Dear nanog: Honestly, I expect replies to this question to range between zero and none, but I have to ask it. I understand the CALEA tap mechanism for most ISPs, generally, works like this: * we outsource our CALEA management to company X * we don't even know there's been a request until we've gotten a bill from X. And that's the extent of it. Well, golly Slothrop, maybe someone else has started picking up the tab. Would you even know? Is that possible? Thanks, Randy Fischer
Honestly, I expect replies to this question to range between zero and none, but I have to ask it.
Surprise!
I understand the CALEA tap mechanism for most ISPs, generally, works like this:
* we outsource our CALEA management to company X * we don't even know there's been a request until we've gotten a bill from X.
I've never even thought of the idea of outsourcing CALEA requests. That is probably because I would never consider doing it. Perhaps we are in the minority, but we scrutinize every request of any sort to ensure it has jurisdiction and is valid. I can't even fathom the thought of trusting a third party for this.
(from back when I cared more about calea as an implementor) On Sun, Jun 9, 2013 at 8:15 PM, Alex Rubenstein <alex@corp.nac.net> wrote:
Honestly, I expect replies to this question to range between zero and none, but I have to ask it.
Surprise!
<aol>me too!</aol>
I understand the CALEA tap mechanism for most ISPs, generally, works like this:
* we outsource our CALEA management to company X * we don't even know there's been a request until we've gotten a bill from X.
I've never even thought of the idea of outsourcing CALEA requests. That is probably because I would never consider doing it.
Perhaps we are in the minority, but we scrutinize every request of any sort to ensure it has jurisdiction and is valid. I can't even fathom the thought of trusting a third party for this.
agreed, since most of the tap-work actually requires changes on network equipment in the network you run, why would you outsource this? Especially when the taps impact forwarding performance of the platforms in question...
On Sun, 9 Jun 2013, Randy Fischer wrote:
Dear nanog:
Honestly, I expect replies to this question to range between zero and none, but I have to ask it.
I understand the CALEA tap mechanism for most ISPs, generally, works like this:
* we outsource our CALEA management to company X * we don't even know there's been a request until we've gotten a bill from X.
And that's the extent of it.
Well, golly Slothrop, maybe someone else has started picking up the tab. Would you even know?
Is that possible?
Inconceivable! That'd be like having your security system monitoring company able to eavesdrop on your house any time they want, just in case. Come to think of it, the latest greatest systems are capable of that. It sounds so stupid to me, I bet someone's doing it. ---------------------------------------------------------------------- Jon Lewis, MCP :) | I route | therefore you are _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________
It is possible, and not just for "ISPs" Matthew Kaufman (Sent from my iPhone) On Jun 9, 2013, at 3:59 PM, Randy Fischer <randy.fischer@gmail.com> wrote:
Dear nanog:
Honestly, I expect replies to this question to range between zero and none, but I have to ask it.
I understand the CALEA tap mechanism for most ISPs, generally, works like this:
* we outsource our CALEA management to company X * we don't even know there's been a request until we've gotten a bill from X.
And that's the extent of it.
Well, golly Slothrop, maybe someone else has started picking up the tab. Would you even know?
Is that possible?
Thanks,
Randy Fischer
While its possible to do this, you would have to have a device that would not impact performance typically at every exit point, but in a perfect world it would be on the clients CPE device! Our wireless CPE's can do this. I would not that a business model to not bill until a request is completed would work due to the amount of hardware that x company would have to put out. Dennis Burgess, Mikrotik Certified Trainer Author of "Learn RouterOS- Second Edition" Link Technologies, Inc -- Mikrotik & WISP Support Services Office: 314-735-0270 Website: http://www.linktechs.net - Skype: linktechs -- Create Wireless Coverage's with www.towercoverage.com - 900Mhz - LTE - 3G - 3.65 - TV Whitespace -----Original Message----- From: Randy Fischer [mailto:randy.fischer@gmail.com] Sent: Sunday, June 09, 2013 5:59 PM To: North American Network Operators Group Subject: Mechanics of CALEA taps Dear nanog: Honestly, I expect replies to this question to range between zero and none, but I have to ask it. I understand the CALEA tap mechanism for most ISPs, generally, works like this: * we outsource our CALEA management to company X * we don't even know there's been a request until we've gotten a bill from X. And that's the extent of it. Well, golly Slothrop, maybe someone else has started picking up the tab. Would you even know? Is that possible? Thanks, Randy Fischer
The only calea intercept I watched take place was with a system made by Sandvine.. And it was pretty shocking. Sent from my Mobile Device. -------- Original message -------- From: Dennis Burgess <dmburgess@linktechs.net> Date: 06/10/2013 6:25 AM (GMT-08:00) To: Randy Fischer <randy.fischer@gmail.com>,nanog@nanog.org Subject: RE: Mechanics of CALEA taps While its possible to do this, you would have to have a device that would not impact performance typically at every exit point, but in a perfect world it would be on the clients CPE device! Our wireless CPE's can do this. I would not that a business model to not bill until a request is completed would work due to the amount of hardware that x company would have to put out. Dennis Burgess, Mikrotik Certified Trainer Author of "Learn RouterOS- Second Edition" Link Technologies, Inc -- Mikrotik & WISP Support Services Office: 314-735-0270 Website: http://www.linktechs.net - Skype: linktechs -- Create Wireless Coverage's with www.towercoverage.com<http://www.towercoverage.com> - 900Mhz - LTE - 3G - 3.65 - TV Whitespace -----Original Message----- From: Randy Fischer [mailto:randy.fischer@gmail.com] Sent: Sunday, June 09, 2013 5:59 PM To: North American Network Operators Group Subject: Mechanics of CALEA taps Dear nanog: Honestly, I expect replies to this question to range between zero and none, but I have to ask it. I understand the CALEA tap mechanism for most ISPs, generally, works like this: * we outsource our CALEA management to company X * we don't even know there's been a request until we've gotten a bill from X. And that's the extent of it. Well, golly Slothrop, maybe someone else has started picking up the tab. Would you even know? Is that possible? Thanks, Randy Fischer
participants (7)
-
Alex Rubenstein -
Christopher Morrow -
Dennis Burgess -
Jon Lewis -
Matthew Kaufman -
Randy Fischer -
Warren Bailey