Re: CALEA

2016-05-31 Thread Christopher Morrow
nly interesting... On Tue, May 31, 2016 at 3:12 AM, Martin Hannigan wrote: > Misfire. Sorry, early in the AM. The URL I intended to send is here: > > http://www.uscourts.gov/statistics-reports/wiretap-report-2014 > > > Best, > > -M< > > On Tue, May 31, 2016 at 9:10

Re: CALEA

2016-05-31 Thread Martin Hannigan
Misfire. Sorry, early in the AM. The URL I intended to send is here: http://www.uscourts.gov/statistics-reports/wiretap-report-2014 Best, -M< On Tue, May 31, 2016 at 9:10 AM, Martin Hannigan wrote: > CALEA isn't a type of request, it's a law that enabled par function &g

Re: CALEA

2016-05-31 Thread Martin Hannigan
CALEA isn't a type of request, it's a law that enabled par function access for LEO's e.g. "the ladder" pin register, trap+trace, DTMF translation, three-way/off hook ops and the call content (not necessarily in that order). You can see the non national security activi

Re: CALEA

2016-05-29 Thread Josh Luthman
How many requests per 1k or 10k customers? Is primarily residential a safe assumption? Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 On Fri, May 27, 2016 at 11:37 PM, Mike Joseph wrote: > I can say via firsthand knowledge that CALEA reque

Re: CALEA

2016-05-29 Thread Mike Joseph
I can say via firsthand knowledge that CALEA requests are definitely happening and are not even that rare, proportional to a reasonably sized subscriber-base. It would be unlawful for me to comment specifically on any actual CALEA requests, however. But if you have general questions about my

Re: CALEA

2016-05-12 Thread Brian Mengel
My comments were strictly limited to my understanding of CALEA as it applied to ISPs, not telcos. A request for a lawful intercept can entail mirroring a real time stream of all data sent to/from a customer's Internet connection (cable modem/DSL/dedicated Ethernet) to a LEA. AFAIK this req

Re: CALEA

2016-05-11 Thread Ricky Beam
eing unable to provide this service when requested. Where existing infrastructure is not already in place (read: T1/BRI/etc.), the telco can take up to 60 days to get that setup. I know more than one telco that used that grace period to actually setup CALEA in the first place. did not perf

Re: CALEA

2016-05-11 Thread Leo Bicknell
r people who run core routing devices and do things like BGP and peering negotiations with other providers. By contrast, CALEA requirements are generally all met by features deployed at the customer-edge. These groups are often a separate silo from the backbone folks at the largest providers. Th

Re: CALEA

2016-05-11 Thread Brian Mengel
large list that includes many Tier 1 network operators, > >> government agencies, and Fortune 500 network operators > > > > > > no one gets calea requests because prism gets all requests? > > >

Re: CALEA

2016-05-10 Thread Josh Reynolds
s, and Fortune 500 network operators > > > no one gets calea requests because prism gets all requests? >

Re: CALEA

2016-05-10 Thread Christopher Morrow
On Tue, May 10, 2016 at 4:00 PM, Josh Reynolds wrote: > This is a large list that includes many Tier 1 network operators, > government agencies, and Fortune 500 network operators > ​no one gets calea requests because prism gets all requests?​

Re: CALEA

2016-05-10 Thread Josh Reynolds
This is a large list that includes many Tier 1 network operators, government agencies, and Fortune 500 network operators. The silence should be telling. On May 10, 2016 2:52 PM, "Matt Hoppes" wrote: > Perhaps the silence is an indication no one is doing CALEA or knows > a

Re: CALEA

2016-05-10 Thread Matt Hoppes
Perhaps the silence is an indication no one is doing CALEA or knows anything about it? Personally, I can't say I've heard anything about CALEA, seen people trying to sell CALEA appliances, or received a CALEA request in maybe 8 years? On 5/10/16 12:34 AM, Josh Reynolds wrote: Hrm

Re: CALEA

2016-05-09 Thread Josh Reynolds
s almost moot. > On May 9, 2016 23:16, "Greg Sowell" wrote: > > I haven't had a request in ages...back then all of the links worked. > On May 9, 2016 3:02 PM, "Jeremy Austin" wrote: > > > On Thu, May 5, 2016 at 4:43 PM, Justin Wilson

