Engineer builds telecom control-plane anomaly detector with local-model RCA on tens of GB/day

l4rz · x · 2026-10-26

l4rz shares the architecture of his IDS/anomaly detector: tap every control-plane feed (GTP-C, Diameter S6A/GY/GX, all syslogs), run detectors 24/7, and on every hit a local model performs root-cause analysis to hand you a preliminary diagnosis within minutes.

The pipeline handles tens of GB per day, keeping a month of data for baselines. He also jokes that ascii art is "the last human job"—Claude's logo attempts kept coming out misshapen, so he drew it by hand.

Related event: Dev Builds Telco Anomaly Detection Stack, Jokes ASCII Art Is the Last Human Job(2 posts)→

Original post →

More from Infra

Infra channel →