KR20040042188A - Apparatus for Analyzing the Traffic of Packet Data on Mobile Communication Network and Method thereof, And Apparatus for Monitoring Service based on the same Analysis - Google Patents

Abstract

PURPOSE: A packet data traffic analyzing apparatus and method in a mobile communication network and a service monitoring apparatus and method based on the packet data traffic analysis are provided to offer more statistics and detailed information for investment of a mobile communication network. CONSTITUTION: A Ethernet separating unit(510) is connected between an IWF(Inter Working Function)/PDSN(Packet Data Serving Node)(400) and S/H(Switching/Hub), router(600) and discriminatively receives user IP packet data as Tx/Rx. A traffic analyzing unit(520) receives an encoded bit stream from the Ethernet separating unit(510) and analyzes packet data traffic by layers of an OSI(Open Systems Interconnection) model. A statistics storing unit(530) stores result data analyzed by the traffic analyzing unit(520) through packet data received through the Ethernet separating unit(510). A statistics referring unit includes a GUI(Graphical User Interface) and provides statistics information in a form desired by a user by searching various data stored in the statistics storing unit(530).

Description

Apparatus for analyzing the traffic of packet data on mobile communication network and method, and apparatus for monitoring service based on packet data traffic analysis apparatus and method thereof, and service monitoring apparatus based on packet data traffic analysis on the same Analysis}

The present invention relates to packet data traffic analysis in a mobile communication network, and more particularly, provides various statistics through analysis of packet data traffic in an IP (Internet Protocol) network, and monitors subscribers by services through such analysis. An apparatus and method for analyzing packet data traffic in a mobile communication network for providing information, and a service monitoring method based on this packet data traffic analysis.

The wireless service standard of the mobile communication service method, especially the Code Division Multiple Access (CDMA) method, which commercializes and provides digital mobile phones in Korea, is the North American-based IS-95A (Interim Standard-95A), which supports the IS-95A network. The IS-95B attempts to provide high-speed data services while maintaining compatibility with existing IS-95As. These IS-95A and IS-95B belong to the second generation (2G) of the evolution of mobile communication network.

Meanwhile, cdma2000-1x, which is a third generation (3G), is a system that improves frequency bandwidth and data transmission speed in IS-95A / B and is also called IS-95C.

In order for subscribers accommodated in such mobile communication networks, especially IS-95A / B and cdma2000-1x networks, to provide data services, each subscriber connects to the network using PPP (Point-to-Point Protocol) and connects to the Internet. Receive wireless data service from

More specifically, in the second generation IS-95A / B network, when the subscriber 10 requests wireless data communication, as shown in FIG. 1, a base transceiver station (BTS) and a base station controller ( Subscriber 10 connects to Interworking Function (IWF) 30 via PPP through BSC: Base Station Controller (20) and PCX (PCs eXchange) 30 and connects with subscriber 10 through this PPP connection. A TCP connection between the service server 50 may be established and wireless data communication with respect to the subscriber 10 may be performed.

In addition, in the 3rd generation cdma2000-1x network, as shown in FIG. 1, when the subscriber 10 requests wireless data communication, the base station apparatus, the base station control apparatus 20, and the PCF (Packet Control Function) 30 are connected. The subscriber 10 can access the packet data serving node (PDSN) 30 through PPP to freely receive a wireless data service from the service server 50.

On the other hand, in the wireless data service system configured as shown in Figure 1 after the IWF or PDSN (30) is composed of an IP network, such as Ethernet (Ethernet).

Analysis of packet data traffic in the IP network configured as described above is dependent on statistics provided by IWF or PDSN 30 or IP devices such as Switching Hub (S / H), Router, etc. There is a problem in that statistics for analyzing various packet data traffic cannot be provided because limited statistical information is always provided to the user for the inherent maximum performance of the system.

In addition, each of these systems in the interval from the BTS / BSC (20) to the S / H, Router 50 only manages the connection state of the system itself or the link that is connected to it, the mobile operator operating service The problem is that it is impossible to monitor.

Accordingly, an object of the present invention is to solve the above problems, and efficiently improve analysis of packet data traffic in a mobile communication network to provide various statistical information for link management and efficient network investment information of a system for providing a stable service. An apparatus and method for analyzing packet data traffic in a mobile communication network are provided.

