calea - capturing only headers and streaming to the server

RouterOS General
1

Hello, I need to fulfill data retention law, so I need to capture ip headers only and send them to remote server which is storing data from other gateways.
But when I try to setup packet sniffer with “header only” option, its sending whole traffic to the data retention server, not only headers. Same with CALEA.

is there any way how to do that?

2

I have the same problem. I use:
/ip firewall calea add action=sniff-pc chain=forward connection-bytes=0-1492 disabled=no dst-address=!10.0.0.0/24 packet-size=90-2048 protocol=tcp sniff-id=105 sniff-target=XXX.XXX.XXX.XXX sniff-target-port=5555 src-address=10.0.0.0/24

This send the first packet, but not ACKs

3

Any progress?