Mailing List Archive: nsp: ipv6

IPv6 NIDS evasion and IPv6 fragmentation/reassembly improvements

Index | Next | Previous | View Threaded

fgont at si6networks

Feb 22, 2012, 11:57 AM

Post #1 of 3 (522 views)
Permalink

IPv6 NIDS evasion and IPv6 fragmentation/reassembly improvements

Folks,

FYI, just posted:
<http://blog.si6networks.com/2012/02/ipv6-nids-evasion-and-improvements-in.html>

It contains some test results regarding the implementation of RFC 5722
and draft-ietf-6man-ipv6-atomic-fragments.

Thanks,
--
Fernando Gont
SI6 Networks
e-mail: fgont [at] si6networks
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

sthaug at nethelp

Feb 23, 2012, 4:55 AM

Post #2 of 3 (490 views)
Permalink

Re: IPv6 NIDS evasion and IPv6 fragmentation/reassembly improvements [In reply to]

> FYI, just posted:
> <http://blog.si6networks.com/2012/02/ipv6-nids-evasion-and-improvements-in.html>
>
> It contains some test results regarding the implementation of RFC 5722
> and draft-ietf-6man-ipv6-atomic-fragments.

Hi,

Could you please indicate exactly what "ICMPv6 Timed" in your table
means.

Steinar Haug, Nethelp consulting, sthaug [at] nethelp

fgont at si6networks

Feb 23, 2012, 4:58 PM

Post #3 of 3 (493 views)
Permalink

Re: IPv6 NIDS evasion and IPv6 fragmentation/reassembly improvements [In reply to]

On 02/23/2012 09:55 AM, sthaug [at] nethelp wrote:
>> FYI, just posted:
>> <http://blog.si6networks.com/2012/02/ipv6-nids-evasion-and-improvements-in.html>
>>
>> It contains some test results regarding the implementation of RFC 5722
>> and draft-ietf-6man-ipv6-atomic-fragments.
>
> Hi,
>
> Could you please indicate exactly what "ICMPv6 Timed" in your table
> means.

Yes: ICMPv6 "Time Exceeded" (type 3), "Fragment reassembly time
exceeded" (code 1).

Thanks,
--
Fernando Gont
SI6 Networks
e-mail: fgont [at] si6networks
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads