Network Reconnaissance in IPv6 Networks
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 38
- Abstract
- IPv6 offers a much larger address space than that of its IPv4 counterpart. An IPv6 subnet of size /64 can (in theory) accommodate approximately 1.844 * 10^19 hosts, thus resulting in a much lower host density (#hosts/#addresses) than is typical in IPv4 networks, where a site typically has 65,000 or fewer unique addresses. As a result, it is widely assumed that it would take a tremendous effort to perform address-scanning attacks against IPv6 networks; therefore, IPv6 address-scanning attacks have been considered unfeasible. This document formally obsoletes RFC 5157, which first discussed this assumption, by providing further analysis on how traditional address-scanning techniques apply to IPv6 networks and exploring some additional techniques that can be employed for IPv6 network reconnaissance.
- Publication Date
- 2016-03-01
- Status Note
- Informational
- DOI
10.17487/RFC7707- Link
- https://doi.org/10.17487/RFC7707
- Author(s)
- Fernando GontTim Chown
Latest version of IETF RFC 7707
Document Versions — IETF RFC 7707
-
▶ IETF RFC 7707 (2016-03-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 1034 [Active*]
- IETF RFC 1035 [Active, Amended*]
- IETF RFC 2460 [Superseded*]
- IETF RFC 3315 [Superseded*]
- IETF RFC 4380 [Active*]
- IETF RFC 4861 [Active*]
- IETF RFC 4862 [Active*]
- IETF RFC 4941 [Superseded*]
- IETF RFC 5214 [Active*]
- IETF RFC 6620 [Active*]
- IETF RFC 6724 [Active*]
- IETF RFC 7012 [Active*]
- IETF RFC 7136 [Active*]
- IETF RFC 7217 [Active*]
Bibliographic Reference(s)
- 10.1007-978-3-540-79232-1_3 — Malone2008 EXTERNAL
- 10.1145-2815675.2815678 — ADDR-ANALYSIS EXTERNAL
- IETF.draft-gont-6man-ipv6-smurf-amplifier-03 — SMURF-AMPLIFIER EXTERNAL
- IETF.draft-ietf-6man-default-iids-10 — DEFAULT-IIDS EXTERNAL
- IETF.draft-ietf-dhc-stable-privacy-addresses-02 — IIDS-DHCPv6 EXTERNAL
- IETF.draft-ietf-dnsop-isp-ip6rdns-00 — IPv6-RDNS EXTERNAL
- IETF.draft-ietf-dnsop-nxdomain-cut-00 — NXDOMAIN-DEF EXTERNAL
- IETF.draft-ietf-opsec-v6-07 — OPSEC-IPv6 EXTERNAL
- IETF.draft-ietf-v6ops-ipv6-ehs-in-real-world-02 — IPV6-EXT-HEADERS EXTERNAL
- Ford, M., "IPv6 Address Analysis - Privacy In, Transition Out", May 2013, < http://www.internetsociety.org/blog/2013/05/ ipv6-address-analysis-privacy-transition-out >. EXTERNAL
- VirtualBox, "Oracle VM VirtualBox User Manual", Version 4.1.2, August 2011, < http://www.virtualbox.org >. EXTERNAL
- Gont, F., "IPv6 Network Reconnaissance: Theory & Practice", LACSEC Conference, Medellin, Colombia, May 2013, < http://www.si6networks.com/presentations/lacnic19/ lacsec2013-fgont-ipv6-network-reconnaissance.pdf >. EXTERNAL
- VMware, "vSphere Networking", vSphere 5.5, Update 2, September 2014, < http://pubs.vmware.com/ vsphere-55/topic/com.vmware.ICbase/PDF/ vsphere-esxi-vcenter-server-552-networking-guide.pdf >. EXTERNAL
- van Dijk, P., "Finding v6 hosts by efficiently mapping ip6.arpa", March 2012, < http://7bits.nl/blog/2012/03/26/ finding-v6-hosts-by-efficiently-mapping-ip6-arpa >. EXTERNAL
