public_v6:start
Inhaltsverzeichnis
IPv6 Allgemein
Bücher:
Adresskonfiguration für unterschiedliche Betriebssysteme
IPv6-Programmierung
IPv6-Monitoring
Erzeugung von IPv6 Test-Traffic
IPv6 Speedtests
Penetration/Security Testing Tools
Protocol Conformance Testing Tools
TAHI
- Tahi Project mit Conformance Tests für IPv6 und DNS.
- FreeBSD IPv6-Resultate: http://people.freebsd.org/~qingli/ct-freebsd-9/
- Linux IPv6-Resultate: http://www.linux-ipv6.org/v6ready/s20040119-linux26.host/spec/
linux-v6eval
- IPv6 Conformance Test Tool for Linux only: https://github.com/liuhangbin/linux-v6eval
PROTOS
- PROTOS - Security Testing of Protocol Implementations – Open Source Projekt inzwischen veraltet (1999-2003). Kommerzielle Weiterentwicklung dessen sind die Codenomicon Testsuites, die im Wesentlichen Fuzzing verschiedener Protokollfelder vornehmen.
Misc
| Tool | Beschreibung |
|---|---|
| NDPWatch | NDPWatch is a daemon that monitors IPv6 activity and keeps a database of Ethernet/IPv6 address pairings. |
| symon | symon is a system monitor for FreeBSD, NetBSD, OpenBSD and Linux. |
| tcpreplay | Gives you the ability to use previously captured traffic in libpcap format to test a variety of network devices. |
| dnsmasq | Dnsmasq provides network infrastructure for small networks: DNS, DHCP, router advertisement and network boot. |
IPv6-Transitionsmechanismen
| Tunneltechnologie | Link | Anmerkungen |
|---|---|---|
| 6to4 | RFC3056 | Standard |
| RFC3964 | Security Considerations | |
| 6over4 | Wikipedia | |
| AYIYA | draft | |
| ISATAP | RFC5214 | Standard |
| Allgemein | Microsoft | 6to4, ISATAP |
| Configured Tunnel | RFC4213 | Transition Mechanisms (vorher RFC2893) |
| RFC4890 | Recommendation for Firewalls | |
| RFC4864 | Local Network Protection | |
| RFC4942 | v4/v6 Transition Security | |
Empfehlungen für den sicheren Einsatz von IPv6
| Organisation | Dokument | Link |
|---|---|---|
| RIPE | Requirements For IPv6 in ICT Equipment | RIPE-501 |
| NSA | Security for IPv6 Routers | Cisco Router Guides |
| NSA | Firewall Design / Mobile IP | Internet Protocol version 6 |
| NIST | Guidelines for the Secure Deployment of IPv6 (SP800-119) | Direkt Link Security Publications |
| Pennstate University | Security Resources for different Platforms | Direct Link |
IPv6-Security Tools
Troubleshooting:
tcpdump -i eth0 -vv ip6 tcpdump -i eth0 -w test.out -s 65535 #schreibt den Trace in test.out
Videos
- IPv6 vs. NAT - funny
- Problems with IPv6 Paketinspection Google IPv6 Implementors Conference: Home Networks Session & Lightning Talks
public_v6/start.txt · Zuletzt geändert: 2023/08/06 07:08 von admin