| 摘要 |
Data retention probes (10) and related methods are described in the context of lawful interception of internet activity monitoring. A probe 10 in a packet-switched, mobile telecommunications network 120 is arranged to forward packets between subscriber units 100 and a gateway node (e.g. GGSN/PGW) 140 in tunnels, wherein the gateway node maps IP addresses used within the mobile network to global IP addresses and port numbers used outside the mobile network in the global internet 111. In one embodiment, the probe comprises an interface 21 arranged to connect to one or more interfaces carrying traffic between nodes of the mobile network. The probe examines packets on the mobile network and identifies in those packets subscriber identities (e.g. IMSI/IMEI) and internet activity associated with particular tunnels. The processing unit correlates subscriber identities with internet activity of interest by matching the associated tunnels and creates a record of said correlated subscriber identities and internet activity. In a second embodiment the probe comprises two interfaces, respectively used to monitor traffic on the internal and external sides of the gateway node so that traffic related to the same session can be identified by comparing/correlating the application data monitored on either side. The gateway may thus determine the mobile subscriber identity related to the internet traffic. |