Another object of the present invention is to provide an apparatus and method for monitoring a service by analyzing packet data traffic in a mobile communication network that provides a more stable wireless data service to a subscriber by monitoring a wireless data service provided in a mobile communication network. .

1 is a diagram illustrating a system configuration of a mobile communication network for providing a conventional wireless data service.

2 is a diagram illustrating a system configuration of a mobile communication network using a packet data traffic analysis apparatus according to an embodiment of the present invention.

3 is a detailed block diagram of an apparatus for analyzing packet data traffic shown in FIG. 2.

FIG. 4 is a diagram illustrating a physical connection of the Ethernet separator of FIG. 2.

5 is a diagram illustrating a protocol structure in an IS-95A / B network according to an embodiment of the present invention.

6 is a diagram illustrating a protocol structure of a cdma2000-1x network according to an embodiment of the present invention.

FIG. 7 is a diagram illustrating a packet data traffic analysis concept for each layer of the OSI model by the traffic analyzer illustrated in FIG. 2.

8 is a diagram illustrating a call flow in the IS-95A / B network according to an embodiment of the present invention.

9 is a diagram illustrating a call flow in the cdma2000-1x network according to an embodiment of the present invention.

FIG. 10 is a diagram illustrating a system configuration of a mobile communication network using a service monitoring apparatus based on packet data traffic analysis according to a second embodiment of the present invention.

FIG. 11 is a detailed block diagram of the apparatus for monitoring a service shown in FIG. 10.

An apparatus for analyzing packet data traffic in a mobile communication network according to a feature of the present invention for achieving the above object,

An apparatus for analyzing packet data traffic transmitted between a subscriber and a service server when a subscriber uses a wireless data service of a specific service server through a mobile communication network,

Located between the mobile communication exchange or packet control device providing the wireless data service to the subscriber and the service server, and physically separates and receives user packet data transmitted between the mobile communication exchange or packet control device and the service server. A packet data separator; A traffic analyzer for classifying and analyzing user packet data received through the packet data separator according to a transmission direction; A statistics storage unit for storing and managing the result data analyzed by the traffic analyzer; And a statistics inquiry unit searching for various data stored in the statistics storage unit and providing statistical information in a form desired by the user.

The packet data separator may be physically connected to an Ethernet connection between the mobile communication switch or the packet control device and the service server to receive user packet data classified into Tx / Rx.

The traffic analyzer may analyze the user packet data received through the packet data separator by dividing the packet data into Tx / Rx.

The traffic analyzer may analyze the TCP transmission flow between the mobile communication switch or the packet control device and the service server through the user packet data.

The statistical inquiry unit may provide various real-time statistics analyzed by the traffic analyzer to the user through a GUI.

Packet data traffic analysis method in a mobile communication network according to another aspect of the present invention,

A method of analyzing packet data traffic transmitted between a subscriber and a service server when a subscriber uses a wireless data service of a specific service server through a mobile communication network,

a) physically separating and receiving user packet data transmitted between a mobile communication switch or a packet control device that provides a wireless data service to the subscriber and the service server; b) dividing and analyzing the user packet data received in step a) according to the transmission direction; And c) providing statistical information in a form desired by the user using the result data analyzed in step b).

Service monitoring apparatus based on packet data traffic analysis in a mobile communication network according to another aspect of the present invention,

An apparatus for monitoring a service to a subscriber by analyzing packet data traffic transmitted between the subscriber and a service server when a subscriber uses a wireless data service of a specific service server through a mobile communication network,

Packet data separation, which is located between a mobile communication exchange or a packet control device that provides a wireless data service to the subscriber and the service server, and physically separates and receives user packet data transmitted between the mobile communication exchange and the service server. part; A traffic analyzer for classifying and analyzing user packet data received through the packet data separator according to a transmission direction; A statistics storage unit for storing and managing the result data analyzed by the traffic analyzer; And a service monitoring unit generating information including whether there is an error for each service for the subscriber through various data stored in the statistics storage unit and providing the information to the operator.

