I have been experimenting with IPv6 and tcpdump libpcap over the past several weeks and here are some of the filters that I have found working for me to look for certain types of IPv6 traffic. tcpdump and IPv6 still has some limitations but it is still able to zoom in on some of the data you might be looking for. Here is the list of libpcap filters: IPv6 and TCP IPv6 and UDP IPv6, hostIPv6 and host fec0:0:0:bebe::2 IPv6, host fec0:0:0:bebe::2 and TCP port 22 IPv6, host fec0:0:0:bebe::2 and everything except TCP port 22 IPv6, host fec0:0:0:bebe::2, and all traffic to destination port TCP 22 IPv6, host fec0:0:0:bebe::2, and all traffic from source port TCP 22 If you have tested other libpcap filters not listed here and would like to share them, post them in the comment form or email them via our contact form. ----------- Guy Bruneau IPSS Inc. gbruneau at isc dot sans dot edu |
Guy 523 Posts ISC Handler Oct 23rd 2011 |
Thread locked Subscribe |
Oct 23rd 2011 1 decade ago |
Try these:
http://www.chrisbrenton.org/2009/11/weekend-challenge/ http://www.chrisbrenton.org/2009/12/icmpv6-challenge/ |
Anonymous |
Quote |
Oct 24th 2011 1 decade ago |
Sign Up for Free or Log In to start participating in the conversation!