Hacker News Reader

Thanks for your great work!

> In the past what I've seen is that the police will ask you to identify who was using an IP and also to help them catch the person in the act if they do the thing again

What's the method to catch the person in the act? Is it something like creating a rule: "if [this website] was visited between [foo] and [bar] notify me" at the routing level?

View on HN

(author here) When I've been involved in this it's been using a traffic sniffer (tcpdump or iptraf or wireshark) to watch the customer's traffic and see what they connect to.

As a ISP, you don't want to do this. You're not responsible to what goes inside your pipes.

Let the majors/govs do the work of spying and detecting piracy / illegal websites, and just answer to subpoenas, that will be enough.

Reply on news.ycombinator.com