that motherfucker found the ubee telnet port that was really useful, now its really gonna be gone for good. too bad its disabled on all new ubee firmware images.
i also know a device does what he's trying to do already (too stupid to remember the name, but its used when CALEA IRI is not sufficient), but its only sold to LE, and its passive (they only need to be on the same node/tap as the modem), it decrypts the traffic both upstream and downstream of the target modem and dumps it to a hard disk-ala the stingray for cable. the problem with his theory is that you are dealing with multiple bonded channels - you may need 8 or 16 qam tuners, and 4 "sdrs" for upstreams..otherwise the data would be fragmented.
i also know a device does what he's trying to do already (too stupid to remember the name, but its used when CALEA IRI is not sufficient), but its only sold to LE, and its passive (they only need to be on the same node/tap as the modem), it decrypts the traffic both upstream and downstream of the target modem and dumps it to a hard disk-ala the stingray for cable. the problem with his theory is that you are dealing with multiple bonded channels - you may need 8 or 16 qam tuners, and 4 "sdrs" for upstreams..otherwise the data would be fragmented.