Service monitoring method based on packet data traffic analysis in a mobile communication network according to another aspect of the present invention,

A method for monitoring a service for a subscriber by analyzing packet data traffic transmitted between the subscriber and the service server when the subscriber uses a wireless data service of a specific service server through a mobile communication network,

a) physically separating and receiving user packet data transmitted between a mobile communication switch or a packet control device that provides a wireless data service to the subscriber and the service server; b) dividing and analyzing the user packet data received in step a) according to the transmission direction; And c) generating information including the presence or absence of service-specific abnormalities for the subscriber through the result data analyzed in step b) and providing the information to the operator.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

2 is a diagram illustrating a system configuration of a mobile communication network using a packet data traffic analysis apparatus according to an embodiment of the present invention.

As shown in FIG. 2, the BTS / BSC 200, the PCX / PCF 300, the IWF / PDSN 400, and the packet of the mobile communication network system using the packet data traffic analysis apparatus according to the embodiment of the present invention. Data traffic analysis device 500 and S / H, Router 600 is included.

Here, the BTS / BSC 200 is a wireless network part that substantially guarantees the mobility of the subscriber 100 and performs handoff and wireless support management functions. The BTS is a baseband signal processing, wired / wireless conversion, and transmission and reception of a radio signal. Etc., the network termination device is directly connected to the subscriber 100, and the BSC is located between the BTS and the PCX / PCF 300 to perform base station management and control.

The PCX 300 is a mobile communication switch that connects to the IWF / PDSN 300 when the subscriber 100 wirelessly connected through the BTS / BSC 200 requests a wireless data service, and the PCF 300 is a packet control device. .

The IWF / PDSN 400 is a network interlocking device that is a device for connecting from the PCX / PCF 300 to a data communication network, for example, the Internet, etc., and the IWF corresponds to the second generation IS-95A / B network. PDSN corresponds to the cdma2000-1x network.

S / H 600 is a special type of hub that is connected between IWF / PDSN 400 and service server 700 and forwards the packet to the appropriate port based on the packet address, and Router 600 is the same transport protocol. It is a device that connects separate network using.

The packet data traffic analysis apparatus 500 is connected between the IWF / PDSN 400, the S / H, and the router 600, and transmits the IP packet data transmitted between the IWF / PDSN 400, the S / H, and the router 600. Receive and analyze it to provide various statistics.

3 is a detailed block diagram of the packet data traffic analysis apparatus 500 shown in FIG. 2.

As shown in FIG. 3, the packet data traffic analysis apparatus 500 includes an Ethernet separator 510, a traffic analyzer 520, a statistics storage 530, and a statistics inquiry unit 540.

The Ethernet separating unit 510 is directly connected between the IWF / PDSN 400, the S / H, and the router 600, and receives user IP packet data classified into Tx / Rx.

Referring to FIG. 4, the Ethernet separating unit 500 is physically connected to a line connected from the Ethernet TX port 410 of the IWF / PDSN 400 to the S / H and the Ethernet RX port 610 of the Router 600. Receive the packet data upward from the subscriber 100 to the service server 700, S / H, Ethernet RX port 420 of the IWF / PDSN 400 at the Ethernet TX port 620 of the Router 600 It is physically connected to the line connected to the) receives the packet data down from the service server 700 to the subscriber (100).

Looking at the location of the Ethernet separation unit 510 as a protocol structure of the second generation IS-95A / B network, as shown in Figure 5, the physical layer of the IWF (400) Ethernet (E-NET) and the service server ( Located between the Ethernet (E-NET), the physical layer of the 700, the packet is transmitted and received between the subscriber 100 and the service server 700 by separating the IP network between the IWF 400 and the service server 700 in the physical layer Receive data.

In addition, referring to the location of the Ethernet separation unit 510 as the protocol structure of the third generation cdma2000-1x network, as shown in FIG. 6, the physical layer of the PDSN 400 and the Ethernet server are provided. Located between the physical layer of Ethernet (Ethernet), the IP network between the PDSN (400) and the service server 700 is separated from the physical layer to receive the packet data transmitted and received between the subscriber 100 and the service server 700. .

Meanwhile, the traffic analyzer 520 receives and analyzes the user IP packet data received through the Ethernet separator 510 as Tx / Rx.

