Viavi Solutions Inc.
Categorizing IP-based network traffic using DNS data

Abstract:

A method and system for categorizing Internet Protocol (IP) based network traffic is configured to monitor domain name system (DNS) transactions between at least one customer device and a DNS service. The DNS transactions are used to populate a data table, which is used to enrich a data record (e.g., IPDR). In particular, an IP address and/or customer ID in the data record is used to look up the corresponding domain name in the data table, which is added to the data record. The enriched data record is used to categorize the IP traffic.