4 ms·

Thanks for your great work! > In the past what I've seen is that the police will ask you to identify who was using an IP and also to help them catch the person

Thanks for your great work! > In the past what I've seen is that the police will ask you to identify who was using an IP and also to help them catch the person in the act if they do the thing again What's the method to catch the person in the act? Is it something like creating a rule: "if [this website] was visited between [foo] and [bar] notify me" at the routing level?

loooooooooooool 9y ago
DPI?
grahamburger 9y ago
(author here) When I've been involved in this it's been using a traffic sniffer (tcpdump or iptraf or wireshark) to watch the customer's traffic and see what they connect to.
cdancette 9y ago
As a ISP, you don't want to do this. You're not responsible to what goes inside your pipes. Let the majors/govs do the work of spying and detecting piracy / illegal websites, and just answer to subpoenas, that will be enough.