Re: CALEA

2016-05-09 Thread shawn wilson
;t had a request in ages...back then all of the links worked. On May 9, 2016 3:02 PM, "Jeremy Austin" wrote: > On Thu, May 5, 2016 at 4:43 PM, Justin Wilson wrote: > > > What is the community hearing about CALEA? > > > > Crickets? > > > -- &g

Re: CALEA

2016-05-09 Thread Greg Sowell
I haven't had a request in ages...back then all of the links worked. On May 9, 2016 3:02 PM, "Jeremy Austin" wrote: > On Thu, May 5, 2016 at 4:43 PM, Justin Wilson wrote: > > > What is the community hearing about CALEA? > > > > Crickets? >

Re: CALEA

2016-05-09 Thread Jeremy Austin
On Thu, May 5, 2016 at 4:43 PM, Justin Wilson wrote: > What is the community hearing about CALEA? > Crickets? -- Jeremy Austin (907) 895-2311 (907) 803-5422 jhaus...@gmail.com Heritage NetWorks Whitestone Power & Communications Vertical Broadband, LLC Schedule a mee

CALEA

2016-05-05 Thread Justin Wilson
Does anyone have some up-to-date information on CALEA? https://askcalea.fbi.gov/ <https://askcalea.fbi.gov/> has a fair amount of broken links. The servicer provider registration is broken. The web-site has not been updated. Searches on FBI.gov and the FCC site just point b

Re: CALEA Requirements

2016-03-20 Thread Sean Donelan
The FBI CALEA folks have always had a somewhat expansive interpretation of their authorities. For example, "dialed digit extraction." The court cases supporting pen registers are based on business record exception, i.e. Smith v. Maryland says dial numbers are disclosed to the

Re: CALEA Requirements

2016-03-20 Thread Robert Haylock
rom: "Lorell Hathcock" > > Can someone point me to the current CALEA requirements? > > As an ISP, should I be recording all internet traffic that passes my > routers? Or do I only have to record when and if I receive a court order? > > I'm not under any court order n

Re: E911 (was CALEA Requirements)

2016-03-20 Thread Dan Lacey
Todd, Could you pick a more problematic venture in telecom? ;-) I have done a couple of these. (I just joined the list and have no idea how much you know on the subject) My clients are wholesale customers of different local LECs (Local Exchange Carrier). These are the guys that own the wire cen

Re: CALEA Requirements

2016-03-19 Thread Lorell Hathcock
; had to fulfill a request to be disallowed from talking about it which makes >> them seem even more rare than they actually are. I'm also not familiar >> with any laws that prevent state or local agencies from leveraging CALEA >> and I've certainly seen it used on the v

Re: CALEA Requirements

2016-03-18 Thread Scott Helms
from leveraging CALEA and I've certainly seen it used on the voice side by state level law enforcement. Scott Helms Chief Technology Officer ZCorum (678) 507-5000 http://twitter.com/kscotthelms On Fri, Mar 18, 2016 at 4:19 PM

Re: CALEA Requirements

2016-03-18 Thread Kraig Beahn
prevent state or local agencies from leveraging CALEA > and I've certainly seen it used on the voice side by state level law > enforcement. > > > Scott Helms > Chief Technology Officer > ZCorum > (678) 507-5000 > > http://twitter.com

RE: CALEA Requirements

2016-03-18 Thread Kevin Burke
nt: Monday, March 14, 2016 4:47 PM To: 'NANOG list' Subject: CALEA Requirements NANOG: Can someone point me to the current CALEA requirements? As an ISP, should I be recording all internet traffic that passes my routers? Or do I only have to record when and if I receive a cour

E911 (was CALEA Requirements)

2016-03-14 Thread Todd Crane
Hathcock" > > Can someone point me to the current CALEA requirements? > > As an ISP, should I be recording all internet traffic that passes my > routers? Or do I only have to record when and if I receive a court order? > > I'm not under any court order now,

Re: CALEA Requirements

2016-03-14 Thread Scott Weeks
--- lor...@hathcock.org wrote: From: "Lorell Hathcock" Can someone point me to the current CALEA requirements? As an ISP, should I be recording all internet traffic that passes my routers? Or do I only have to record when and if I receive a court order? I'm not under any cou

CALEA Requirements

2016-03-14 Thread Lorell Hathcock
NANOG: Can someone point me to the current CALEA requirements? As an ISP, should I be recording all internet traffic that passes my routers? Or do I only have to record when and if I receive a court order? I'm not under any court order now, I just want to be sure that I am comp

Re: What are y'all doing for CALEA compliance?

