[ipv6hackers] Fwd: Some stats on IPv6 fragments and EH filtering on the Internet

[Dan York]

Tim.

I would be interested in promoting this student's work and the availability of any tools such as this. Please do let me know when they are ready to be shared and/or pass along my info to the student. 

Thanks,
Dan

--
Dan York
york at isoc.org
+1-802-735-1624
skype:danyork
http://twitter.com/danyork

> On Nov 4, 2013, at 4:29 PM, "Tim Chown" <tjc at ecs.soton.ac.uk> wrote:
> 
>> On 4 Nov 2013, at 23:57, Fernando Gont <fgont at si6networks.com> wrote:
>> 
>>> On 11/04/2013 03:49 PM, Eric Vyncke (evyncke) wrote:
>>> Interesting piece of data, it is even worse than what I guessed before
>> 
>> Yep. I had the same reaction: I didn't expect it to be that bad. :-(
> 
> Indeed, which is why I have another student verifying the previous result and developing the scapy-based test suite further.  At present scapy only supports four extension header types.  But in reality it’s enough to show the scale of the problem.  And Fernando’s results are basically verifying the scale of the problem.
> 
> One of the ideas the student is working on is to have a “looking glass” type capability so you can see what happens into your own networks remotely (with the usual anti-DoS looking glass measures of course :)   His code would all be openly available, including any enhancements to scapy.
> 
> If anyone is interested feel free to contact me off-list and I can put you in touch with the student.
> 
> Tim
> _______________________________________________
> Ipv6hackers mailing list
> Ipv6hackers at lists.si6networks.com
> http://lists.si6networks.com/listinfo/ipv6hackers