Presentation by Chris Browning at APRICOT 2018 on Wednesday, 28 February 2018.

1. OpenLI
Chris Browning - Lightwire

2. Lawful intercept – New Zealand
• In New Zealand the government has required the ETSI standards for lawful
intercept, or by mutual agreement (SPAN/mirror ports not acceptable).
• Threshold for full Lawful intercept compliance is 4000 subscribers
• No support or funds from government to aid funding and deploying LI
• Some ISP’s have vender solutions (Mostly the large ISP’s)
• Some ISP’s are ignoring the problem
• Some ISP’s are looking for a new approach to
the problem - OpenLI

3. ETSI – What makes it hard
• Its from ETSI so many standards to interpret and piece together
• Real time content capture and delivery to agency
• Lossless delivery of content, sequence numbers, retransmissions, buffering
• Real time metadata delivery (link state, dhcp, pppoe, sip)
• Concurrent intercepts
• Multiple targets
• Multiple target types (Voice and IP)
• Same target multiple agencies
• Voice intercept prioritisation
• Custom Packet format
• In NZ, interception must be highly selective
• no packets for other users may be collected

4. What makes Lawful intercept hard to swallow
• Lawful intercept standards are written confusingly
• Lawful intercept vendors make the area seem mystical and hard to
solve (without their products)
• Intercept is compulsory in many/most countries
• Very expensive to buy products
• Very expensive support contracts

5. Different approach - OpenLI
• Open source project
• Main developer is Shane Alcock
• Group of 6 ISPs and enterprises
in New Zealand
• Managed by the University of
Waikato WAND group
• Open source project
• Most likely GPL licence

6. WAND Group
• WAND is a research group with the
University of Waikato NZ.
• Very experienced in capturing and
processing packets
• Produced libtrace and libprotoident
• WAND has Shane Alcock – “Expert in
packet capture, analysis and export”
• Experience in intel DPDK and methods to
make packet capture and processing very
fast on X86

7. OpenLI
• Will be based on libtrace
• Intel DPDK support
• Will work on Network SPAN
ports for IP traffic
• Will take all RADIUS frames and
find relevant meta data
• Will take all SIP and RTP from
SPAN and assemble intercept
• Work started in November 2017
• Project well under way
• Lightwire and Inspire aim to
deploy into production by June
2018

8. Open LI

9. Looking for partners
Project has funds to complete the basic requirements for the initial
companies involved.
Looking for funding for additional features, maintenance and promotion.
Feel free to contact any of us
• Chris Browning – chris@lightwire.co.nz
• Richard Nelson - richardn@waikato.ac.nz
• Shane Alcock - salcock@waikato.ac.nz
• Dave Mill – dave@mill.net.nz