Referring to FIG. 7, the traffic analyzer 520 receives an encoded bit stream received through the Ethernet separator 510 and transmits packet data traffic for each layer of an OSI model. Can be analyzed.

For example, since the encoded bit stream is composed of a plurality of protocol control information (PCI) including control information of each layer and data DATA actually transmitted between the subscriber 100 and the service server 700, traffic The analysis unit 520 removes each PCI information from the encoded bit stream, ie, each layer, that is, a data link layer, a network layer, a transport layer, a session layer, and a representation. Packet data traffic at the presentation layer and the application layer can be analyzed. That is, if the PCI information of the physical layer is removed from the encoded bit stream, the DLPDU, which is a protocol data unit (PDU) of the data link layer, can be known, and the packet data traffic in the data link layer can be analyzed therefrom. If the PCI information of the data link layer is removed from the DLPDU, the NPDU which is the PDU of the network layer can be known. If the PCI of the network layer is removed from the NPDU, the TPDU, which is the PDU of the transport layer, can be known. If you remove the PCI of the port layer, you can see the SPDU which is the PDU of the session layer. If you remove the PCI of the session layer from this SPDU, you can see the PPDU, which is the PDU of the presentation layer. The APDU, which is the PDU of the application layer, can be known. Finally, when the PCI of the application layer is removed from the APDU, the data transmitted can be known. The PCI included in the DLPDU, NPDU, TPDU, SPDU, PPDU, APDU, and the like, which are identified as described above, is defined separately for each layer, and such PCI typically includes error control information, flow control information, address information, The traffic analyzer 520 may analyze packet data traffic of each layer transmitted between the subscriber 100 and the service server 700.

8 and 9, the traffic analyzer 520 may obtain various statistics by analyzing traffic through call processing flows in second and third generation networks.

8 is a call processing flow applied to the second generation IS-95A / B network. Referring to this, the subscriber 100 wirelessly transmits to the BTS / BSC 200 for wireless data communication with the service server 700. When attempting to make a call (S10), the BTS / BSC 200 requests the PCX 300 to set up a corresponding call (S12).

In response to such a wireless call setup request from the subscriber 100, the PCX 300 allocates a traffic channel (TCH) to the subscriber 100 (S14), and when the TCH assignment is completed, the PCX 300 completes the IWF (400). If the ISUP (ISDN User Part) setting is requested and the IWF 400 responds to the ISUP setting request, the ISUP setting between the PCX 300 and the IWF 400 is completed (S16).

As such, when the ISUP setting between the PCX 300 and the IWF 400 is completed, the subscriber 100 requests the IWF 400 to establish a PPP data link, and when the IWF 400 responds to the request, the subscriber 100 And the PPP data link between the IWF 400 is established (S18).

Next, the subscriber 100 requests PPP IP allocation from the IWF 400, and the IWF 400 allocates the PPP IP to the subscriber 100 in response to the request (S20).

As such, when the PPP setting between the subscriber 100 and the IWF 400 is completed, the TCP connection request and the setting operation S22 between the subscriber 100 and the service server 700 through the S / H and the router 600 are performed. The subscriber 100 and the service server 700 may transmit the TCP data (S24).

Thereafter, if the TCP data transmission continues and the telephone is disconnected from either side, the TCP connection is released (S26).

Meanwhile, in the call processing flow of the second generation, the traffic analyzer 520 is located between the IWF 400, the S / H, and the router 600, and corresponds to the 'A' portion shown in FIG. After receiving and analyzing the setting and TCP data transmission traffic, the success rate of connection to the service server 700, the connection time, the cause of the connection failure, data usage statistics, menu hit statistics, and the like can be obtained.

Similarly, FIG. 9 is a call processing flow applied to the third generation cdma2000-1x network. Referring to this, the subscriber 100 uses the BSC / PCF 200 and 300 for wireless data communication with the service server 700. Attempt to make a call for establishing a wireless call to the subscriber (S30), when the wireless call is established, the subscriber 100 requests the PDSN 400 to register RP, and if the PDSN 400 responds to the request, the subscriber 100 and RP registration between the PDSN 400 is completed (S32).