2013-07-04 Thread Warren Bailey
;all doing for CALEA compliance? On Mar 15, 2013 11:37 AM, "Christopher Morrow" wrote: > > On Fri, Mar 15, 2013 at 11:32 AM, Joshua Goldbard wrote: > > God I want one of those PA firewalls just to play with in the lab. I can't > > justify the expense, but as far

Re: What are y'all doing for CALEA compliance?

2013-07-04 Thread Eric G
On Mar 15, 2013 11:37 AM, "Christopher Morrow" wrote: > > On Fri, Mar 15, 2013 at 11:32 AM, Joshua Goldbard wrote: > > God I want one of those PA firewalls just to play with in the lab. I can't > > justify the expense, but as far as firewalls go they're gorgeous. From the > > chassis to the UI, P

Re: Mechanics of CALEA taps

2013-06-11 Thread Rick Robino
> Message: 1 > Date: Sun, 9 Jun 2013 18:59:16 -0400 > From: Randy Fischer > To: North American Network Operators Group > Subject: Mechanics of CALEA taps > Message-ID: > > Content-Type: text/plain; charset=ISO-8859-1 > > Dear nanog: > > Honestly,

RE: Mechanics of CALEA taps

2013-06-10 Thread Warren Bailey
The only calea intercept I watched take place was with a system made by Sandvine.. And it was pretty shocking. Sent from my Mobile Device. Original message From: Dennis Burgess Date: 06/10/2013 6:25 AM (GMT-08:00) To: Randy Fischer ,nanog@nanog.org Subject: RE: Mechanics of

RE: Mechanics of CALEA taps

2013-06-10 Thread Dennis Burgess
- 3.65 - TV Whitespace  -Original Message- From: Randy Fischer [mailto:randy.fisc...@gmail.com] Sent: Sunday, June 09, 2013 5:59 PM To: North American Network Operators Group Subject: Mechanics of CALEA taps Dear nanog: Honestly, I expect replies to this question to range between zero and none, b

Re: Mechanics of CALEA taps

2013-06-09 Thread Matthew Kaufman
It is possible, and not just for "ISPs" Matthew Kaufman (Sent from my iPhone) On Jun 9, 2013, at 3:59 PM, Randy Fischer wrote: > Dear nanog: > > Honestly, I expect replies to this question to range between zero and none, > but I have to ask it. > > I understand

Re: Mechanics of CALEA taps

2013-06-09 Thread Jon Lewis
On Sun, 9 Jun 2013, Randy Fischer wrote: Dear nanog: Honestly, I expect replies to this question to range between zero and none, but I have to ask it. I understand the CALEA tap mechanism for most ISPs, generally, works like this: * we outsource our CALEA management to company X * we don&#

Re: Mechanics of CALEA taps

2013-06-09 Thread Christopher Morrow
(from back when I cared more about calea as an implementor) On Sun, Jun 9, 2013 at 8:15 PM, Alex Rubenstein wrote: >> Honestly, I expect replies to this question to range between zero and none, >> but I have to ask it. > > Surprise! me too! > >> I understand the C

RE: Mechanics of CALEA taps

2013-06-09 Thread Alex Rubenstein
> Honestly, I expect replies to this question to range between zero and none, > but I have to ask it. Surprise! > I understand the CALEA tap mechanism for most ISPs, generally, works like > this: > > * we outsource our CALEA management to company X > * we don'

Mechanics of CALEA taps

2013-06-09 Thread Randy Fischer
Dear nanog: Honestly, I expect replies to this question to range between zero and none, but I have to ask it. I understand the CALEA tap mechanism for most ISPs, generally, works like this: * we outsource our CALEA management to company X * we don't even know there's been a req

Re: What are y'all doing for CALEA compliance?

