System and Method for Load Balancing of Network Packets Received from a Mme with Smart Filtering

1. A computer implemented method for monitoring one or more Mobility Management Entities (MMEs) with a plurality of clustered Virtual Machines (VMs), comprising: receiving, at a virtual machine (VM) of a plurality of VMs, a ciphered packets in a packet switching device from one or more MMEs; sending each of, wherein the received ciphered packets packet is sent from the packet switching device to each VM of the plurality of clustered VMs; receiving, in each of the plurality of clustered VMs, the ciphered packets sent from the packet switching device; deciphering, in each of the plurality of clustered VMs at the VM, the received ciphered packets packet; extracting metadata from the deciphered packets in each of the plurality of clustered VMs packet, the metadata comprising first deciphered packet information relating to an individual subscriber assigned to the VM and second deciphered packet information relating to one or more subscribers not assigned to the VM; retaining the first deciphered packet information, based upon analysis of the extracted metadata at the VM, at each individual respective VM of the plurality of clustered VMs wherein the retained first deciphered packet information is associated with an the individual subscriber assigned to a respective the VM retaining the first deciphered packet information; and discarding, at the VM, the second deciphered packet informationat each individual respective VM of the plurality of clustered VMs, based upon analysis of the extracted metadata at the VM, wherein the discarded second deciphered packet information is associated with one or more subscribers not assigned to a respective the VM discarding the second deciphered packet information.

2. The method as recited in of claim 1, further including the steps comprising: generating KPI key performance indicator (KPI) data, in each of the plurality of VMs, associated with an the individual subscriber assigned to a respective the VM; and aggregating subscriber related data from the plurality of clustered VMs in at least one monitoring device operably coupled to the plurality of clustered VMs wherein a user of the at least one monitoring device is provided with the perception that the monitoring device is coupled to a single VM providing the KPI data to a monitor device, wherein the monitor device aggregates subscriber related data from a plurality of clustered VMS.

3. The method as recited in of claim 2, wherein each of the plurality of clustered VMs is configured to generate multiple synthetic packets from a received synthetic packet wherein each of the multiple synthetic packets is associated with an individual subscriber whereby each of the plurality of VMs retains packet information associated with a certain subscriber as prescribed by the monitoring device and discards the remaining synthetic packets associated with other subscribers wherein the received packet is a received synthetic packet, the method further comprising generating multiple synthetic packets from the received synthetic packet, wherein each of the multiple synthetic packets is associated with the individual subscriber.

4. The method as recited in of claim 1, wherein the metadata consists of session information utilized by the plurality of VMs VM for parallel processing of packet sessions across multiple subscriber session threads.

5. The method as recited in of claim 1, wherein the deciphering of comprises deciphering packets in each of the plurality of VMs determines Temporary Identifiers (M-TMSI) the VM to determine a temporary identifier assigned to an the individual subscriber.

6. The method as recited in of claim 1, further including detecting subscriber session transitions during MME handovers or inter-RAT handover.

7. The method as recited in claim 1, further including detecting session transitions during inter-RAT handovers.

8. The method as recited in claim 1, wherein a plurality of monitoring devices are operably coupled to the plurality of clustered VMs.

9. The method as recited in of claim 2, wherein the subscriber related data is aggregated using at least one monitor device is configured to perform and performs on-demand analysis of subscriber packet information.

10. The method as recited in claim 9, wherein the at least one monitoring device includes aggregated subscriber information received from the plurality of clustered VMs such that subscriber data is aggregated from each of the plurality of clustered VMs.

11. The method as recited in claim 10, wherein the monitoring device is configured to aggregate Key Performance Indicator (KPI) data from each of the plurality of clustered VMs associated with one or more subscribers.

12. The method as recited in of claim 1, wherein the at least one a monitor device is configured to perform real-time analysis of subscriber packet information by querying and retrieving subscriber information from each VM of the plurality of clustered VMs relating to a user analysis request so as to retrieve subscriber data from an individual VM regarding a subscriber associated with the user analysis request.

13. The method as recited in claim 1, wherein each VM is a network probe device.

14. The method as recited in claim 13, wherein each network probe device is an ISNG device configured to generate Adaptive Service Intelligence (ASI) data.

