[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Using IPv6 with prefixes shorter than a /64 on a LAN
On 25/01/2011 11:29 p.m., Roland Dobbins wrote:
> On Jan 26, 2011, at 8:12 AM, Fernando Gont wrote:
>
>> Also, the claim that "IPv6 address scanning is impossible" is
>> generally based on the (incorrect) assumption that host addresses
>> are spread (randomly) over the 64-bit IID. -- But they usually
>> aren't.
>
> It also doesn't take into account hinted scanning via routing table
> lookups, whois lookups, and walking reverse DNS, not to mention
> making use of ND mechanisms once a single box on a given subnet has
> been successfully botted.
+1
Thanks,
--
Fernando Gont
e-mail: fernando at gont.com.ar || fgont at acm.org
PGP Fingerprint: 7809 84F5 322E 45C7 F1C9 3945 96EE A9EF D076 FFF1