2013-03-16 Thread Steven Bellovin
On Mar 15, 2013, at 9:38 AM, Ben Bartsch wrote: > Is there actually any teeth to the law? Find a real lawyer and show her/him http://www.law.cornell.edu/uscode/text/18/2522 --Steve Bellovin, https://www.cs.columbia.edu/~smb

Re: What are y'all doing for CALEA compliance?

2013-03-15 Thread Ben Bartsch
Thanks to everyone who replied on and off list today. I found a wide range of opinions on CALEA. I did have one person give me a very specific example of a vendor that can ensure compliance, which is really what I was after. See y'all on Bourbon Street in June! -ben On Fri, Mar 15, 2013

Re: What are y'all doing for CALEA compliance?

2013-03-15 Thread Warren Bailey
network. Original message From: Joshua Goldbard Date: 03/15/2013 8:33 AM (GMT-08:00) To: Warren Bailey Cc: Christopher Morrow ,NANOG Subject: Re: What are y'all doing for CALEA compliance? God I want one of those PA firewalls just to play with in the lab. I can't justif

Re: What are y'all doing for CALEA compliance?

2013-03-15 Thread Christopher Morrow
zz from Palo > Alto. Worked okay, never did have to execute a warrant or anything. > > > From my Android phone on T-Mobile. The first nationwide 4G network. > > > > Original message > From: Joshua Goldbard > Date: 03/15/2013 8:25 AM (GMT-08:00) &g

Re: What are y'all doing for CALEA compliance?

2013-03-15 Thread Joshua Goldbard
e. The first nationwide 4G network. Original message From: Joshua Goldbard mailto:j...@2600hz.com>> Date: 03/15/2013 8:25 AM (GMT-08:00) To: Christopher Morrow mailto:morrowc.li...@gmail.com>> Cc: NANOG mailto:nanog@nanog.org>> Subject: Re: What are y'all doi

Re: What are y'all doing for CALEA compliance?

2013-03-15 Thread Warren Bailey
:25 AM (GMT-08:00) To: Christopher Morrow Cc: NANOG Subject: Re: What are y'all doing for CALEA compliance? I am not a lawyer, this is not legal advice. If you make decisions about what you should be doing in your business based solely on emails from strangers you won't do well.

Re: What are y'all doing for CALEA compliance?

2013-03-15 Thread Joshua Goldbard
are a CLEC and you are not CALEA compliant, you are in for a world of hurt. If you're a non-facilities based reseller this is open for interpretation, but many folks believe that if you don't have gear inside the carrier pops, you aren't subject to CALEA. In practice, who is and w

Re: What are y'all doing for CALEA compliance?

2013-03-15 Thread Christopher Morrow
On Fri, Mar 15, 2013 at 9:38 AM, Ben Bartsch wrote: > What are you RENs out there doing for CALEA compliance? Is there actually being happy we solved it 6 yrs ago? > any teeth to the law? Our systems guys have tried a product called 'Open teeth as in the 100k/day fine? >

What are y'all doing for CALEA compliance?

2013-03-15 Thread Ben Bartsch
What are you RENs out there doing for CALEA compliance? Is there actually any teeth to the law? Our systems guys have tried a product called 'Open CALEA' but the router and the server simply can't keep up with mirroring from a 10Gbps connection into a 1Gbps link. I'm no

Re: CALEA options for small/midsize ISPs

2013-01-21 Thread Jay Ashworth
- Original Message - > From: "Jimmy Hess" > Forget about FCC civil penalties: the LEA may start arresting > managers responsible for refusal, on the charges of obstruction, due > to interfering with an investigation. > > People might talk about refusin

Re: CALEA options for small/midsize ISPs

2013-01-20 Thread Jimmy Hess
arresting managers responsible for refusal, on the charges of obstruction, due to interfering with an investigation. People might talk about refusing to process a CALEA warrant. IF/when they do receive such a lawful order: I am almost positive they will respond in some way other than a refusal t

Re: CALEA options for small/midsize ISPs

2013-01-20 Thread Warren Bailey
I have yet to see a lot of networks in TRUE compliance with CALEA requirements. Most of the time, it's some intermediate box that is doing a netflow-esque imports from routers that net/j/xyzflow normally. The only issue I/we ever ran into was how to in fact process the LEA request for an a

