time analysis, historical storage, retrieval, querying, and display of Call Detail Records (CDRs) by non-intrusively connecting to TDM, Optical, or IP networks. Currently supported protocols include LTE, IMS, UMTS IuCS, UMTS IuPS, VoIP (SIP, SIGTRAN, H.323, MAP, CAP, MGCP, MEGACO), SS7, ISDN, CAS, TRAU and GSM.

Typically, this requires protocol analysis probes for capturing physical layer, signalling call flows, and voice/data traffic, and a central system comprised of a database engine, web server, and NetSurveyorWeb™ (PKV170), a web-based application, to facilitate data storage and retrieval through web browser clients.  

GL also offers NetSurveyorWebâ„¢ Lite (PKV169) a cost effective, Simple Plug & Play connection, which is an integrated and simplified web-based system that is distributed at probe level.

GL provides a variety of solutions for network wide monitoring and surveillance solutions Few of them are outlined below

  • IP Network Monitoring and Surveillance System (passive / non-intrusive) - SIP, RTP, H.323, SIGTRAN, MAP, CAP, INAP, MGCP, MEGACO
  • Wireless Network Monitoring and Surveillance System (passive / non-intrusive) – LTE / VoLTE, Diameter, IMS, UMTS, and GSM
  • TDM and Optical Network Monitoring and Surveillance System (passive / non-intrusive probes) - SS7, ISDN, CAS, GSM, TRAU
  • Digital T1 / E1 Line Monitoring, Testing, and Diagnostic System

Key Benefits of NetSurveyorWeb™

  • Ability to identify and analyze CDR using Key Performance Indicators (KPI’s)
  • Ability to listen to the Voice calls
  • Set alarm conditions and generate alerts of different types like email alert, visual alert, audible alert, or even log into tables for future analysis
  • Reports are displayed both in tabular and graphical formats; customize reports and graphs based on SQL queries
  • Graphs provided for Call Completion Ratio, Answer Call, Listening MOS, Conversational MOS, Failure Cause, and Call Duration
  • Real-time data displays information such as called number, calling number, source & destination IP address, RTP packet details, call flow graph, frame decodes and more
  • Apply single or multiple filters for data analysis; use logical operators between filters
  • Ability to export both graphical and tabular reports view as PDF
  • Ability to export the call detail records displayed based on time filter or record index as PDF and CSV.

Typical Applications

  • Comprehensive analysis from overall network health to detailed protocol monitoring
  • Call Detail Records, fraud detection and location, remote protocol analysis and troubleshooting, real-time signaling monitor, traffic optimization engineering, and statistics.
  • Determine actual call signaling routes to verify network functionality under all situations including congestion and loss of SS7 nodes.
  • Revenue and billing verification, alarm monitoring, intrusive testing.
  • Quality of service measurements, call trace and recording.


PC Requirements

  • One or more PCs at Probe Level for Protocol Analyzers
  • 1x PC -Standard Server-Grade Computing Platform at Central Location for NetsurveyorWeb™ Server
  • Windows® 10 Pro
  • 64-bit operating system
  • Intel® Xeon® Processor CPU E5-2640 v4 @ 2.40 GHz (2 Processors)
  • 128 GB RAM
  • (Optional) Secondary RAID for storage
  • (Optional) High Density PCIe NIC - 1Gbps or 10 Gbps

License Requirements

Requires PKV170 + Probe Level Analyzers
Includes Perpetual License, Unlimited Users/Nodes
Includes Oracle 11g Standard Edition One

Cables and Accessories

RJ-45 cables
Single-mode or Multi-mode SFP+ for HD NICs
Non-intrusive tap or Switch with Mirror Port

NetSurveyorWeb™ Lite

PC Requirements

  • 1x PC -Standard Server-Grade Computing Platform at Probe Level for NetsurveyorWeb™ Lite Server, and Protocol Analyzers
  • Windows® 10 Pro
  • 64-bit operating system
  • Intel® Xeon® Processor CPU E5-2640 v4 @ 2.40 GHz (2 Processors)
  • 128 GB RAM
  • (Optional) Secondary RAID for storage
  • (Optional) High Density PCIe NIC - 1Gbps or 10 Gbps

License Requirements

Requires PKV169 + Probe Level Analyzers
Includes Oracle 11g Express Edition

Cables and Accessories

RJ-45 cables
Single-mode or Multi-mode SFP+ for HD NICs
Non-intrusive tap or Switch with Mirror Port

System Architecture

GL's NetSurveyor™ system has a three tier architecture. The first layer consists of GL's Protocol Analyzer Probes which are capable of tapping into live call traffic and non-intrusively capture signaling message summary and build CDRs. The second layer is the Database Store Layer where the captured data is stored. The last layer is the Data Access Layer where the data presentation logic is contained. Each of these components are briefly explained below.

