IPv6 Security Scanner

[dgoodrum () nfr com]

Hi list,

I'm looking for a scanning tool that is capable of scanning IPv6 addresses for vulnerabilities.  I briefly googled 
"IPv6 Security Scanner" and also checked out nessus.org to see if they had any documentation as to whether they 
supported vulnerability scanning for IPv6 devices, but didn't find anything other than a few IPv6 port scanners.  I 
don't want tools that are just port scanners.  I know nmap now supports IPv6, but I'm looking for something a little 
deeper than port scanning.

I probably need a tool that can be triggered from command line also.

Preferably the tool would run on Linux or Solaris... I could probably make windows work if I had to, but I'd rather not.

Here's why.... I'm implementing NFR's IDS product at a client where we'll use the product to passively detect new IPv6 
rogues as soon as they come on the network and then automatically trigger an active vulnerability scan.  I will 
probably use nmap with it's "advanced version detection system", for proof-of-concept, but I'd like to know if there 
are other options available.

The jist of the project I'm working on started because there is a belief that when IPv6 rolls out, active scanning will 
become a thing of the past due to the large number of potential addresses on a given subnet.  i.e. the smallest IPv6 
subnet address range is millions of times larger than the entire IPv4 address range, implying that it will take a VERY 
VERY long time to scan the full address range.  So, rather than actively scan a range looking for hosts to check for 
vulnerabilities, we're hoping to solve the problem by passively finding IP addresses as soon as they talk on the 
network and then triggering the scan.  Comments on these assertions/ideas are very welcome.

thanks,

dave
--------
David W. Goodrum, CEH
http://www.nfr.com

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner: 

Hackers are concentrating their efforts on attacking applications on your 
website. Up to 75% of cyber attacks are launched on shopping carts, forms, 
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are 
futile against web application hacking. Check your website for vulnerabilities 
to SQL injection, Cross site scripting and other web attacks before hackers do! 
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------