Re: EXPERT IPv6 network scaning

[niteesh kumar <niteesh3 () gmail com>]

On Wed, Apr 11, 2012 at 7:46 AM, David Fifield <david () bamsoftware com>wrote:

> On Wed, Apr 11, 2012 at 01:19:08AM +0530, niteesh kumar wrote:
> > I observed one more thing, target-ipv6-multicast-slaac.nse do scan a lot
> of
> > ips which MLD script doesnot but those ip which are not scanned my MLD
> are
> > also not responding to Ping msgs <ECHO>. this may be attributed to
> machines
> > who actually take part in address configuration but do not communicate in
> > IPv6 network or may be due to some firewall not responding to ICMP
> packets.
> > May be a possibility that the slaac script is not checking the
> > reachability  of scanned nodes.
>
> This is common to all targets scripts. I have seen phantom addresses
> come from the slaac script on Windows too. Scripts should not verify
> addresses themselves. Nmap will do its own more reliable ND verification
> of the added addresses. ICMPv6 echo is less reliable than ND.
>
> David Fifield


IN case of dual stack <ipv4 and ipv6 togather> nmap can be used to scan
ipv4 addresses in the network, and henceforth use icmpv6 node Info
messages<type 139> to get their respective ipv6 addresses.


-Niteesh
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/