2022-04-01 12:16:46 +02:00
|
|
|
<!DOCTYPE html>
|
|
|
|
<html class="writer-html5" lang="en" >
|
|
|
|
<head>
|
|
|
|
<meta charset="utf-8" /><meta name="generator" content="Docutils 0.17.1: http://docutils.sourceforge.net/" />
|
|
|
|
|
|
|
|
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
2022-04-19 10:52:03 +02:00
|
|
|
<title>Legal Interception (LI) — BNG Blaster 0.7 documentation</title>
|
2022-04-01 12:16:46 +02:00
|
|
|
<link rel="stylesheet" href="../_static/pygments.css" type="text/css" />
|
|
|
|
<link rel="stylesheet" href="../_static/css/theme.css" type="text/css" />
|
|
|
|
<link rel="stylesheet" href="../_static/tabs.css" type="text/css" />
|
|
|
|
<!--[if lt IE 9]>
|
|
|
|
<script src="../_static/js/html5shiv.min.js"></script>
|
|
|
|
<![endif]-->
|
|
|
|
|
|
|
|
<script data-url_root="../" id="documentation_options" src="../_static/documentation_options.js"></script>
|
|
|
|
<script src="../_static/jquery.js"></script>
|
|
|
|
<script src="../_static/underscore.js"></script>
|
|
|
|
<script src="../_static/doctools.js"></script>
|
|
|
|
<script src="../_static/js/theme.js"></script>
|
|
|
|
<link rel="index" title="Index" href="../genindex.html" />
|
|
|
|
<link rel="search" title="Search" href="../search.html" />
|
|
|
|
<link rel="next" title="Routing Protocols" href="../routing/index.html" />
|
|
|
|
<link rel="prev" title="Multicast and IPTV" href="multicast.html" />
|
|
|
|
</head>
|
|
|
|
|
|
|
|
<body class="wy-body-for-nav">
|
|
|
|
<div class="wy-grid-for-nav">
|
|
|
|
<nav data-toggle="wy-nav-shift" class="wy-nav-side">
|
|
|
|
<div class="wy-side-scroll">
|
|
|
|
<div class="wy-side-nav-search" >
|
|
|
|
<a href="../index.html" class="icon icon-home"> BNG Blaster
|
|
|
|
<img src="../_static/rtbrick_logo.png" class="logo" alt="Logo"/>
|
|
|
|
</a>
|
|
|
|
<div role="search">
|
|
|
|
<form id="rtd-search-form" class="wy-form" action="../search.html" method="get">
|
|
|
|
<input type="text" name="q" placeholder="Search docs" />
|
|
|
|
<input type="hidden" name="check_keywords" value="yes" />
|
|
|
|
<input type="hidden" name="area" value="default" />
|
|
|
|
</form>
|
|
|
|
</div>
|
|
|
|
</div><div class="wy-menu wy-menu-vertical" data-spy="affix" role="navigation" aria-label="Navigation menu">
|
|
|
|
<ul class="current">
|
|
|
|
<li class="toctree-l1"><a class="reference internal" href="../install.html">Installation</a></li>
|
|
|
|
<li class="toctree-l1"><a class="reference internal" href="../quickstart.html">Quickstart Guide</a></li>
|
|
|
|
<li class="toctree-l1"><a class="reference internal" href="../interfaces.html">Interfaces</a></li>
|
|
|
|
<li class="toctree-l1 current"><a class="reference internal" href="index.html">Access Protocols</a><ul class="current">
|
|
|
|
<li class="toctree-l2"><a class="reference internal" href="pppoe.html">PPPoE</a></li>
|
|
|
|
<li class="toctree-l2"><a class="reference internal" href="ipoe.html">IPoE</a></li>
|
|
|
|
<li class="toctree-l2"><a class="reference internal" href="l2tp.html">L2TP</a></li>
|
|
|
|
<li class="toctree-l2"><a class="reference internal" href="l2bsa.html">L2BSA</a></li>
|
|
|
|
<li class="toctree-l2"><a class="reference internal" href="traffic.html">Session Traffic</a></li>
|
|
|
|
<li class="toctree-l2"><a class="reference internal" href="multicast.html">Multicast and IPTV</a></li>
|
|
|
|
<li class="toctree-l2 current"><a class="current reference internal" href="#">Legal Interception (LI)</a></li>
|
|
|
|
</ul>
|
|
|
|
</li>
|
|
|
|
<li class="toctree-l1"><a class="reference internal" href="../routing/index.html">Routing Protocols</a></li>
|
|
|
|
<li class="toctree-l1"><a class="reference internal" href="../streams.html">Traffic Streams</a></li>
|
|
|
|
<li class="toctree-l1"><a class="reference internal" href="../reports.html">Reports</a></li>
|
|
|
|
<li class="toctree-l1"><a class="reference internal" href="../configuration/index.html">Configuration</a></li>
|
|
|
|
<li class="toctree-l1"><a class="reference internal" href="../api/index.html">API/CLI</a></li>
|
|
|
|
<li class="toctree-l1"><a class="reference internal" href="../troubleshooting.html">Troubleshooting</a></li>
|
|
|
|
<li class="toctree-l1"><a class="reference internal" href="../reference/index.html">Reference</a></li>
|
|
|
|
<li class="toctree-l1"><a class="reference internal" href="../faq.html">Frequently Asked Questions</a></li>
|
|
|
|
</ul>
|
|
|
|
|
|
|
|
</div>
|
|
|
|
</div>
|
|
|
|
</nav>
|
|
|
|
|
|
|
|
<section data-toggle="wy-nav-shift" class="wy-nav-content-wrap"><nav class="wy-nav-top" aria-label="Mobile navigation menu" >
|
|
|
|
<i data-toggle="wy-nav-top" class="fa fa-bars"></i>
|
|
|
|
<a href="../index.html">BNG Blaster</a>
|
|
|
|
</nav>
|
|
|
|
|
|
|
|
<div class="wy-nav-content">
|
|
|
|
<div class="rst-content">
|
|
|
|
<div role="navigation" aria-label="Page navigation">
|
|
|
|
<ul class="wy-breadcrumbs">
|
|
|
|
<li><a href="../index.html" class="icon icon-home"></a> »</li>
|
|
|
|
<li><a href="index.html">Access Protocols</a> »</li>
|
|
|
|
<li>Legal Interception (LI)</li>
