Hi, Legal authorities require that upon request we provide them with pcap files of a PPPoVPDN or PPPoE subscriber session we terminate on ASR1000 devices. I need to limit the captured data to a specific subscriber/IP address. So far I looked into: - SPAN: on the ASR1000 SPAN does not seem to offer the possibility to apply an IP access list to the SPAN session - EPC: EPC can only collect data until the buffer is full which is by far to small if a session needs to be captured/monitored over weeks - LI feature: For using the lawful intercept (LI) feature of the ASR a mediation device is required which we do not have Any hints will be appreciated. thanks, Christian
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