  • Probe computers collecting layer 1 (physical layer), layer 2 (data link layer) and layer 3 (network layer) information. Probes can be T1 E1/T3 E3/ OC-3 STM-1/ OC-12 STM-4/IP.
    • Probe computers run protocol analysis applications along with the necessary hardware and software.
    • These probes could be controlled locally using the protocol analyzer application or remotely using GL's Client-Server application.
    • The analyzer hardware for TDM and optical networks can be connected non-intrusively in Monitor or Bridge Modes, or alternatively the data can be looped through the cards.
    • Multiple Link Sets per T1/E1 (through Digital Cross Connect Grooming) - multiple 64 kbps signaling channels per T1/E1 can be monitored simultaneously by grooming through a digital cross-connect - see diagram below.
    • Probes non-intrusively monitor physical lines of the network and forwards call detail records (CDRs), protocol summary, frame data in hex dump, and statistics to a central database.
    • Probes connect via TCP/IP to ODBC compliant real-time database loader.
    • Only precise and filtered data (user selectable) is collected into the centralized database.

Probe Types –

    • The PacketScan™ is a feature-robust Windows® based software tool that captures and monitors live IP traffic. In the VoIP world, it can monitor and measure SIP, H323, Megaco, MGCP, T.38 and video calls. In the Wireless network, it can monitor 2G, 3G, and 4G protocols such as GSM, UMTS, GPRS, LTE, SIGTRAN signaling over IP. A number of GL’s PacketScan™ probes and/or,PacketProbes™ are deployed in remote locations across the network to passively monitor VoIP traffic.

    • PC based T1 E1 / T3 E3 / Optical probes  collect physical and line level status and performance information. The Intrusive and Non-intrusive "probes" for TDM networks are deployed at strategic locations in a network. They can transmit and collect voice, data, protocol, statistics, and performance information. These probes can relay information to a central / distributed Network Management System (NMS).

  • Database Loader (Data Layer) – A listener application is co-hosted with the database server (SQL DBMS such as Oracle) running on the Data Layer. Interface between the probes and the database is handled by "Listener". The Listener will listen to the streaming data from connected probes, receives data, and feeds the data to DB server.  Multiple probes can be connected via TCP to the Database Loader.
    • Provides load statistics and probe layer 2 status
    • Central control over probes to suspend or resume loading data to DB from connected probes
    • DB stores the data collected by the probes. Records are stored into a relational database (Oracle) using ODBC connection.
    • Listener is modifiable and supportable with MySQL.

  • NetSurveyorWeb™ Webserver (Data Access Layer) serves for data mining operations. The database could be accessed in real-time over the web using applications such as GL’s NetSurveyorWeb™, or queried by customer applications such as a billing system or accessed by a reporting tool such as Crystal Reports, for aggregation and analysis of historic data. The NetSurveyorWeb™ is a user-friendly web-based client which accesses the results provided by the centralized DB through a web server. As depicted in the screenshot below, users can log into the central system locally or remotely to view the collected real-time and historic data including call parameters, layer 1 status display, as well as layer 2 and 3 analysis. Also available is the ability to filter the call records using a variety of filtering mechanisms including time/date, signaling and traffic parameters.

Main Features

 Web Based UI

  • Access real-time and historic data remotely via browser-based clients.
  • Interfaces with Oracle database for storing real-time and historical data.
  • Web administration features to monitor the connected probe status, database loader status, alarms, and perform database maintenance.
  • Multi-user support
  • Modular and distributed architecture is capable of theoretically 'infinite capacity'
  • NetSurveyorWeb™ Lite –designed for a simple plug-and-play system with Web Server Database Engine + Protocol Analyzers on a single system; Offers historical data retention up to 9 GB

Call Detail Records

  • Provides protocol signaling summary and call detail records (CDRs)
  • Ability to customize column views with sorting capabilities for call detail records.
  • Easy navigation of records to display Previous or Next Hour, Day, Month, Year through navigation tool
  • Ability to export the call detail records displayed based on time filter or record index as PDF and CSV
  • Ability to listen to voice calls
  • Ability to decode SMS in different languages
  • Provides options to view CDR, Ladder Diagram, and Protocol Decodes of a selected frame in a single view

Filter & Search Calls of Interest

  • Drill-down to calls of interest with filter and/or search options
  • Customize Filters (Date, Time, and other call control parameters)
  • Apply single or multiple filters for data analysis; use logical operators between filters

Key Performance Indicators (KPI’s)

