[ipv6calc] sneak-preview: IID privacy detection & filter capabilties implemented

Peter Bieringer pb at bieringer.de
Sun Apr 1 21:32:36 CEST 2012


I've extended ipv6calc with filter capabilities for the pipe mode, e.g.
you can filter from a big list of IP(v4|v6) addresses the one you want
depending on type, e.g.

./ipv6calc -q -m -i 2001:db8:0:1:2c73:ffff:1234:5678 | grep TYPE

$ echo "2001:db8:0:1:2c73:ffff:1234:5678" | ./ipv6calc -A filter -E

and as you see, this address was also detected as being a generated
privacy one (which is in this case a not so good example...one of the
minor false-positives).

Filter also supports negation by leading "^" and also more of one filter
is configurable like:
cat <file> | ./ipv6calc -F -A filter -E ^iid-privacy,^iid-eui48

Online help and documentation lacks still a little behind :-(

The iid-privacy detector catches over 99.9% of 1 million generated ones.

So one can now test whether his system uses a generated IID based on
privacy extension by browsing to:


if IPV6_TYPE contains iid-privacy, the detector means the IID is such a one.

Happy testing.

If you will contribute on improvement of the IID privacy extension
detection, see undocumented script:
This can create a bunch of privacy extension based addresses and
detection code in lib/libipv6addr.c (ipv6addr_privacyextensiondetection)
Currently I've implemented some simple statistical analysis only...

I plan to release 0.94.0 in the next weeks.


More information about the ipv6calc mailing list