Re: [NSE][patch] targets-sniffer: sniff IPv6 addresses, fix newtargets for -6

[David Fifield <david () bamsoftware com>]

On Fri, Mar 09, 2012 at 12:31:32PM -0600, Daniel Miller wrote:
> On 03/09/2012 11:49 AM, Daniel Miller wrote:
> > List,
> >
> > Here's a patch to add IPv6 address sniffing to targets-sniffer.
> > The major difference is changing the BPF from "ip" to "ip or ip6".
> > I had to add a couple checks for NDP multicast addresses to
> > check_if_valid, and I may have missed some other invalid IPv6
> > addresses.
> Attaching updated patch. I was correct in thinking I missed some
> addresses: All IPv6 addresses starting with 'FF' are multicast, so I
> now test for that instead.

Thanks Daniel, I committed your changes.

As for checking for an IPv6 multicast address, I think your check fails
for an address that starts ff1:, for example. (Because that is really
0ff1.) Could you try using host.bin_ip instead?

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/