Chapter 30: Unified Electronic Surveillance
STANDARD Revision 1.0
C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved.
878
configure logging local-volatile 7
The following are examples of info level log messages:
Example 1: — CALEA Call Data log message
show logging history
History: notifications=4, size=2000
show history filters: terse format
Time Sl Pri Text...
-------- -- ---- -------
17:02:40 9 info: Received Electronic Surveillance Request for Call Data (Pen Register Trap &
Trace).
Example 2: — CALEA Call Content log message
show logging history
History: notifications=4, size=2000
show history filters: terse format
Time Sl Pri Text...
-------- -- ---- -------
17:02:40 9 info: Received Electronic Surveillance Request for Call Data (Pen Register Trap &
Trace).
17:03:38 9 info: Received Electronic Surveillance Request for Call Content (Intercept).
Legal Intercept
The C4/c CMTS Legal Intercept (LI) feature provides operators a standards-based mechanism for meeting legal
requirements to intercept all IP data and voice traffic originating from or destined to subscribers on their network. The
feature supports the Simple Law Enforcement Monitoring (SLEM) concept outlined in RFC 3924 to enable the interception
of all IP traffic associated with a subscriber’s cable modem. See the figure below for an illustration of the RFC 3924
framework.
The SLEM approach relies on the CISCO-TAP-MIB (cTapMIB) to support the secure remote configuration of tap sessions
with one or more Mediation Devices (MDs) via SNMPv3 (or local configuration via CLI) and to specify the data streams to
be intercepted. The C4/c CMTS allows an LI tap against a single modem, each session directed to a unique MD IP address.
In the C4/c CMTS, the only data stream specification that is supported in the cTapMIB is the current layer 2 (aka an 802
stream) "subscriber interface" designated by the CM MAC address (or any MAC address of a bonded CM) that is registered