Mechanics of CALEA taps

Dear nanog:

Honestly, I expect replies to this question to range between zero and none,
but I have to ask it.

I understand the CALEA tap mechanism for most ISPs, generally, works like
this:

* we outsource our CALEA management to company X
* we don't even know there's been a request until we've gotten a bill from
X.

And that's the extent of it.

Well, golly Slothrop, maybe someone else has started picking up the tab.
Would you even know?

Is that possible?

Thanks,

Randy Fischer

Honestly, I expect replies to this question to range between zero and none,
but I have to ask it.

Surprise!

I understand the CALEA tap mechanism for most ISPs, generally, works like
this:

* we outsource our CALEA management to company X
* we don't even know there's been a request until we've gotten a bill from X.

I've never even thought of the idea of outsourcing CALEA requests. That is probably because I would never consider doing it.

Perhaps we are in the minority, but we scrutinize every request of any sort to ensure it has jurisdiction and is valid. I can't even fathom the thought of trusting a third party for this.

(from back when I cared more about calea as an implementor)

Honestly, I expect replies to this question to range between zero and none,
but I have to ask it.

Surprise!

<aol>me too!</aol>

I understand the CALEA tap mechanism for most ISPs, generally, works like
this:

* we outsource our CALEA management to company X
* we don't even know there's been a request until we've gotten a bill from X.

I've never even thought of the idea of outsourcing CALEA requests. That is probably because I would never consider doing it.

Perhaps we are in the minority, but we scrutinize every request of any sort to ensure it has jurisdiction and is valid. I can't even fathom the thought of trusting a third party for this.

agreed, since most of the tap-work actually requires changes on
network equipment in the network you run, why would you outsource
this? Especially when the taps impact forwarding performance of the
platforms in question...

Inconceivable! That'd be like having your security system monitoring company able to eavesdrop on your house any time they want, just in case.
Come to think of it, the latest greatest systems are capable of that.

It sounds so stupid to me, I bet someone's doing it.

It is possible, and not just for "ISPs"

Matthew Kaufman

While its possible to do this, you would have to have a device that would not impact performance typically at every exit point, but in a perfect world it would be on the clients CPE device! Our wireless CPE's can do this. I would not that a business model to not bill until a request is completed would work due to the amount of hardware that x company would have to put out.

Dennis Burgess, Mikrotik Certified Trainer Author of "Learn RouterOS- Second Edition"
Link Technologies, Inc -- Mikrotik & WISP Support Services
Office: 314-735-0270 Website: http://www.linktechs.net - Skype: linktechs
-- Create Wireless Coverage's with www.towercoverage.com - 900Mhz - LTE - 3G - 3.65 - TV Whitespace

The only calea intercept I watched take place was with a system made by Sandvine.. And it was pretty shocking.