OpenLI

Open source, ETSI-standard Lawful Intercept

The OpenLI Project.

OpenLI is being written by the WAND Network Research Group at the University of Waikato. The primary aim is to meet the requirements of New Zealand's TICSA legislation. The work is being funded by a group of NZ services providers who came together in response to an email by Dave Mill to the NZNOG mail list.

The software is built on top of the libtrace packet processing library and has now been released under the GPLv3 license. The software implementation takes packet capture directly from the network and packages it into a format suitable for transmission to a law enforcement agency. OpenLI does not attempt to decrypt or inspect the contents (i.e. post-TCP or -UDP headers) of the intercepted packets (excluding SIP and RADIUS packets, which we need to fully parse to identify the appropriate packets to intercept for the target user's session).

OpenLI implements the ETSI standards for interception of IP delivery and Multimedia Services. Currently the sponsor service providers are helping define the network environments supported and have had access to the software before public release.

OpenLI Architecture

OpenLI System Architecture

Getting OpenLI

As of January 2019, OpenLI has now been released and is available for public consumption!

The OpenLI source code can be found on GitHub. This is the best place to file bug reports or feature requests.

We've also packaged OpenLI for Debian, Ubuntu, CentOS and Fedora. These packages can be downloaded from our repositories on BinTray. See the documentation section below for instructions on how to install these packages.

We hope to add support for other packaging systems in the near future -- watch this space...

Using and Understanding OpenLI

It's still early days in terms of our user documentation, so it may not be complete. Here's what we've got so far:

The README file from our GitHub repo, which covers building OpenLI from source, what each component does and the answers to some likely questions.

Instructions for installing and running OpenLI using our Debian or Ubuntu packages is available on the OpenLI wiki.

Instructions for installing and running OpenLI using our RPMs for CentOS and Fedora is available on the OpenLI wiki.

Documentation explaining how to configure the OpenLI components (including example configuration files) is included with the OpenLI source code. It can also be browsed through our GitHub repo.

(Edited) slides from an OpenLI tutorial that was run at NZNOG 2019. The slides may or may not be helpful without the actual spoken words given during the tutorial.

We expect more documentation, guides and hints to be added to the OpenLI wiki as time goes on. If you have something that you would like to contribute to the Wiki, please get in touch with us.

These companies are supporting the development of OpenLI.

Inspire.net
Lightwire
Vocus Group
Catalyst
Trustpower
NZ
IX
NetSpeed
ISPCo
ISPCo
Prophecy
Internet NZ
Datora

Contact us

For further information on OpenLI or to get assistance with running OpenLI, please send an email to our support address.

Contact WAND