  • Voice Quality (Listening MOS, Conversational MOS, R-Factor)
  • Signalling Performance - Signal level, Nosie Level, and Echo
  • Delay Measurements (RTD, OWD)
  • Signalling Messages and Traffic Types
  • Call Duration and Call Volume (vs Time)
  • Call Status (Answered, Completed, Busy, Success, Failure with Failure Cause)
  • Call Completion Ratio
  • Link Name Message Counters
  • Time Duration Message Counters, and Disposition Count
  • Reports are displayed both in tabular and graphical formats
  • Customize reports and graphs based on SQL queries.
  • Ability to export both graphical and tabular reports view as PDF
Physical Layer Monitoring
  • Physical Layer Alarms (Link Status, Carries Loss, Sync Loss, ...)
  • Configure and identify the Link set, Probe Name, and Link Location
  • For each link per probe, displays the status of Sync Loss Alarm, Carrier Loss Alarm, and MTP layer
  • Historical icons indicate previous link errors of the probes which are rectified currently
  • Set various alerts to monitor the link status any-time and any-where

Alerts and Indicators

  • Automatically alert users when “Calls of Interest” occur
  • Set alarm conditions and generate alerts of different types like email alert, visual alert, audible alert, or even log into tables for future analysis
  • Provides database query methods to gather status, statistics, events, and results


KPI and Reports

Protocol Type Supported KPI Screenshots

VoIP SIP (SIP and H.323)

  • Answer Call
  • Call Duration
  • Listening MOS
  • Conversational MOS
  • Session Request Delay (Successful Calls)
  • Session Request Delay (Unsuccessful Calls)
  • Session Disconnect Delay
  • Failure Cause
  • Average Packet Loss



  • Call Completion
  • Disposition Count
  • Billing Duration
  • Message Counters
  • Link_MessageCounters


T1E1 Layer 1

  • T1E1 Events



  • Call Completion
  • Call Types



  • Attach Delay
  • S6a Authorization Delay
  • Update Location Delay
  • Session Delay
  • UE Purge Delay
  • Delete Session Delay
  • Call Duration



  • Mapped Vs UnMapped
  • SMS
  • Top 5 SMS
  • Total CDRs on different links
  • Total SMS on different links



  • Call Type (Location Update, Speech Call, SMS, IMSI Detach etc.)
  • Failed call types
  • Call Duration
  • Successful vs Failure Calls
  •  Most Common Failures
  • Billing Duration
  • Total Billing Duration
  • Average Billing Duration in Sec


  • Call Duration


  • Answer Call
  • Call Duration
  • Listening MOS
  • Conversational MOS
  • Failure Cause
  • Average Packet Loss


  • Answer Call
  • Call Duration
  • Failure Cause
  • Session Request Delay (Successful Calls)
  • Session Request Delay (Unsuccessful Calls)
  • Session Disconnect Delay



  • Success VS Failure Calls
  • Failure Call Stats
  • Release Call Stats
  • Total Billing Time
  • Call Types
  • Billing Duration
  •  Message Counters


Call Data Records (CDR) View

The real-time data view provides visibility into each individual call. Each call can be investigated based on call control, signalling and traffic parameters. Flexible filtering can help organize and identify “Calls of Interest”. The CDR view includes the following.

Frame Summary
Frame summary view provides summary of signalling data along with the decodes in the form of Hexdump.

Traffic Summary
This option is currently available only for IP calls. Each call can be expanded to reveal per stream RTP statistics. The RTP/audio parameters such as SSRC number, payload type, total packet count, missing / duplicate / reordered / discarded packet count or %, conversational/R-Factor , listening MOS/R-Factor, cumulative packet loss, Max/Min/Average values of Gap, Min/Max/Average values of jitter, Min/Max/Average values of RTD, and average inter arrival jitter are displayed.

Graph View for each call
This call flow graph allows easy verification of the messages exchanged and the status of the call.
Users can also select any messages and observe the corresponding decode message details in the decode view.

Merge View
This feature display Call Data View, Ladder diagram, and Decode message detail of the selected message in a single view.
Also, CDR view provides flexible options to hide the Detail View, Graph View, or Decode View as required in order to view the information properly.

Navigation and Search Tools
Navigate through records easily using Previous and Next Hour, Day, Month, and Year options as required. A particular call of interest can be searched using the Quick Search option.

Export PDF
Provides an ability to export current call data records view in PDF as well as CSV file formats. In addition, call data records along with the associated call-flows can also be exported in PDF formats.


Filter CDR

The call records can be filtered using Date/Time Filter criteria or by defining custom filter profiles. The Date/Time filter displays the call records based on Minutes, Hours, Days, and user-defined date range. The Display All option displays all the available call records. The Custom Filters provide options to filter call records based on various call control, signaling and traffic parameters.

