Re: Nmap and IPv6

[Kris Katterjohn <katterjohn () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/17/2008 04:49 PM, DePriest, Jason R. wrote:
> What is the road map like for improving IPv6 support in nmap (such as
> adding OS detection)?
>
> Since various telco sources decry the end of IPv4 by 2010 or 2011, I
> thought it might be a good idea to start working out how to get the
> same level of data from IPv6 as we do from IPv4 now.
>
> I just got around to enabling IPv6 on a few systems at work to see how
> our firewalls and other equipment handle it and it is pretty ugly.
> IPv6 is not enabled on any of our routers, but I was able to bring up
> IPv6 and talk to another system on the same network without bothering
> our host IDS / firewall.  Our firewalls support it, but have no
> specific rules in place for it.  I have no idea if our proxy server
> will handle IPv6 web sites properly for content filtering.
>
> Nmap is a handy tool to sling packets and find things that should not
> be open.  The more it supports IPv6 before it's completely mainstream,
> the better.

These are all very good points.

I investigated this[1] earlier in the year and noticed some barriers.  I never
got any reply to that mail (which was understandable), but hopefully your
thread will spark some more discussion on this.  If I have time, I may dive
into some more research on this.

> -Jason

Thanks,
Kris Katterjohn

[1] http://seclists.org/nmap-dev/2008/q1/0458.html

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
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=6xzD
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org