As such, when the RP registration between the subscriber 100 and the PDSN 400 is completed, the subscriber 100 requests the PDSN 400 to establish a PPP data link, and when the PDSN 400 responds to the request, the subscriber 100 receives the request. And a PPP data link is established between the PDSN 400 (S34).

Next, the subscriber 100 requests the PSN IP allocation from the PDSN 400, and the PDSN 400 allocates the PPP IP to the subscriber 100 in response to the request (S36).

As such, when the PPP setting between the subscriber 100 and the PDSN 400 is completed, the TCP connection request and the setting operation S38 between the subscriber 100 and the service server 700 through the S / H and the router 600 are performed. The subscriber 100 and the service server 700 may transmit the TCP data (S40).

Thereafter, if the TCP data transmission continues and the telephone is disconnected from either side, the TCP connection is released (S42).

In the call processing flow in the third generation, the traffic analyzer 520 is located between the PDSN 400, the S / H, and the router 600, and the TCP configuration corresponding to the portion 'B' shown in FIG. After receiving and analyzing the TCP data transmission traffic, the success rate of connection to the service server 700, the access time, the cause of the connection failure, data usage statistics, menu hit statistics, and the like can be obtained.

The traffic analyzer 520 may analyze the following traffic through various data obtained as described above.

1) Tx / Rx data usage statistics of OSI 7 Layer (physical layer or application layer)

2) Tx / Rx data usage statistics applying subnet mask to source IP / destination IP

3) Statistics on Tx / Rx data usage by equipment by IWF / PDSN IP pool

4) A11 access / PDSN PPP access statistics by base station divided by service option

5) Application statistics by TCP / UDP port number

Meanwhile, the statistics storage unit 530 stores the result data analyzed by the traffic analyzer 520 through packet data received through the Ethernet separator 510. The statistics storage unit 530 is configured in the form of a general database, and includes a database for storing various data including analysis data and a database manager for searching and providing the corresponding data from the database according to a data search request from the outside. .

The statistical inquiry unit 540 includes a graphical user interface (GUI), which is an interface with the user, and provides statistical information in a form desired by the user by searching for various data stored in the statistical storage unit 530.

Through the GUI of the statistics inquiry unit 540, the user may obtain various real-time statistics analyzed through direct traffic on the IP network.

Such real-time statistics include traffic such as Rx, TX, RX + TX, statistics such as connection attempts, successes, failures, and current status at each layer, usage statistics by IP for each application, and connection success rate by service. Statistics, response time and the like, and base station-specific PPP session success rate statistics.

As described above, by analyzing the traffic by separating the physical layer by the Ethernet separation unit 510 in the IP network, more statistical information can be obtained than the analysis by data traffic statistics provided by the conventional IWF or PDSN. Efficient management of IP network becomes possible.

FIG. 10 is a diagram illustrating a system configuration of a mobile communication network using a service monitoring apparatus based on packet data traffic analysis according to a second embodiment of the present invention.

As shown in FIG. 10, a system of a mobile communication network using a service monitoring apparatus based on packet data traffic analysis according to a second embodiment of the present invention includes a BTS / BSC 200, a PCX / PCF 300, and an IWF / PDSN 400, S / H, Router 600, and service monitoring device 800.

Here, the subscriber 100, the BTS / BSC 200, the PCX / PCF 300, the IWF / PDSN 400, the S / H, the Router 600, and the service server 700 are described with reference to FIG. 1. The same functions as those in the first embodiment will be described with the same reference numerals.

In addition, since the functions and interactions of the BTS / BSC 200, the PCX / PCF 300, the IWF / PDSN 400, the S / H, and the router 600 have been described with reference to FIGS. Here, only the service monitoring apparatus 800 will be described.

The service monitoring apparatus 800 is connected between the IWF / PDSN 400 and the S / H, Router 600, and transmits IP packet data transmitted between the IWF / PDSN 400 and the S / H, Router 600. Receives and analyzes to make various statistics, and these statistics are queried periodically or in real time to provide the presence of various service abnormalities to the mobile telecommunication network operator as visual information.

FIG. 11 is a detailed block diagram of the service monitoring apparatus 800 shown in FIG. 10.

As shown in FIG. 11, the service monitoring apparatus 800 includes an Ethernet separator 810, a traffic analyzer 820, a statistics storage 830, and a service monitor 840.