Custom filter profiles can be saved and loaded with the click of a button. Single or Multiple Custom filters can be applied to perform deep inspection. Edit & update already existing custom filter profiles. Also provides logical operations to apply between parameters within a filter or multiple filters.

Alarm Settings

Trigger alarms and alerts whenever calls-of-interest occur, a network link failure is detected, or regularly at scheduled intervals. Directly access the pre-configured filter profiles or the KPI profiles to trigger alarms and alerts either when the custom filters conditions are passed, or send the pre-defined KPI report hourly, daily, monthly or yearly.  Alert actions can be defined based on the output of the alarm conditions such as like email alert, visual alert, audible alert, SMS alerts, exporting data, setting alarm severity, or even log into tables for future analysis. Alarm Severity type can be set as Minor, Major, or Critical.

Flexible options are provided to save alarm filters as profiles, add, edit or delete the existing alarms, selection of user KPIs, and selection of Custom filters. Schedule alarms and alerts for hourly, daily, monthly, or yearly.

Email / SMS Alerts: Sends Email alerts for alarms. When the alarm condition set by the user is true then the data will be sent as an Email attachment in the PDF format for the given Email address. In case of SMS, a simple text message will be sent to the registered mobile.

Audible Alerts action will beep once for the particular time.

Graphs & Reports

Report provides an overall summary of the captured traffic over the entire network with the help of useful graphs. Such as Link Message Counters, Call Completion, Disposition Count, Billing Duration, and Message Counters
Reports are also available in the form of Bar Graph, Pie Chart, Dot Graph, or tabular format for each of the plotted graph.

Report Configuration

NetSurveyorWeb™ allows users to add new KPIs and customize the reports using Report Configuration feature. Generates customized reports and graphs based on SQL Queries.

Add / Import KPIS
This feature allows user to Add / Import the required KPI to the existing KPI group. This will avoid the user from creating the new KPI as it is readily available. Also, the add option will update the added KPI whenever the user who created this KPI does any modification. The import option will give full permission to the user to edit the KPI as required.


Buyer's Guide

Please Note: The XX in the Item No. refers to the hardware platform, listed at the bottom of the Buyer's Guide, which the software will be running on. Therefore, XX can either be ETA or EEA (Octal/Quad Boards), PTA or PEA (tProbe Units), UTA or UEA (USB Units), HUT or HUE (Universal Cards), and HDT or HDE (HD cards) depending upon the hardware.

Item No. Item Description


NetsurveyorWeb™ Lite
– Probe Level WebServer, PacketScan™, and Oracle 11g Express Edition;


NetsurveyorWeb™ (Perpetual License, Unlimited Users/Nodes)
– Includes Oracle 11g Standard Edition One and Standard Server-Grade Computing Platform


Options with NetSurveyorWeb™ (PKV170)  


ISDN Call Detail Record (CDR) Option for Network Surveillance - requires PKV170


T1 E1 Physical Line Monitoring Option for Network Surveillance - requires PKV170


SS7/SIGTRAN Call Detail Record (CDR) Option for Network Surveillance - requires OLV120 or PKV106 at the central site


GSM (TDM or IP) & TRAU Call Detail Record (CDR) Option for Network Surveillance - requires OLV150 and OLV153 at the central site.


VoIP (SIP, MGCP, Megaco etc.) Call Detail Record (CDR) Option for Network Surveillance - requires PKV101 at the central site


Related Software  


Real-Time ISDN Protocol Analyzer


Offline / Remote ISDN Analyzer


SS7 Analyzer Software


Offline / Remote SS7 Analyzer - requires PKV170


T1 or E1 Real-time GSM Protocol Analyzer


Offline / Remote GSM Analyzer - requires PKV170


T1/E1 Real-time TRAU Protocol Analyzer
TRAU Traffic Playback
TRAU Toolbox™


Offline / Remote TRAU Analyzer - requires PKV170


PacketScan™ - (Online and Offline)


Offline / Remote PacketScan Analyzer - requires PKV170


Offline / Remote SIGTRAN Analyzer - requires PKV170


Network Surveillance Agent Toolkit

XX092 CAS (Channel Associated Signaling) Analyzer
XX100 T1 or E1 Real-Time ISDN Protocol Analyzer
XX110 E1 Real-Time V5.x Protocol Analyzer
XX120 T1 or E1 Real-Time SS7 Protocol Analyzer


Related Hardware  


tProbe™ Dual T1 E1 Laptop Analyzer


Dual T1 E1 Express (PCIe) Boards


tScan16™ T1 E1 Boards


QuadXpress T1E1 Main Board


OctalXpress T1E1 Main Board plus Daughter Board


Portable USB based Dual T1 E1 Laptop Analyzer


Universal HD T1 E1 PCI Cards


Home Page Sitemap Global Presence Email