"Programmers can't get IPv6 thus that is why they do not have IPv6 in their applications"....

Lee Howard lee at asgard.org
Wed Nov 28 21:54:08 UTC 2012



> -----Original Message-----
> From: Owen DeLong [mailto:owen at delong.com]
> 
> That won't help. Think about it this way. A session state log entry is
roughly 512 bytes.
[math redacted]
> you're still looking at roughly 85 Petabytes of
> storage required to meet CALEA standards.

I've done my share of shoveling dirt on the CGN coffin, but in the interest
of fact-based
decision-making: nobody is going to create a separate log entry for every
session/flow.
You do bulk port assignment or deterministic NAT, so whenever you assign an
address,
you know what ports you'll be mapping that address to.  One entry per
Lease_Time.

Doesn't matter, because the servers aren't logging port number, so nobody
will ever need
to see those logs.

* Unless Geoff Huston's wackiness finds support, and somebody will pay you
to keep
that kind of log.  Although if somebody would pay, I'd expect them to be
paying for
DPI deployment already.

Lee






More information about the NANOG mailing list