Here, the Ethernet separator 810, the traffic analyzer 820, and the statistics storage 830 may include the Ethernet separator 510 and the traffic analyzer (1) in the first embodiment described with reference to FIGS. 3 to 9. 520 and the statistical storage unit 530 are the same, so the detailed description thereof will be omitted here.

First, the Ethernet separating unit 810 is directly connected between the IWF / PDSN 400, S / H, and Router 600, and receives user IP packet data classified into Tx / Rx. More specifically, the Ethernet separating unit 810 is physically connected to the line connected between the IWF / PDSN 400 and the S / H, Router 600, and separates the physical layer to the subscriber 100 and the service server 700 Receive user packet data transmitted between

The traffic analysis unit 820 receives and analyzes user IP packet data received through the Ethernet separation unit 810 by Tx / Rx, and analyzes call processing flow in 2nd and 3rd generation networks through such analysis. Various statistics by traffic analysis can be obtained.

The traffic analyzer 820 may obtain various statistics as in the first embodiment, but in the second embodiment, only the statistical information for service monitoring is required, and the statistical information is as follows.

1) Statistics divided by service options (trials, successes, etc.)

2) Statistics by TCP port number (trials, successes, etc.)

Next, the statistics storage unit 830 stores the result data analyzed by the traffic analyzer 820 through packet data received through the Ethernet separator 810. The statistics storage unit 830 is configured in the form of a general database, and includes a database storing various data including analysis data and a database manager for searching and providing the corresponding data from the database according to a data search request from the outside. .

On the other hand, the service monitoring unit 840 is a variety of statistical data stored in the statistics storage unit 830, for example, statistical data such as the number of attempts, success, etc. divided by service options, the number of attempts related to the service by the TCP port number, success Periodically query statistical data such as numbers or inquires in real time at the request of the mobile communication network operator to provide the mobile communication network operator with the presence or absence of abnormality for each service as visual information.

Therefore, the mobile operator can be monitored by the service by separating the traffic to the physical layer by the Ethernet separation unit 810 in the IP network.

Although the present invention has been described with reference to the most practical and preferred embodiment, the present invention is not limited to the above-described embodiment, but also includes various modifications and equivalents within the scope of the following claims.

According to the present invention, the packet data traffic analysis through the IP network is efficiently performed during the wireless data service in the mobile communication network, and more statistics and detailed information can be provided for the investment of the mobile communication network.

In addition, it is possible to monitor the wireless data service by the mobile communication network operator to provide a more stable service to the subscriber.

Claims (21)