15. The method as recited in claim 1, wherein the MME includes at least one of S1-MME, S3, S10 and S6a feed interfaces.

16. A computer system for monitoring one or more Mobility Management Entities (MMEs), comprising: a packet switching device coupled to one or more MMEs configured for receiving a mobility management entity (MME), wherein the packet switching device receives ciphered packets from the one or more MMEs MME; a virtual machine (VM) of a plurality of clustered VMs coupled to the packet switching device, each of the plurality of clustered VMs configure to: wherein the VM includes programmed instructions that when executed cause the VM to: receive a ciphered packets packet sent from the packet switching device; decipher the received ciphered packets packet; extract metadata from the deciphered packets packet, the metadata comprising first deciphered packet information relating to an individual subscriber assigned to the VM and second deciphered packet information relating to one or more subscribers not assigned to the VM; selectively retain the first deciphered packet information, based upon analysis of the extracted metadata, wherein the retained first deciphered packet information is associated with an the individual subscriber assigned to a respective the VM retaining the packet information; and discard the second deciphered packet information based upon analysis of the extracted metadata, wherein the discarded second deciphered packet information is associated with one or more subscribers not assigned to a respective the VM discarding the second deciphered packet information.

17. The computer system as recited in of claim 16, wherein key performance indicator (KPI) data associated with the individual subscriber assigned to the VM is generatedin each of the plurality of VMs relating to an individual subscriber assigned to VM generating the KPI data.

18. The computer system as recited in of claim 17, further including comprising: at least one monitoring device operably coupled to the plurality of clustered VMs, wherein the at least one monitoring device is configured to aggregate subscriber related data from the plurality of clustered VMs, wherein a user of the at least one monitoring device is provided with the perception that the at least one monitoring device is coupled to a single VM.

19. The computer system as recited in of claim 18, wherein each of the plurality of clustered VMs is configured to generate multiple synthetic packets from a received synthetic packet wherein each of the multiple synthetic packets is associated with an individual subscriber whereby each of the plurality of VMs retains packet information associated with a certain subscriber as prescribed by the monitoring device and discards the remaining synthetic packets associated with other subscribers the received packet is a received synthetic packet, the method further comprising generating multiple synthetic packets from the received synthetic packet, wherein each of the multiple synthetic packets is associated with the individual subscriber.

20. The computer system as recited in of claim 18, wherein the at least one monitoring device includes aggregated subscriber information received from the plurality of clustered VMs such that subscriber data is aggregated from each of the plurality of clustered VMs.

21. One or more non-transitory computer-readable media storing computer program instructions that, when executed by one or more processors, effectuate operations comprising: receiving, at a virtual machine (VM) of a plurality of VMs, a ciphered packet from a packet switching device, wherein the received ciphered packet is sent from the packet switching device to each VM of the plurality of VMs; deciphering, at the VM, the received ciphered packet; extracting metadata from the deciphered packet, the metadata comprising first deciphered packet information relating to an individual subscriber assigned to the VM and second deciphered packet information relating to one or more subscribers not assigned to the VM; retaining the first deciphered packet information, based upon analysis of the extracted metadata at the VM, wherein the first deciphered packet information is associated with the individual subscriber assigned to the VM retaining the first deciphered packet information; and discarding, at the VM, the second deciphered packet information, based upon analysis of the extracted metadata at the VM, wherein the discarded second deciphered packet information is associated with one or more subscribers not assigned to the VM discarding the second deciphered packet information.

22. The one or more non-transitory computer-readable media of claim 21, wherein the operations further comprise: generating key performance indicator (KPI) data associated with the individual subscriber assigned to the VM; and providing the KPI data to a monitor device, wherein the monitor device aggregates subscriber related data from a plurality of clustered VMS.

23. The one or more non-transitory computer-readable media of claim 22, wherein the received packet is a received synthetic packet, the method further comprising generating multiple synthetic packets from the received synthetic packet, wherein each of the multiple synthetic packets is associated with the individual subscriber.

24. The one or more non-transitory computer-readable media of claim 22, wherein the subscriber related data is aggregated using at least one monitor device and performs on-demand analysis of subscriber packet information.

25. The one or more non-transitory computer-readable media of claim 21, wherein the metadata consists of session information utilized by the VM for parallel processing of packet sessions across multiple subscriber session threads.

26. The one or more non-transitory computer-readable media of claim 21, wherein a monitor device is configured to perform real-time analysis of subscriber packet information by querying and retrieving subscriber information from each VM of the plurality of VMs relating to a user analysis request so as to retrieve subscriber data from an individual VM regarding a subscriber associated with the user analysis request.