==== IPv6 Allgemein ==== * [[http://www.potaroo.net/tools/ipv4/plotend.png|Globale Verfügbarkeit von IPv4-Adressen]] * [[http://www.cisco.com/web/about/ac123/ac147/archived_issues/ipj_9-3/ipv6_internals.html|Cisco IPv6 Internals Artikel - Iljitsch van Beijnum]] * [[https://wikispaces.psu.edu/display/ipv6/Home|IPv6 Wiki at Pennstate University (many Topics)]] === Bücher: === * [[https://www.amazon.com/IPv6-Socket-API-Extensions-Programmers/dp/0123750768|IPv6 Socket API Extensions: Programmer's Guide]] * [[https://www.ciscopress.com/store/ipv6-fundamentals-a-straightforward-approach-to-understanding-9781587144776|IPv6 Fundamentals: A Straightforward Approach to Understanding IPv6, 2nd Edition]] ==== Adresskonfiguration für unterschiedliche Betriebssysteme ===== * [[public_v6:adresskonfiguration|Linux / BSD]] * [[Public_v6:windows|Windows]] * [[Public_v6:cisco_v6|Cisco IPv6 Konfiguration]] * https://wikispaces.psu.edu/display/ipv6/IPv6+Rosetta+Stone * [[http://www.dnskey.net/Main.html|Subnet und Reverse-Domain Calculator]] * https://www.heise.de/newsticker/meldung/Das-war-s-mit-IPv4-Adressen-in-Europa-4596197.html ==== IPv6-Programmierung ==== [[public_v6:programmierung|Libraries für die Paketgenerierung / Adressvalidierung / Tutorials]] * [[http://www.tenouk.com/Module39.html|Allgemeine Socket Programmierung (www.tenouk.com)]] * [[http://beej.us/guide/bgnet/|Allgemeine Socket Programmierung (www.beej.us)]] * [[http://stackoverflow.com/questions/9243292/subscribing-to-multiple-multicast-groups-on-one-socket-linux-c?rq=1|Joining Multiple Multicast Groups]] * [[http://www.pdbuchan.com/rawsock/rawsock.html|Raw Sockets]] ==== IPv6-Monitoring ==== * [[Public_v6:SNMP|SNMP]] * [[Public_v6:ntop|ntop]] * [[Public_v6:munin|munin]] ==== Erzeugung von IPv6 Test-Traffic ==== * [[Public_v6:traffic_generator|Traffic Generatoren]] ==== IPv6 Speedtests ==== * http://ipv6-test.com/speedtest/ * http://ipv6-speedtest.net/ ==== Penetration/Security Testing Tools ==== * http://www.si6networks.com/tools/ipv6toolkit/ * http://sectools.org/ * http://tools.securitytube.net/ * http://www.pentest-standard.org/index.php/PTES_Technical_Guidelines * http://www.rapid7.com/products/index.jsp ==== Protocol Conformance Testing Tools ==== === TAHI === * [[http://www.tahi.org/|Tahi Project]] mit Conformance Tests für IPv6 und DNS. * FreeBSD IPv6-Resultate: http://people.freebsd.org/~qingli/ct-freebsd-9/ * Linux IPv6-Resultate: http://www.linux-ipv6.org/v6ready/s20040119-linux26.host/spec/ === linux-v6eval === * IPv6 Conformance Test Tool for Linux only: https://github.com/liuhangbin/linux-v6eval == PROTOS == * [[https://www.ee.oulu.fi/research/ouspg/Protos|PROTOS - Security Testing of Protocol Implementations]] -- Open Source Projekt inzwischen veraltet (1999-2003). Kommerzielle Weiterentwicklung dessen sind die [[http://www.codenomicon.com/products/test-suites.shtml|Codenomicon Testsuites]], die im Wesentlichen Fuzzing verschiedener Protokollfelder vornehmen. ==== Misc ==== ^Tool^Beschreibung^ |[[http://ndpwatch.sourceforge.net/|NDPWatch]]|NDPWatch is a daemon that monitors IPv6 activity and keeps a database of Ethernet/IPv6 address pairings.| |[[http://www.xs4all.nl/~wpd/symon/|symon]]|symon is a system monitor for FreeBSD, NetBSD, OpenBSD and Linux.| |[[http://tcpreplay.synfin.net/|tcpreplay]]|Gives you the ability to use previously captured traffic in ​libpcap format to test a variety of network devices.| |[[http://www.thekelleys.org.uk/dnsmasq/doc.html|dnsmasq]]|Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot.| ==== IPv6-Transitionsmechanismen ==== ^ Tunneltechnologie ^ Link ^ Anmerkungen ^ |6to4|[[http://tools.ietf.org/html/rfc3056|RFC3056]]| Standard | | |[[http://tools.ietf.org/html/rfc3964|RFC3964]]| Security Considerations| | ||| |6over4|[[http://en.wikipedia.org/wiki/6over4|Wikipedia]]| | |AYIYA|[[http://unfix.org/~jeroen/archive/drafts/draft-massar-v6ops-ayiya-02.html|draft]]| | |ISATAP|[[http://tools.ietf.org/html/rfc5214|RFC5214]]|Standard | | ||| |Allgemein|[[http://technet.microsoft.com/en-us/library/cc756770(WS.10).aspx|Microsoft]]| 6to4, ISATAP| | Configured Tunnel |[[http://tools.ietf.org/html/rfc4213|RFC4213]]| Transition Mechanisms (vorher RFC2893)| | |[[http://tools.ietf.org/html/rfc4890|RFC4890]] | Recommendation for Firewalls| | | [[http://tools.ietf.org/html/rfc4864|RFC4864]]| Local Network Protection| | |[[http://tools.ietf.org/html/rfc4942|RFC4942]]| v4/v6 Transition Security | * [[Public_v6:teredo|Teredo: Laborkonfiguration mit Miredo]] ==== Empfehlungen für den sicheren Einsatz von IPv6 ==== ^ Organisation ^ Dokument ^ Link ^ | RIPE | Requirements For IPv6 in ICT Equipment | [[http://www.ripe.net/ripe/docs/ripe-501|RIPE-501]] | | NSA| Security for IPv6 Routers | [[ http://www.nsa.gov/ia/guidance/security_configuration_guides/cisco_router_guides.shtml |Cisco Router Guides]] | | NSA | Firewall Design / Mobile IP | [[http://www.nsa.gov/ia/guidance/security_configuration_guides/IPv6.shtml | Internet Protocol version 6]] | | NIST | Guidelines for the Secure Deployment of IPv6 (SP800-119) |[[http://csrc.nist.gov/publications/nistpubs/800-119/sp800-119.pdf |Direkt Link]] [[http://csrc.nist.gov/publications/PubsSPs.html|Security Publications]]| |Pennstate University|Security Resources for different Platforms|[[https://wikispaces.psu.edu/display/ipv6/IPv6+security|Direct Link]]| === IPv6-Security Tools === http://www.si6networks.com/tools/ipv6toolkit/ ==== Troubleshooting: ==== tcpdump -i eth0 -vv ip6 tcpdump -i eth0 -w test.out -s 65535 #schreibt den Trace in test.out ==== Videos ==== * [[https://vimeo.com/299414720|History Of Networking - Bob Hinden - IPv6]] * [[http://www.youtube.com/watch?v=v26BAlfWBm8|IPv6 vs. NAT]] - funny * [[http://www.youtube.com/watch?v=U45hV16LA1A#t=1h54m24s| Problems with IPv6 Paketinspection]] Google IPv6 Implementors Conference: Home Networks Session & Lightning Talks