[AusNOG] Data retention

[Peter Fern]

On 10/15/2015 10:41, Noel Butler wrote:
>
> On 15/10/2015 09:36, Noel Butler wrote:
>
>> On 13/10/2015 10:43, Peter Fern wrote:
>>
>>
>>         the destination address is explicitly EXCLUDED..
>>
>>
>>     Only for web traffic - pretty much all the other protocols
>>     (email, VOIP, IM, etc) specifically require that destination
>>     addresses are retained.
>>
>> I dont see how that is possible since you are not req
>>
>>  
>>
> blasted webmail...
>
> ...your not required to log DNS, so your not to know who is using what
> service, only those running those services will know who connects to,
> or are you going to try claim that every outbound pkt except those
> destined to ports 80 and 443 are required to be captured? if your
> implying that, thanks, i'll add that to my already large list of DR
> funnies.
>

What?  No, you need to retain this data only if you *provide* these as
OTT services in addition to your data services.  You capture them
however you see fit, generally that's going to be at the application
level (SIP proxy, mail server, etc).  Your list may be funny for the
wrong reasons.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20151015/c834ae66/attachment.html>