Abstract: The method provides a Law Enforcement Agency LEA with retention or interception data related to a target user. At a data retention source node or at an interception control element of a telecommunications network, traffic packets involving the target user are inspected and a plurality of usage data records based on the inspected traffic packets are generated. Each record comprises information relating to a certain service class and to a respective communications stack layer. For each communications session involving a plurality of different communications stack layers, at the data retention source node or, respectively, the interception control element, the plurality of usage data records are provided with a same correlation identity number for correlating the data at the different communications stack layers. Then, the usage data records comprising the correlation identity number to the LEA are sent, for instance to the LI system or the data Retention System, respectively.

Abstract: The present invention relates to a methods and arrangements for monitoring instant messaging and/or presence activity at application level in a telecommunication system, which method comprises the following steps:—A request to monitor instant messaging and/or presence activity information related to a target subscriber, which information is obtainable from any type of access and not limited to SIP clients connected to a public IMS core system is sent from an agency to a receiving entity.—A requested activity involving the target subscriber is received from an Instant Messaging and Presence Services (IMPS) system to the receiving entity.—Information related to the requested activity is delivered from the receiving entity to the agency.

Abstract: The present invention relates to methods and arrangements in a telecommunication system to monitor information related to specified services in a service unaware node. The node handles Content of Communication associated with services. The system comprises a Delivery Function to which Content of Communication related to a target is received from the node. The method comprises the following steps: Receiving from a requesting entity to the Delivery Function a request to delimit the received Content of Communication according to not desired services. Parsing the received Content of Communication according to not desired services by a Packet Inspection Feature associated with the Delivery Function. Forwarding Control Information related to the not desired services to the requesting entity.