An incomplete PQ answer

[James Firth]

Ian Batten wrote:
> By ``passive tap'' all it probably means is a mirror port on a
> switch.  Hardly high-cost.

But scaled up to handle 10m connections, with configuration, audit etc.  The
mirror will only be for single authorised connections, which need to be
cross-referenced against the account holder to find the current dynamic IP
(if done at IP level).

The cost will come in the size, scalability and configuration of the
solution, not the cost of the raw equipment.