- Wikipedia, "BitTorrent", November 2015, < https://en.wikipedia.org/w/ index.php?title=BitTorrent&oldid=690381343 >. EXTERNAL
- SI6 Networks, "SI6 Networks' IPv6 Toolkit", < http://www.si6networks.com/tools/ipv6toolkit >. EXTERNAL
- Gont, F., "Results of a Security Assessment of the Internet Protocol version 6 (IPv6)", DEEPSEC Conference, Vienna, Austria, November 2011, < http://www.si6networks.com/presentations/deepsec2011/ fgont-deepsec2011-ipv6-security.pdf >. EXTERNAL
- FreeBSD, "FreeBSD System Manager's Manual: traceroute6(8) manual page", August 2009, < https://www.freebsd.org/cgi/ man.cgi?query=traceroute6 >. EXTERNAL
- VMware, "Setting a static MAC address for a virtual NIC (219)", VMware Knowledge Base, August 2011, < http://kb.vmware.com/selfservice/microsites/ search.do?language=en_US&cmd=displayKC&externalId=219 >. EXTERNAL
- Poettering, L., "mdns-scan(1) Manual Page", < http://manpages.ubuntu.com/manpages/precise/man1/ mdns-scan.1.html >. EXTERNAL
- "THC-IPV6", < http://www.thc.org/thc-ipv6/ >. EXTERNAL
- Bockover, A., "Mono Zeroconf Project -- mzclient command- line tool", < http://www.mono-project.com/archived/monozeroconf/ >. EXTERNAL
- Bellovin, S., Cheswick, B., and A. Keromytis, "Worm propagation strategies in an IPv6 Internet", Vol. 31, No. 1, pp. 70-76, February 2006, < https://www.cs.columbia.edu/~smb/papers/v6worms.pdf >. EXTERNAL
- Gont, F., "Security Assessment of the Internet Protocol version 6 (IPv6)", UK Centre for the Protection of National Infrastructure, (available on request). EXTERNAL
- Lyon, Gordon "Fyodor", "Nmap 7.00", November 2015, < http://insecure.org >. EXTERNAL
- IETF RFC 4795 [Active*]
- IETF RFC 4890 [Active*]
- IETF RFC 5157 [Superseded*]
- IETF RFC 5375 [Active*]
- IETF RFC 6583 [Active*]
- IETF RFC 6762 [Active*]
- IETF RFC 6763 [Active*]
- IETF RFC 7421 [Active*]
- IETF RFC 7719 [Superseded*]
- RFC7721 — RFC7721 EXTERNAL
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC7707.json
Supersedes:
IETF RFC 5157 [Superseded*]
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 7707, Network Reconnaissance in IPv6 Networks. Available at https://doi.org/10.17487/RFC7707
Snippet:
IETF RFC 7707, Network Reconnaissance in IPv6 Networks. Available at https://doi.org/10.17487/RFC7707
HTML (ISO 690 compliant)
Preview:
IETF RFC 7707, Network Reconnaissance in IPv6 Networks. Available at https://doi.org/10.17487/RFC7707
Snippet:
<span class="citation"><cite>IETF RFC 7707</cite>, Network Reconnaissance in IPv6 Networks. Available at <a href="https://doi.org/10.17487/RFC7707" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7707</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 7707, Network Reconnaissance in IPv6 Networks
doi: 10.17487/RFC7707
url: https://doi.org/10.17487/RFC7707
doi: 10.17487/RFC7707
url: https://doi.org/10.17487/RFC7707
Snippet:
<li> <cite id="bib-rfc7707">IETF RFC 7707</cite>, Network Reconnaissance in IPv6 Networks <span class="doi">10.17487/RFC7707</span> </li>
Referenced By
- IETF RFC 8200 [Active*]
- IETF RFC 8415 [Superseded*]
- IETF RFC 8981 [Active*]
- IETF RFC 9416 [Active*]
- IETF RFC 9915 [Active*]