CROSS-REFERENCE TO RELATED APPLICATION

This application claims priority to Indian Provisional Application No. 202041019577 entitled “NETWORK TRAFFIC MONITORING OR STORAGE USING A SIGNED UNIFORM RESOURCE LOCATOR,” filed on May 8, 2020. The entire content of which is expressly incorporated herein by reference.

BACKGROUND

Lawful interception includes obtaining network traffic from a network device pursuant to a lawful authority for the purpose of analysis and/or evidence. Such traffic may include signaling or network management information or content of communications.

SUMMARY

According to some implementations, a method may include receiving, by a network device of a network, flow-tap information that identifies a traffic flow characteristic and a signed uniform resource locator (URL), wherein the signed URL is associated with a signed URL platform; mapping, by the network device, the traffic flow characteristic to the signed URL in an entry of a flow-tap filter, wherein the flow-tap filter is maintained within a data structure of the network device; analyzing, by the network device and using the flow-tap filter, network traffic of the network to detect a traffic flow that is associated with the traffic flow characteristic; generating, by the network device and based on detecting the traffic flow in the network traffic, a traffic flow copy that is associated with the traffic flow; and providing, by the network device and based on the signed URL, the traffic flow copy to the signed URL platform, wherein the traffic flow copy is to be accessible to an authorized user device via the signed URL.

According to some implementations, a network device may include one or more memories and one or more processors to: receive, from a mediation device, a signed URL that is associated with a traffic flow characteristic, wherein the signed URL is associated with a signed URL platform; monitor, using a flow-tap filter, network traffic of a network to identify a traffic flow that is associated with the traffic flow characteristic, wherein the flow-tap filter includes an entry that identifies the signed URL and the traffic flow characteristic; process, based on identifying the traffic flow, the traffic flow for a transmission of the traffic flow to a traffic flow destination of the traffic flow; generate, based on processing the traffic flow, a traffic flow copy of the traffic flow; provide, based on the signed URL, the traffic flow copy of the traffic flow to the signed URL platform; and execute the transmission of the traffic flow to the traffic flow destination.

According to some implementations, a non-transitory computer-readable medium may store one or more instructions. The one or more instructions, when executed by one or more processors of a network device, may cause the one or more processors to: monitor, using a flow-tap filter, network traffic of a network to identify a traffic flow that is associated with a traffic flow characteristic, wherein the flow-tap filter includes an entry that maps the traffic flow characteristic to a signed URL of a signed URL platform; process, based on identifying the traffic flow, the traffic flow for a transmission of the traffic flow to a traffic flow destination; generate a traffic flow copy of the traffic flow; and provide, based on the signed URL, the traffic flow copy of the traffic flow to the signed URL platform, wherein the traffic flow copy of the traffic flow is to be accessible to an authorized user device via the signed URL.

