Hi all,
During the TICSA roadshow last month, there was a representative from the Police talking about the provision of the data from the interception.
He made the point that solution using pcap and ftp is not acceptable due to delays in receiving the data and other reasons. They need the data faster than that.
They also talked about the importance of the meta data surrounding the capture and that they are using the 2012 version of the standard rather than the latest because the support for the latest version isn���t there yet.
So I agree with getting in touch with them before you start creating your own solution. The conversation needs to include how any proposed solution could be certified to stand up to Court scrutiny.