IPv6 NIDS evasion and IPv6 fragmentation/reassembly improvements

Fernando Gont fgont at si6networks.com
Fri Feb 24 01:58:12 CET 2012


On 02/23/2012 09:55 AM, sthaug at nethelp.no wrote:
>> FYI, just posted:
>> <http://blog.si6networks.com/2012/02/ipv6-nids-evasion-and-improvements-in.html>
>>
>> It contains some test results regarding the implementation of RFC 5722
>> and draft-ietf-6man-ipv6-atomic-fragments.
> 
> Hi,
> 
> Could you please indicate exactly what "ICMPv6 Timed" in your table
> means.

Yes: ICMPv6 "Time Exceeded" (type 3), "Fragment reassembly time
exceeded" (code 1).

Thanks,
-- 
Fernando Gont
SI6 Networks
e-mail: fgont at si6networks.com
PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492





More information about the ipv6-ops mailing list