|
|
|
|
<li class="wy-breadcrumbs-aside">
|
|
|
|
<a href="../_sources/access/li.rst.txt" rel="nofollow"> View page source</a>
|
|
|
|
</li>
|
|
|
|
</ul>
|
|
|
|
<hr/>
|
|
|
|
</div>
|
|
|
|
<div role="main" class="document" itemscope="itemscope" itemtype="http://schema.org/Article">
|
|
|
|
<div itemprop="articleBody">
|
|
|
|
|
|
|
|
<section id="legal-interception-li">
|
|
|
|
<span id="li"></span><h1>Legal Interception (LI)<a class="headerlink" href="#legal-interception-li" title="Permalink to this headline"></a></h1>
|
|
|
|
<p>The BNG Blaster can be used to emulate a mediation device providing detailed statistics
|
|
|
|
about the received flows. Today only the BCM QMX LI header format is supported but further
|
|
|
|
headers can be easily integrated.</p>
|
|
|
|
<p><em>BCM QMX LI Header Format</em></p>
|
|
|
|
<div class="highlight-none notranslate"><div class="highlight"><pre><span></span>0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
|
|
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
|
|
| D | PT | SPT | LIID |
|
|
|
|
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
|
|
</pre></div>
|
|
|
|
</div>
|
|
|
|
<p>The functionality is automatically enabled on the network interface
|
|
|
|
and works combined with sessions in one instance or as standalone
|
|
|
|
mediation device as shown in the following example.</p>
|
|
|
|
<div class="highlight-json notranslate"><div class="highlight"><pre><span></span><span class="p">{</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"interfaces"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"tx-interval"</span><span class="p">:</span><span class="w"> </span><span class="mi">10</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"rx-interval"</span><span class="p">:</span><span class="w"> </span><span class="mi">1</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"network"</span><span class="p">:</span><span class="w"> </span><span class="p">{</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"interface"</span><span class="p">:</span><span class="w"> </span><span class="s2">"eth2"</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"address"</span><span class="p">:</span><span class="w"> </span><span class="s2">"100.0.0.10/24"</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"gateway"</span><span class="p">:</span><span class="w"> </span><span class="s2">"100.0.0.2"</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="p">}</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="p">}</span><span class="w"></span>
|
|
|
|
<span class="p">}</span><span class="w"></span>
|
|
|
|
</pre></div>
|
|
|
|
</div>
|
|
|
|
<p>The received flows can be displayed with the command <cite>li-flows</cite>.</p>
|
|
|
|
<p><code class="docutils literal notranslate"><span class="pre">$</span> <span class="pre">sudo</span> <span class="pre">bngblaster-cli</span> <span class="pre">run.sock</span> <span class="pre">li-flows</span></code></p>
|
|
|
|
<div class="highlight-json notranslate"><div class="highlight"><pre><span></span><span class="p">{</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"status"</span><span class="p">:</span><span class="w"> </span><span class="s2">"ok"</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"code"</span><span class="p">:</span><span class="w"> </span><span class="mi">200</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"li-flows"</span><span class="p">:</span><span class="w"> </span><span class="p">[</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="p">{</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"source-address"</span><span class="p">:</span><span class="w"> </span><span class="s2">"1.1.1.1"</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"source-port"</span><span class="p">:</span><span class="w"> </span><span class="mi">49152</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"destination-address"</span><span class="p">:</span><span class="w"> </span><span class="s2">"1.1.1.2"</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"destination-port"</span><span class="p">:</span><span class="w"> </span><span class="mi">49152</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"direction"</span><span class="p">:</span><span class="w"> </span><span class="s2">"downstream"</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packet-type"</span><span class="p">:</span><span class="w"> </span><span class="s2">"ethernet"</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"sub-packet-type"</span><span class="p">:</span><span class="w"> </span><span class="s2">"double-tagged"</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"liid"</span><span class="p">:</span><span class="w"> </span><span class="mi">4194301</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"bytes-rx"</span><span class="p">:</span><span class="w"> </span><span class="mi">94</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx"</span><span class="p">:</span><span class="w"> </span><span