Monitoring IPv6-MAC mappings

Philipp Kern phil at philkern.de
Wed Apr 3 17:58:59 CEST 2013


On Wed, Apr 03, 2013 at 12:41:45PM -0300, Fernando Gont wrote:
> What do you mean by "packet capture"-based? That the interface must be
> put nto promiscuous mode? Something else?

If your router is not a *nix you need to get the packets to another box.

If you don't route centrally but somewhere outside of your DC, it might
be hard to replicate just broadcast traffic of the attached VLANs to
your DC. So you might need a box there. And you need to put that box
into all VLANs, which might not be desired from a security point of
view.

Kind regards
Philipp Kern


More information about the ipv6-ops mailing list