VAS Experts documentation dpi:qoe_analytics:cases:network_health
https://wiki.vasexperts.com/
2026-05-01T18:46:05+00:00VAS Experts documentation
https://wiki.vasexperts.com/
https://wiki.vasexperts.com/lib/tpl/vaswiki/images/favicon.icotext/html2026-04-30T09:10:11+00:00Anonymous (anonymous@undisclosed.example.com)Checking DPI equipment configuration
https://wiki.vasexperts.com/doku.php?id=dpi:qoe_analytics:cases:network_health:dpi_conf&rev=1777540211&do=diff
Checking DPI equipment configuration
"Online Reports" module
Monitoring network status in real time is an ideal tool for debugging DPI configuration during initial setup or after making changes.
In particular, a network operator can set protocol priorities as follows:text/html2026-04-30T09:10:11+00:00Anonymous (anonymous@undisclosed.example.com)Searching for Flood Sources in the Operator’s Network
https://wiki.vasexperts.com/doku.php?id=dpi:qoe_analytics:cases:network_health:flood&rev=1777540211&do=diff
Searching for Flood Sources in the Operator’s Network
1. Configuring statistics export from SSG
The following parameter values must be set in the configuration file /etc/dpi/fastdpi.conf:
netflow=12
netflow_dev=vlan200
netflow_timeout=10
netflow_rate_limit=900
netflow_full_collector=10.0.0.0:1500
netflow_passive_timeout=5
netflow_active_timeout=20
netflow_full_collector_type=2
ipfix_reserved=1text/html2026-04-30T09:10:11+00:00Anonymous (anonymous@undisclosed.example.com)Deterioration of the quality of Internet access
https://wiki.vasexperts.com/doku.php?id=dpi:qoe_analytics:cases:network_health:full_netflow_analytics&rev=1777540211&do=diff
Deterioration of the quality of Internet access
DPI exports information about all client sessions in IPFIX format (NetFlow v10)
The simplest and most studied DPI metric for communication quality testing is RTT. DPI allows you to measure RTT and divide it by directions (to the subscriber and from the subscriber) and specify by protocols and devices if necessary. A large delay for a long time "from the subscriber" most likely indicates that the subscriber is experiencing difficulties with access t…text/html2026-04-30T09:10:11+00:00Anonymous (anonymous@undisclosed.example.com)Speed test services
https://wiki.vasexperts.com/doku.php?id=dpi:qoe_analytics:cases:network_health:speed_measurement&rev=1777540211&do=diff
Speed test services
An average user usually remembers these services only when problems occur. Possible sources of issues include:
* low tariff speed, the subscriber has reached the “ceiling”
* problems in the operator’s network
* uplink problems (including unstable operation of a service required by the subscriber)text/html2026-04-30T09:10:11+00:00Anonymous (anonymous@undisclosed.example.com)Detecting DDoS attacks, BotNet activity, and visits to specific resources using triggers in QoE
https://wiki.vasexperts.com/doku.php?id=dpi:qoe_analytics:cases:network_health:triggers_setup&rev=1777540211&do=diff
Detecting DDoS attacks, BotNet activity, and visits to specific resources using triggers in QoE
Triggers are used to search data in QoE Stor based on specified parameters. When a trigger fires, one of the following actions can occur:
* Notification intext/html2026-04-30T09:10:11+00:00Anonymous (anonymous@undisclosed.example.com)Detecting SSH bruteforce attacks using triggers in QoE
https://wiki.vasexperts.com/doku.php?id=dpi:qoe_analytics:cases:network_health:triggers_ssh_bruteforce&rev=1777540211&do=diff
Detecting SSH bruteforce attacks using triggers in QoE
Triggers are used to search data in QoE Stor by specified parameters. When a trigger fires, one of the following actions can occur:
* notification in GUI
* HTTP action
* email delivery
Required