An apparatus for analyzing packet data traffic transmitted between a subscriber and a service server when a subscriber uses a wireless data service of a specific service server through a mobile communication network, Located between the mobile communication exchange or packet control device providing the wireless data service to the subscriber and the service server, and physically separate and receive user packet data transmitted between the mobile communication exchange or packet control device and the service server. A packet data separator; A traffic analyzer for classifying and analyzing user packet data received through the packet data separator according to a transmission direction; A statistics storage unit for storing and managing the result data analyzed by the traffic analyzer; And Statistics inquiry unit for searching the various data stored in the statistics storage unit to provide the statistical information in the form desired by the user Packet data traffic analysis apparatus in a mobile communication network comprising a. The method of claim 1, The packet data separator is physically connected to the Ethernet connection between the mobile switching center or the packet control device and the service server to receive user packet data classified into Tx / Rx and receive the packet data traffic in the mobile communication network. . The method of claim 1, The apparatus for analyzing packet data traffic in a mobile communication network, wherein the traffic analyzer divides and analyzes user packet data received through the packet data separator into Tx / Rx. The method of claim 3, And wherein the traffic analyzer analyzes the TCP transmission flow between the mobile communication switch or the packet control device and the service server through the user packet data. The method of claim 1, The statistical inquiry unit provides a packet data traffic analysis apparatus for a mobile communication network, characterized in that for providing the user with a variety of real-time statistics analyzed by the traffic analysis unit via a GUI. The method of claim 5, The various real-time statistics include traffic of Rx, TX, and RX + TX, access attempts, success times, failure counts, current status statistics, usage statistics by IP for each application, and connection success rate statistics by service. And, response time statistics and PPP session success rate statistics for each base station. The method according to any one of claims 1 to 6, Between the packet data separation unit and the service server, a switching hub for forwarding the packet to the appropriate port based on the packet address, and a router for connecting a separate network using the same transport protocol is connected. Packet data traffic analysis apparatus in a mobile communication network. In the method of analyzing the packet data traffic transmitted between the subscriber and the service server when a subscriber uses a wireless data service of a specific service server through a mobile communication network, a) physically separating and receiving user packet data transmitted between a mobile communication switch or a packet control device that provides a wireless data service to the subscriber and the service server; b) dividing and analyzing the user packet data received in step a) according to the transmission direction; And c) providing statistical information in a form desired by the user using the result data analyzed in step b). Packet data traffic analysis method in a mobile communication network comprising a. The method of claim 8, In step a), packet data traffic in a mobile communication network is received by dividing user packet data into Tx / Rx through a physical connection to an Ethernet connection between the mobile switching center or the packet control device and the service server. Analytical Method. The method of claim 8, And analyzing the received user packet data by Tx / Rx in step b). The method of claim 10, And analyzing the TCP transmission flow between the mobile communication switch or the packet control device and the service server through the user packet data. An apparatus for monitoring a service to a subscriber by analyzing packet data traffic transmitted between the subscriber and a service server when a subscriber uses a wireless data service of a specific service server through a mobile communication network, Located between the mobile communication exchange or packet control device providing the wireless data service to the subscriber and the service server, and physically separates and receives user packet data transmitted between the mobile communication exchange or packet control device and the service server. A packet data separator; A traffic analyzer for classifying and analyzing user packet data received through the packet data separator according to a transmission direction; A statistics storage unit for storing and managing the result data analyzed by the traffic analyzer; And Service monitoring unit for generating information including the presence or absence of each service for the subscriber through the various data stored in the statistics storage unit to provide to the operator Service monitoring apparatus based on packet data traffic analysis in a mobile communication network comprising a. The method of claim 12, The packet data separation unit is physically connected to the Ethernet connection between the mobile communication switch or the packet control device and the service server to receive user packet data divided into Tx / Rx based on the analysis of packet data traffic in the mobile communication network. Service monitoring device. The method of claim 12, The traffic monitoring unit based on the packet data traffic analysis in the mobile communication network, characterized in that for analyzing the user packet data received through the packet data separation unit divided by Tx / Rx. The method of claim 12, And the traffic analyzer analyzes the TCP transmission flow between the mobile communication switch or the packet control device and the service server through the user packet data. The method of claim 12, The information including the presence or absence of abnormality by service for the subscriber includes the number of attempts and successes statistical data classified by service option, service related attempts and successes statistical data by TCP port number periodically or by request of the operator. Service monitoring apparatus based on packet data traffic analysis in a mobile communication network, characterized in that the generated in real time query. The method according to any one of claims 12 to 16, Between the packet data separation unit and the service server, a switching hub for forwarding the packet to the appropriate port based on the packet address, and a router for connecting a separate network using the same transport protocol is connected. Service monitoring apparatus based on packet data traffic analysis in mobile communication network. In a method of monitoring a service for a subscriber by analyzing the packet data traffic transmitted between the subscriber and the service server when the subscriber uses a wireless data service of a specific service server through a mobile communication network, a) physically separating and receiving user packet data transmitted between a mobile communication switch or a packet control device that provides a wireless data service to the subscriber and the service server; b) dividing and analyzing the user packet data received in step a) according to the transmission direction; And c) generating information including the presence or absence of service-specific abnormalities for the subscriber through the result data analyzed in step b) and providing the information to the operator; Service monitoring method based on packet data traffic analysis in a mobile communication network comprising a. The method of claim 18, In step a), packet data traffic analysis is performed in a mobile communication network, wherein user packet data is divided into Tx / Rx and received through a physical connection to an Ethernet connection between the mobile switching center or the packet control device and the service server. Based on service monitoring methods. The method of claim 18, And b) analyzing the received user packet data into Tx / Rx and analyzing the packet data traffic in the mobile communication network. The method of claim 20, And analyzing the TCP transmission flow between the mobile communication switch or the packet control device and the service server through the user packet data.