1 / 10

IPv6 and Tunnels

IPv6 and Tunnels. IPv6 and Tunnels in the same presentation?. The work for both was done around the same time Most IPv6 traffic at the time was still tunneled (and likely still is at most sites). 2. IPv6. It ’ s turned on like you ’ d expect it to be and you can ’ t turn it off

moanna
Download Presentation

IPv6 and Tunnels

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. IPv6 and Tunnels

  2. IPv6 and Tunnels in the same presentation? • The work for both was done around the same time • Most IPv6 traffic at the time was still tunneled (and likely still is at most sites) 2

  3. IPv6 • It’s turned on like you’d expect it to be and you can’t turn it off • Not overly exciting • Different addresses in your logs • Lots of strange edge cases supported 3

  4. Tunnels • Everyone has tunnels • Even if you don’t know it • Most tunnels are for locally enabling IPv6 on end hosts 4

  5. Tunnel Decapsulators • Teredo • IP-in-IP (includes 6to4) • AYIYA • GTPv1 • SOCKS • Yes, SOCKS is a proxy protocol but internally we treat it similar to a tunnel 5

  6. Tunnel Recursion • Tunnels in tunnels 6

  7. Forensic Logs - tunnel.log 7

  8. Forensic Logs - conn.log 8

  9. Forensic Logs - conn.log 9

  10. Summary • Awareness of IPv6 and Tunnels in Bro • Normally don’t need to worry about them 10

More Related