Behaviour of various operating systems during SLAAC, DAD, and ND

IPv6, Monitoring

This post contains the report from the study phase of the behaviour of various operating systems during SLAAC and DAD analysis for our paper called “A New Approach for Detection of Host Identity in IPv6 Networks”, which will be presented at DCNET 2013. This post also contains PCAP files that … Read More

Libor PolčákBehaviour of various operating systems during SLAAC, DAD, and ND

Optimizing network tracking tool for management of BUT campus network

Monitoring, Networking

This article describes optimization of the database structure in Zabbix monitoring tool using automatic partitioning. With this optimization we achieved a decrease of the processor utilization on the Zabbix server and a significant decrease in the growth of data on its hard drive. Last Updated: 27th of May, 2014. Introduction … Read More

Peter DrienkoOptimizing network tracking tool for management of BUT campus network

Rogue Router Advertisement Attack

,

, IPv6, Security

This article describes first hop security issue of IPv6 Neighbor Discovery Protocol. Vulnerability of this protocol is exploited to perform a Rogue Router Advertisement attack. Currently, there are few mitigation techniques available against this type of attack. Most of them, however are useful only in specific scenarios, or not widely used, mainly because insufficient support of vendors. This article presents probably the most applicable mitigation technique against the Rogue RA attack — RA Snooping. Specifically, its implementations by Cisco and HP (H3C).

Jozef PivarnikRogue Router Advertisement Attack