Re: CALEA options for small/midsize ISPs

2013-01-20 Thread Justin Wilson
I agree with the TTP taking the IP traffic. They simply re-package it for the LEA. It's up to the LEA to take the traffic flow or not. If it's a true CALEA warrant, not a normal wire tap, the defense could argue they did not follow protocol. Justin ---

RE: CALEA options for small/midsize ISPs

2013-01-20 Thread Frank Bulk
Our Trusted Third Party (TTP) asked us to IP Traffic Export. As others commented in this forum, the LEAs is not looking for SPs to replace their entire networks to create an ideal CALEA-compliant environment. It's my understanding that LEA will take a Cisco IP Traffic Export flow.

Re: CALEA options for small/midsize ISPs

2013-01-20 Thread Justin Wilson
I don't see any mention of CALEA. A traffic dump won't satisfy a CALEA warrant. Justin -Original Message- From: Frank Bulk Date: Sunday, January 20, 2013 10:31 PM To: 'Warren Bailey' , Byron Hooper , Subject: RE: CALEA options for small/midsize ISPs

RE: CALEA options for small/midsize ISPs

2013-01-20 Thread Frank Bulk
@nanog.org Subject: RE: CALEA options for small/midsize ISPs We used Cisco for lawful intercept.. Their mibs are wanky and at the time only the 7206 was support for the LI functionality. Food for thought. >From my Android phone on T-Mobile. The first nationwide 4G network. Original mess

Re: CALEA options for small/midsize ISPs

2013-01-20 Thread Christopher Morrow
On Fri, Jan 18, 2013 at 4:52 PM, Byron Hooper wrote: > Hello All, > > My company is looking at updating our CALEA set up. Our network has > changed appreciably since our initial rollout and I am looking at utilizing > Cisco's Lawful Intercept. I'm wondering what peop

RE: CALEA options for small/midsize ISPs

2013-01-20 Thread Warren Bailey
PM (GMT-08:00) To: nanog@nanog.org Subject: CALEA options for small/midsize ISPs Hello All, My company is looking at updating our CALEA set up. Our network has changed appreciably since our initial rollout and I am looking at utilizing Cisco's Lawful Intercept. I'm wondering what peo

Re: CALEA options for small/midsize ISPs

2013-01-20 Thread Justin Wilson
& Yahoo IM: j2sw http://www.mtin.net/blog ­ xISP News http://www.twitter.com/j2sw ­ Follow me on Twitter http://www.thebrotherswisp.com/ - The Brothers WISP podcast -Original Message- From: Byron Hooper Date: Friday, January 18, 2013 4:52 PM To: Subject: CALEA options for small/mid

CALEA options for small/midsize ISPs

2013-01-20 Thread Byron Hooper
Hello All, My company is looking at updating our CALEA set up. Our network has changed appreciably since our initial rollout and I am looking at utilizing Cisco's Lawful Intercept. I'm wondering what people are using as "Mediator Devices", aka what the Cisco routers ar

Re: CALEA options for a small ISP/ITSP

2012-11-26 Thread Larry Smith
On Mon November 26 2012 09:38, Matthew Crocker wrote: > I have a CALEA appliance from BearHill that I 'rent'. It has been in my > network for years. I'm looking for other alternative solutions for CALEA > compliance with a small ISP. It looks like OpenCalea is a de

CALEA options for a small ISP/ITSP

2012-11-26 Thread Matthew Crocker
I have a CALEA appliance from BearHill that I 'rent'. It has been in my network for years. I'm looking for other alternative solutions for CALEA compliance with a small ISP. It looks like OpenCalea is a dead project. What is everyone else using? My current solution is

FBI Presses for Amendment to CALEA to cover social networks

2012-05-25 Thread Jay Ashworth
http://www.washingtonpost.com/business/technology/fbi-forming-communications-assistance-center-to-help-spy-on-americans/2012/05/24/gJQAFuuSnU_story.html -- Jay R. Ashworth Baylink j...@baylink.com Designer The Things I Think

Re: shell access to BGP router, CALEA tips??

