[Serusers] RTP Wiretapping

[Jiri Kuthan]

The challenge with this approach is how you make intercepted calls
non-distinguishable from regular calls. The intercepted party may
watch signaling and notice service provider's IP addresses. Also,
the quality may degrade through use of RTP relay.

A possible option is to ingore this problem.

Other option would be to implement interception in edge routers.
Obviously, it is not an easy one.

-jiri

At 01:16 PM 3/2/2005, Java Rockx wrote:
>I was thinking about having a group called "spy" in the grp table and
>anyone with this ACL would be sent to a modified mediaproxy that would
>capture the RTP.
>
>User that don't have the "spy" ACL would be handled normally and if
>NAT traversal is needed then use an unmodified media proxy.
>
>Regards,
>Paul
>
>
>On Wed, 2 Mar 2005 08:00:24 -0000, Chris <ser at cannes.f9.co.uk> wrote:
>> Why not use a from/to etc detection in .cfg (using database...)
>> to trigger a remote proxy through the requesting agency
>> They then have the capture issue
>> and you have no monitor or delivery issues?
>> Might require conditions of their placement of a proxy?
>> (but is their problem)
>> Regards
>> Chris
>> 
>> -----Original Message-----
>> From: serusers-bounces at iptel.org [mailto:serusers-bounces at lists.iptel.org] On
>> Behalf Of Java Rockx
>> Sent: 26 February 2005 14:29
>> To: serusers at lists.iptel.org
>> Subject: [Serusers] RTP Wiretapping
>> 
>> Hi All.
>> 
>> I'm located in the US and would like to comply with the Communications
>> Assistance for Law Enforcement Act (CALEA) that Congress passed which
>> basically says that VoIP providers should have the ability to wiretap
>> conversations for the FBI upon request.
>> 
>> I use mediaproxy for NAT traversal. So my question is how can I be
>> CALEA compliant? I assume I should be able to modify mediaproxy to
>> write RTP streams to disk, but I'm unclear on how to "mix" both sides
>> of the conversation.
>> 
>> Can anyone help with a suggestion?
>> 
>> Regards,
>> Paul
>> 
>> _______________________________________________
>> Serusers mailing list
>> serusers at lists.iptel.org
>> http://lists.iptel.org/mailman/listinfo/serusers
>> 
>> --
>> No virus found in this incoming message.
>> Checked by AVG Anti-Virus.
>> Version: 7.0.300 / Virus Database: 266.5.0 - Release Date: 25/02/2005
>> 
>> --
>> No virus found in this outgoing message.
>> Checked by AVG Anti-Virus.
>> Version: 7.0.300 / Virus Database: 266.5.2 - Release Date: 28/02/2005
>> 
>>
>
>_______________________________________________
>Serusers mailing list
>serusers at lists.iptel.org
>http://lists.iptel.org/mailman/listinfo/serusers

--
Jiri Kuthan            http://iptel.org/~jiri/