21–30 of 57 posts
Might be dumb question, but won't this configuration need admin ssh access to add required rules and local server to log that traffic?
> Calea provided options are available only for specific RouterOS user, as Calea server configuration as "tap" configuration. Specific user should have 'sniff' policy enabled at RouterOS user configuration
So the admin has to set up a user account on the device.
Every router is technically capable of doing this. It's just firewall rules and pcap. Not sure this is front-page worthy.
> Not sure this is front-page worthy why not ? i believe it is especially as i imagine most people are not aware that such things exist in freedom lands
Do you mean firewall rules? Because firewall rules definitely exist in "freedom lands."
A lot of the comments here seem to show an eagerness to misunderstand this. Even in a "freedom land" law enforcement still needs the power to intrusively investigate criminal suspects, because ineffective law enforcement is a bad thing and a threat to liberty.
Earlier quoted context omitted.
It depends, I've got some junipers that only pass the application processor the first N bytes of a packet, and even captures are limited to the first N bytes. Vendor docs say that if you need captures, you should do them on the switch, or use DPI and route everything through the application processor.
You could probably develop a "NSA sniffer" to determine when captures are happening by noting network degradation, especially if it forces everything onto the application processor and off of fast-path.
Earlier quoted context omitted.
You could probably develop a "NSA sniffer" to determine when captures are happening by noting network degradation, especially if it forces everything onto the application processor and off of fast-path.
like putting a script on the switch that says the cpu utilization is x% higher? Do higher end switches report out utilization of the packet processing asic? I have a few high end switches in my homelab, I can of course tell the utilization of the management processor but I have never tried to delve into what the actual switch chip is doing.
If you're the one controlling the network router, you know when the sniffing is going on - this would be trying to detect that your ISP has turned the "NSA button" on.
Not sure why this is on the front page, but to clarify it's required by the FCC [0] for carriers. Microtik, just like every other network vendor, has this in their product (port mirroring for law enforcement) so that they can check the box. CALEA has been around since the 90s [1]. [0] https://www.fcc.gov/public-safety-and-homeland-security/poli... [1] https://en.wikipedia.org/wiki/Communications_Assistance_for_...
The wikipedia article you shared actually states this pretty clearly as well:
>" The IP-based "soft switches" typically do not contain a built-in CALEA intercept feature; and other IP-transport elements (routers, switches, access multiplexers) almost always delegate the CALEA function to elements dedicated to inspecting and intercepting traffic. In such cases, hardware taps or switch/router mirror-ports are employed to deliver copies of all of a network's data to dedicated IP probes."
(I realize that Microtik's RouterOS may end up on headend router devices and that is likely why this exists, but the implementation details here are just a little odd when you can just port mirror on a switch instead)
Not sure why this is on the front page, but to clarify it's required by the FCC [0] for carriers. Microtik, just like every other network vendor, has this in their product (port mirroring for law enforcement) so that they can check the box. CALEA has been around since the 90s [1]. [0] https://www.fcc.gov/public-safety-and-homeland-security/poli... [1] https://en.wikipedia.org/wiki/Communications_Assistance_for_...
Specifically, _1994_, another banner year for undermining civil liberties and privacy, what with the passage of the new sentencing provisions of the federal crime bill and continuing effort to prevent wider use of encryption by individuals through action against PGP: all by a "liberal" US administration that would also accelerate consolidation of mass media in the hands of a few big corporations.
Interesting times with many unfortunate decisions.
[0] https://en.wikipedia.org/wiki/Telecommunications_Act_of_1996
Quoted post unavailable.
I'm not sure where you live, but in my neck of the woods, going to the cops in these scenarios might even be slightly worse than not going to them, let alone better.
Go address some of the posters "why is the front page worthy" - I'm not surprised that 3 letter agencies get all the data they want, but very often it's very covert and not so "official".
because someone found and read this wiki and decided to share it with others who also found it interesting so they upvoted it. now here we are
Quoted post unavailable.
>don't blame the cops (because: if you get ripped off on eBay or your child goes missing, you do want some kind of resolution, right?) I'm not sure where you live, but in my neck of the woods, going to the cops in these scenarios might even be slightly worse than not going to them, let alone better.