2012-01-09 Thread Arturo Servin
> Majority of these are telnet:// links. > > David > > -- > http://dcp.dcptech.com > > > > -Original Message- > From: N Rauhauser [mailto:neal.rauhau...@gmail.com] > Sent: Sunday, January 08, 2012 12:13 PM > To: nanog@nanog.org > Subject: shel

RE: shell access to BGP router, CALEA tips??

2012-01-08 Thread David Prall
y 08, 2012 12:13 PM To: nanog@nanog.org Subject: shell access to BGP router, CALEA tips?? Ladies & Gentlemen, I wanted to check something on an IP address block this morning and, much to my surprise, I don't have access to a single router that has a full table in it - first time si

shell access to BGP router, CALEA tips??

2012-01-08 Thread N Rauhauser
Ladies & Gentlemen, I wanted to check something on an IP address block this morning and, much to my surprise, I don't have access to a single router that has a full table in it - first time since 1999 this is the case. I see route views is still happily serving up shells, but I'm curious t

Re: ISP CALEA compliance

2007-05-24 Thread Andy Davidson
On 24 May 2007, at 06:01, Suresh Ramasubramanian wrote: Fully agree. But there's a bit more "system" about what's going on in the EU, and stronger privacy safeguards. The Council of Europe convention on cybercrime should be a good starting point, as should at least some of the presos here:

Re: ISP CALEA compliance

2007-05-23 Thread Suresh Ramasubramanian
On 5/24/07, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: The ITU itself is likely irrelevant. However, those who run ISPs across either the left or right puddle are likely to be hit with CALEA-like issues within the next few years, when their countries adopt similar laws. And those who

Re: ISP CALEA compliance

2007-05-23 Thread Valdis . Kletnieks
F, FCC, Verisign, Neustar, and ITU might > > be a good approach to this. > > Humor me.. but just where does ITU come into this whole mess? The ITU itself is likely irrelevant. However, those who run ISPs across either the left or right puddle are likely to be hit with CALEA-like is

Re: ISP CALEA compliance

2007-05-23 Thread Suresh Ramasubramanian
On 5/24/07, Owen DeLong <[EMAIL PROTECTED]> wrote: The more I think about this, the more I think a refereed boxing^h^h^h^h^h^hpanel discussion between representatives from DHS, FBI, EFF, FCC, Verisign, Neustar, and ITU might be a good approach to this. Humor me.. but just where does ITU come i

Re: ISP CALEA compliance

2007-05-23 Thread Owen DeLong
The more I think about this, the more I think a refereed boxing^h^h^h^h^h^hpanel discussion between representatives from DHS, FBI, EFF, FCC, Verisign, Neustar, and ITU might be a good approach to this. Owen smime.p7s Description: S/MIME cryptographic signature

Re: ISP CALEA compliance

2007-05-23 Thread Albert Meyer
EFF is a political organization and these are not topics that make sense for NANOG, IMHO, the list, the program, or a BoF. Having the EFF explain CALEA at NANOG is like asking the Sierra Club to identify good sites for oil wells in forests. I took a look at EFF's CALEA FAQ at

Re: ISP CALEA compliance

2007-05-23 Thread Randy Bush
> Having the EFF explain CALEA at NANOG is like asking the Sierra Club > to identify good sites for oil wells in forests. well, we have had the oil companies multiple times. randy

Re: ISP CALEA compliance

2007-05-12 Thread Joe Provo
On Sat, May 12, 2007 at 10:43:15PM -0400, Martin Hannigan wrote: [snip] > Too bad the PC hasn't solicited a talk in this area. They ought to. Too bad that the collective-we choose to beat up the PC for not providing agenda information in advance, and then change tack to beat them up when the in

Re: ISP CALEA compliance

2007-05-12 Thread Martin Hannigan
Steve Bellovin said: I've tried hard to keep this discussion factual, with copious references. But I think I've run out of things to say that are even vaguely on-topic, so I'll shut up. Anytime the word CALEA is pops up here the threads tend to quickly degenerate into a larg

Re: ISP CALEA compliance

2007-05-10 Thread Jeff Shultz
William Allen Simpson wrote: Also, the gag order was ruled unconstitutional, so always inform your customer! They may be willing to work out attorney fees, and/or join you in a suppression hearing. Huh? You can tell a customer that you've had a CALEA subpoena served on you for hi