class="mi">1</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv4"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv4-tcp"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv4-udp"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv4-host-internal"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv6"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv6-tcp"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv6-udp"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv6-host-internal"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv6-no-next-header"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="p">},</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="p">{</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"source-address"</span><span class="p">:</span><span class="w"> </span><span class="s2">"1.1.1.1"</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"source-port"</span><span class="p">:</span><span class="w"> </span><span class="mi">49152</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"destination-address"</span><span class="p">:</span><span class="w"> </span><span class="s2">"1.1.1.2"</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"destination-port"</span><span class="p">:</span><span class="w"> </span><span class="mi">49152</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"direction"</span><span class="p">:</span><span class="w"> </span><span class="s2">"upstream"</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packet-type"</span><span class="p">:</span><span class="w"> </span><span class="s2">"ethernet"</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"sub-packet-type"</span><span class="p">:</span><span class="w"> </span><span class="s2">"double-tagged"</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"liid"</span><span class="p">:</span><span class="w"> </span><span class="mi">4194301</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"bytes-rx"</span><span class="p">:</span><span class="w"> </span><span class="mi">160720</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx"</span><span class="p">:</span><span class="w"> </span><span class="mi">820</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv4"</span><span class="p">:</span><span class="w"> </span><span class="mi">820</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv4-tcp"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv4-udp"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv4-host-internal"</span><span class="p">:</span><span class="w"> </span><span class="mi">820</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv6"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv6-tcp"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv6-udp"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv6-host-internal"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="p">,</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="nt">"packets-rx-ipv6-no-next-header"</span><span class="p">:</span><span class="w"> </span><span class="mi">0</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="p">}</span><span class="w"></span>
|
|
|
|
<span class="w"> </span><span class="p">]</span><span class="w"></span>
|
|
|
|
<span class="p">}</span><span class="w"></span>
|
|
|
|
</pre></div>
|
|
|
|
</div>
|
|
|
|
<p>The <code class="docutils literal notranslate"><span class="pre">packets-rx-ipv4-host-internal</span></code> refers to the IPv4 protocol number 61
|
|
|
|
(any host internal protocol) which is used by some network testers as default
|
|
|
|
type for traffic streams. The same is valid for <code class="docutils literal notranslate"><span class="pre">packets-rx-ipv6-host-internal</span></code>
|
|
|
|
which refers to next header 61 and <code class="docutils literal notranslate"><span class="pre">packets-rx-ipv6-no-next-header</span></code> with next
|
|
|
|
header 59.</p>
|
|
|
|
</section>
|
|
|
|
|
|
|
|
|
|
|
|
</div>
|
|
|
|
</div>
|
|
|
|
<footer><div class="rst-footer-buttons" role="navigation" aria-label="Footer">
|
|
|
|
<a href="multicast.html" class="btn btn-neutral float-left" title="Multicast and IPTV" accesskey="p" rel="prev"><span class="fa fa-arrow-circle-left" aria-hidden="true"></span> Previous</a>
|
|
|
|
<a href="../routing/index.html" class="btn btn-neutral float-right" title="Routing Protocols" accesskey="n" rel="next">Next <span class="fa fa-arrow-circle-right" aria-hidden="true"></span></a>
|
|
|
|
</div>
|
|
|
|
|
|
|
|
<hr/>
|
|
|
|
|
|
|
|
<div role="contentinfo">
|
|
|
|
<p>© Copyright 2020-2022, RtBrick, Inc..</p>
|
|
|
|
</div>
|
|
|
|
|
|
|
|
Built with <a href="https://www.sphinx-doc.org/">Sphinx</a> using a
|
|
|
|
<a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a>
|
|
|
|
provided by <a href="https://readthedocs.org">Read the Docs</a>.
|
|
|
|
|
|
|
|
|
|
|
|
</footer>
|
|
|
|
</div>
|
|
|
|
</div>
|
|
|
|
</section>
|
|
|
|
</div>
|
|
|
|
<script>
|
|
|
|
jQuery(function () {
|
|
|
|
SphinxRtdTheme.Navigation.enable(true);
|
|
|
|
});
|
|
|
|
</script>
|
|
|
|
|
|
|
|
</body>
|
|
|
|
</html>
|