CoreLens

CoreLens – Core Network Correlation and Troubleshooting

CoreLens is yREMORA’s troubleshooting platform for the mobile core network. An engineer types a number, an IMSI, a billing id or a Diameter session id, and sees in one browser page what the nodes logged, what they billed and what crossed the wire for that call, data session or SMS. No more logging in to several hosts, grepping several files and opening captures by hand: CoreLens asks the nodes through the JSON APIs they already expose and ties every line of one call together.

---

Key Capabilities

Correlation per Call, Data Session and SMS

Logs and CDRs of the core nodes (voice and data core, SMSC, HSS, DRA, STP, USSD gateway, OTA) are matched by the billing id every node writes, so the legs, the SRI, the charging and the CDRs of one call show as a single result:

• Search by MSISDN in any written form, IMSI, billing id, channel id or Diameter session id
• Services: VOICE, DATA, SMS, SIGNALING, USSD and OTA
• Calls: legs, SRI, CDRs with bill time, duration and RTP counters (packets, octets, loss, jitter)
• Data sessions: APN, SGW, QCI, RAT, PLMN, location, in/out octets and packets
• SMS: direction, protocol, addresses, retries and reasons
• SIGNALING, USSD and OTA: one timeline in time order, each line naming its node

Packet Capture Analysis Decoded from the Standards

Captures of the capture hosts are downloaded for the interval of the search, merged across hosts and cut to the subscribers of the result. Every packet is written out from the standards:

• MAP over TCAP (SCCP, M3UA, M2PA), with SCCP Calling and Called Global Titles
• Diameter: Gx, Gy/Ro Credit-Control, S6a/S6d, with roles and Route-Record path
• GTPv2-C and GTPv1-C (S5/S8, S11, Gn/Gp), sessions followed by their TEIDs
• SIP, SMPP (submit_sm tied to its delivery receipt) and RADIUS accounting
• Diameter, GTP and MAP result codes named, with their meaning on hover
• Keep-alive noise (Echo, Watchdog, OPTIONS, Enquire_link, SACK, HEARTBEAT) hidden until ticked

Capture Summary

Counted once over the whole file: GTP Create Session causes, the top SGWs and partner groups, Diameter commands with their results and CCR types, the top Origin-Hosts and IMSIs, SIP and SMPP, with every request left without an answer flagged.

Subscriber Status on Demand

One click next to any number or IMSI asks the live network: CS registration on every HSS (MSC and VLR included), PS/EPS registration and the live data session on the data core, and the SMS still waiting on every SMSC, MO and MT, with retries and last error.

History and Audit

Every search, status query and capture analysis is kept with user, IP, interval and duration. Any entry can be reopened, and a search run again with one click.

Operations from the Browser

Administrator pages bring routine core operations into the same tool:

• Module debug levels per equipment, read and set live
• Capture service of each host: state, start, restart and stop
• Capture configuration editor with line checks, conflict detection and one-click revert
• Kept captures with disk usage and a low-disk-space guard
• Users with two roles (user and admin), suspend, resume and password management

Light Footprint on the Network

CoreLens runs on its own Linux host and asks the nodes through their existing JSON APIs; nothing runs on a node. The optional corelens-api plugin adds a deep log search over current and rotated logs, for calls older than the node’s recent log window. Node integration is assessed per deployment.

Packaged for Production

RPM and DEB packages, or an install script with in-place upgrade: backup before every change, configuration merged and never overwritten, health check before and after, and a man page. Requires PHP (SQLite3, curl, zlib), a web server, tshark and mergecap.

---

Ideal For

Perfect for mobile operators, MVNOs, NOC teams and core network engineers who need to answer “what happened to this call?” in minutes instead of hours.

---

Commercial Competition Analysis