This document provides an overview of the Carnivore surveillance system developed by the FBI. It describes Carnivore as a computer system that can intercept and view suspected emails and internet traffic. The document outlines how Carnivore works, the different modes it can operate in to filter data, and how it saves intercepted data. Concerns about privacy and lack of oversight with the system are also discussed.

1. WELCOME

2. CARNIVORE
PRESENTED BY
SABNAM JEBIN .C
No:35

3. CONTENTS
 INTRODUCTION
 WHAT IS CARNIVORE
 WORKING OF A E-mail
 TYPES OF MODES
 PEN MODE OR TRAP AND TRACE MODE
 FULL-COLLECTION MODE
 FIXED IP FILTERING
 DYNAMIC IP FILTERING

4. • PROTOCOL FILTERING
• TEXT FILTERING
• PORT FILTERING
• E-mail ADDRESS FILTERING
• HOW CARNIVORE WORKS
• JAZZ DRIVE(SAVE AND STORE)
• IS IT NEW TECHNOLOGY
• DISADVANTAGES
• CONCLUSION

5. INTRODUCTION
• Development of the technology is natural.
• Technology can be used for as well as bad
purposes.
• As the technology grows human life becomes
simple and comfortable.
• But at the same time it also helps to anti-
social elements like criminals and terrorists.

6. Cntn…
• The evolution of cell-phone technology is
useful for both normal peoples , terrorist and
criminals at the same extent.
• For avoiding this types of crimes Low
Enforcement agencies were developed phone
tapping technology.
• Using this technology , we can find where he
is talking and can record what he is talking
without his knowledge.

7. Cntn…
• Today billions of business transactions are
taking place using E-mails.
• E-mails are so popular that we doubt whether
human life will go smoothly without E-mails.
• In cyber space , criminals and terrorists are
depending on E-mails for sending their
important information quickly to their
companions.

8. Cntn…
• While they using E-mails they are free from
afraid of phone tapping.
• E-mails initiated a lot of debate on matters of
security and ethics.
• As a solution for this problem , the
US.FBI(Federal bureau of investigation)
developed carnivore software.

9. What is carnivore
• Carnivore - “an animal that eats meat”
• The main characteristics of carnivore is , it can
smell meats wherever it is.
• FBI-federal bureau of investigation named this
software as “CARNIVORE” because it can
intercept and view the suspected e-mails and
internet traffic.
• Carnivore is a computer dependent
transaction tracking system.

10. cntn…
• Carnivore is an FBI assistance program that
helps ISP overcome technical difficulties
when complying with court orders.
• FBI connects the Carnivore installed computer to
ISP server.
• This computer compares every packet that travels
through the server with the filter that is settled in
it and stores if any packet is matched.

12. Cntn…
• While performing this process, it does not
disturb the Internet Traffic.
DATA
CARNIVORE
INTERNET
………………
………………

13. Working of a E-mail
• Click the send button composing
email cmptr breaks the data
small parts(uniform chunks)(“packets”).
• Packets divided -2 parts:
1 - CONTENT-data that is to be transmitted
2 - HEADER –source & destination IP address,
protocols:TCP/IP,FTP,SMTP etc…

14. Cntn…
• Packets serial number routed to the
global network. Destination check
(reached or not) reassembles the
message(depending on packet serial number).

15. Types of modes
• For collecting information carnivore uses two
types of methods , those are
1) Pen Mode or Trap And Trace Mode
2) Full Collection Mode
• We can set any one the mode depending on
our requirements.

16. Pen Mode or Trap And Trace Mode
• This mode almost looks like Caller Line
Identification method (CLI), which is used in
telephones.
• Using this CLI we can know the Caller number
( calling person’s telephone number).
• In the same way, Carnivore also finds from
which address the packet came and to whom
it was addressed etc..

17. Cntn…
• Apart from this details it can also finds the IP
addresses of the server and also the details of
the other servers that are participated in
routing mails.
• Using all this information we can find the
details of the computers those are
participated in FTP and HTTP sessions.

18. • FTP - File Transfer Protocol
and
• HTTP - Hyper Text Transfer
Protocol

19. Cntn…
• In general for scanning the e-mails we
use
Pen Mode or trap and trace mode.

20. Full Collection Mode
• In Full-collection Mode, apart from getting the
all information that is available in Pen Mode,
we can also read the total message.
• Whenever we have a doubt about a packet we
can change from Pen Mode to Full-collection
Mode to read the total message.
• Apart from the single word filtering method,
Carnivore provides some more methods.

