Apparatus and method are provided for dynamically establishing lawful interception taps within connection-oriented communication networks. Taps are established automatically upon establishment of a main connection by embedding collection identifier information within connection setup messages as a new form of information element. The collection identifier information includes information enabling a tap function within an interception node to establish a connection, such as an SPVC or an SVC, to a monitoring station. The collection identifier information may include any of a forward direction ATM address, a backward direction ATM address for use in bi-directional communications, a forward direction end point and a backward direction end point for use in establishing SPVC tap connections, and a connection identifier for use in establishing SVC tap connections. Tap connections can be established either during or after establishment of the main connection.