|
In Fig, the IPs of the source and destination of packets collected in the gNB and the 5GC section were the IPs of the gNB and 5GC, respectively. Because they are tunneled, they cannot be executed in other environments even when the flow is collected.
So, we positioned the network collector in the model factory. It is capable of storing the traffic data after removing the tunnel header of the packet.
By eliminating the GTP tunnel header of the collecting packet, the original source IP and the destination IP can be extracted for analyzing network flow. |