IPv6-Labor

Dies ist eine alte Version des Dokuments!

PROTOS - Security Testing of Protocol Implementations – Open Source Projekt inzwischen veraltet (1999-2003). Kommerzielle Weiterentwicklung dessen sind die Codenomicon Testsuites, die im Wesentlichen Fuzzing verschiedener Protokollfelder vornehmen.
Tahi Project mit Conformance Tests für IPv6 und DNS. Unter http://people.freebsd.org/~qingli/ct-freebsd-9/ finden sich die IPv6-Resultate für FreeBSD.

Tool	Beschreibung
NDPWatch	NDPWatch is a daemon that monitors IPv6 activity and keeps a database of Ethernet/IPv6 address pairings
symon	symon is a system monitor for FreeBSD, NetBSD, OpenBSD and Linux
tcpreplay	tcpreplay

Tunneltechnologie	Link	Anmerkungen
6to4	RFC3056	Standard
	RFC3964	Security Considerations

6over4	Wikipedia
AYIYA	draft
ISATAP	RFC5214	Standard

Allgemein	Microsoft	6to4, ISATAP
Configured Tunnel	RFC4213	Transition Mechanisms (vorher RFC2893)
	RFC4890	Recommendation for Firewalls
	RFC4864	Local Network Protection
	RFC4942	v4/v6 Transition Security

Organisation	Dokument	Link
RIPE	Requirements For IPv6 in ICT Equipment	RIPE-501
NSA	Security for IPv6 Routers	Cisco Router Guides
NSA	Firewall Design / Mobile IP	Internet Protocol version 6
NIST	Guidelines for the Secure Deployment of IPv6 (SP800-119)	Direkt Link Security Publications
Pennstate University	Security Resources for different Platforms	Direct Link

tcpdump -i eth0 -vv ip6
tcpdump -i eth0 -w test.out -s 65535              #schreibt den Trace in test.out

IPv6 vs. NAT - funny
Problems with IPv6 Paketinspection Google IPv6 Implementors Conference: Home Networks Session & Lightning Talks