TSG's core log-enrichment pipeline (galaxy/tsg_olap/storm/log-stream-completion) has a dedicated "radius" branch with repeated "RADIUS log completion" commits, plus a generic "subid completion via HBase" feature -- indicating that resolving network sessions to a subscriber identity via RADIUS/AAA correlation is a general-purpose, platform-level capability built into the core Galaxy/TSG OLAP stack, not limited to the previously-documented Pakistan-specific CyberNarrator deployment.
radius日志补全代码更新 增加subid补全-hbase方式
Defense implications
- Subscriber-identity correlation via RADIUS/AAA appears to be built into the general TSG log pipeline (available to any carrier deployment with RADIUS access), not a bespoke one-off -- assessments of a given TSG deployment's surveillance capability should not assume subscriber correlation is absent just because a CyberNarrator-specific writeup hasn't been documented for that country.
capabilitysubscriber-correlation