21. • According to our needs we can set the Filtering
Method, which we want.
• Filtering Methods that are available in Carnivore:
• 1. Fixed IP Filtering
• 2. Dynamic IP Filtering
• 3. Protocol Filtering
• 4. Text Filtering
• 5. Port Filtering
• 6. E-mail Address Filtering

22. 1:Fixed IP Filtering
• It is the simplest of all filtering methods
• In internet every server has an IP address from
0.0.0.0 to 255.255.255.255
• Giving an IP Address or a range of IP
Addresses to Carnivore we can scan the
outgoing as well an incoming data of those
servers.

23. • It is impossible to scan all the Internet Traffic
that runs in crores each day.
• So in general, FBI gives the suspected IP
Addresses and tries to scan the information
that runs through it.
• FBI follows this method giving a range to the
server.

24. 2:Dynamic IP Filtering
• Today most of the computers are following
Dynamic IP Addressing system.
• Hence using Fixed IP Filtering is not useful, so
for this situation Dynamic IP Filtering is used.
• In this method, we have to give the Media
Access Code (MAC) of the computer from
which we are getting the information or E-mail
user name and the range of IP Addresses to
find the information.

25. 3. Protocol Filtering
• In Internet, we are using different types of
protocols for data transmission. Using this
Protocol Filtering method, Carnivore finds the
information that is related to a particular
Protocol.
• We can get the information that uses UDP or
ICMP depending on some IP Addresses in Full-
collection mode or Pen mode.

26. 4.Text Filtering
• In this method, Carnivore filters the packets
using the specified text string. For example, if
we have a doubt about a customer then
setting his user name as text string, we can
save a part or complete conversation or
Addresses.
• In the same way giving some doubtful works
to text string we can filter the packets that
contain these words.

27. 5. Port Filtering
• Depending on several protocols, every server
contains a port number to transmit the data.
• These Port Numbers are same in all
computers.
• When we send the E-mail through the
Internet Account we set the port number 25
to the Outgoing mail (SMTP), 110 to the
Incoming mail (PoP3).

28. • These port numbers are implicitly taken by the
system.
• In the same way, HTTP has 80 as port number,
SLC has 995 as port numbers.
• Depending on the IP Address of a server, this
method scans only the data that travels
through a particular port without considering
the data that travels through other ports of
the server.

29. 6. E-mail Address Filtering
• If we have doubt that any suspected information
is transmitting through a particular E-mail
address, then giving this E-mail address to the
Carnivore, we can record all SMTP and PoP3
information.
• Like this, using the Carnivore FBI is able to get any
information in Internet.
• Since this small application gives a wide authority
to the FBI on the Internet, people as well as
organizations are afraid and are protesting
against the Carnivore.

30. How carnivore works?

31. • “Ethernet Tap” - data is trapped from a hub or
switch that Is connected to the server to the
internet - for this they use a special
instrument.
• Ethernet Tap is connected to the
telephoneline which brings the data to the
ISP’s Hub.
• Other port of the Ethernet Tap is connected to
the Hub.

32. • Data transmits between these two ports as
normal as it transmits through the cable.
• Two ports are A and B.
A B
B A
• There are some arrangements at ports A and B
to copy the data and send them to the
Carnivore system.
Through the general cables

33. • Copied data from A B at port A or
B A at B.
• Send the data to another new ports.
• These two new ports can only receive the data
but could not send out the data. These type of
ports are called “READ-ONLY-TAPS”.
B
A
B
A

35. Jazz drive(save and store)
• The saving method is does not consist any
hard disk , floppy drive , ports , monitor and
keyboards etc…
• This consist only a small box.
• In this box , there have 2GB jazz drive to store
collecting data.
• Required data is stored in jazz disk , that fixed
in jazz drive.

37. Is it a new technology?
• Carnivore is not a new
technology.
• These types of several
sniffers are available in the
market.

38. DISADVANTAGES
•Trust
•Ease of access
•Loss of ISP control
•Procedural

39. • FBI officials argue that the Carnivore system
has become necessary because some smaller
ISP’s do not have the capability to provide the
data that law enforcement bodies need
quickly.
• It is like a Black Box.
• No Privacy.
• It can only intercept particular E-mail

40. CONCLUSION
• ISPs must have an open, auditable process such
that nobody even in the ISP’s organization can
read and E-mail of its subscribers.
• For national security, based on a clear
authorization, such tapping should be allowed
just as achieved and we will soon see foolproof
and balanced technical solutions for the same.