nanog mailing list archives
Re: IPv6 Advertisements
From: "Dale W. Carder" <dwcarder () doit wisc edu>
Date: Tue, 29 May 2007 20:37:51 -0500
On May 29, 2007, at 8:28 PM, Donald Stahl wrote:
With 1.5 million hosts it will only take 3500 years... for a _single_ /64!Scanning isn't AS EASY, but it certainly is still feasible,I'm not sure that's what I would call feasible.
There are "smarter" ways to scan v6 address space than this approach. My favorite is "First, the attacker may rely on the administrator conveniently numbering their hosts from [prefix]::1 upward. This makes scanning trivial." Take a look at:http://www.ietf.org/internet-drafts/draft-ietf-v6ops-scanning- implications-03.txt
and http://www.cs.columbia.edu/~smb/papers/v6worms.pdf Dale
Current thread:
- Re: IPv6 Advertisements, (continued)
- Re: IPv6 Advertisements Chris L. Morrow (May 29)
- Re: IPv6 Advertisements Donald Stahl (May 29)
- Re: IPv6 Advertisements Chris L. Morrow (May 29)
- Re: IPv6 Advertisements Donald Stahl (May 29)
- Re: IPv6 Advertisements David Conrad (May 29)
- Re: IPv6 Advertisements David Conrad (May 29)
- Re: IPv6 Advertisements William F. Maton Sotomayor (May 29)
- Re: IPv6 Advertisements JORDI PALET MARTINEZ (May 29)
- Re: IPv6 Advertisements Chris L. Morrow (May 29)
- Re: IPv6 Advertisements Donald Stahl (May 29)
- Re: IPv6 Advertisements Dale W. Carder (May 29)
- Re: IPv6 Advertisements Donald Stahl (May 29)
- RE: IPv6 Advertisements Barry Greene (bgreene) (May 30)
- RE: IPv6 Advertisements Donald Stahl (May 30)
- Re: IPv6 Advertisements Stephen Sprunk (May 30)
- Re: IPv6 Advertisements Paul Vixie (May 29)
- Re: IPv6 Advertisements Jeroen Massar (May 29)
- Re: IPv6 Advertisements John Kristoff (May 29)
- Re: IPv6 Advertisements William F. Maton Sotomayor (May 29)
- Re: IPv6 Advertisements Paul Vixie (May 29)
- Message not available
- Re: IPv6 Advertisements William F. Maton Sotomayor (May 29)