{"id":709,"date":"2017-03-05T11:37:57","date_gmt":"2017-03-05T10:37:57","guid":{"rendered":"https:\/\/bretterhofer.at\/blog\/?page_id=709"},"modified":"2017-03-05T17:04:50","modified_gmt":"2017-03-05T16:04:50","slug":"tcpdump-and-ipv6","status":"publish","type":"page","link":"https:\/\/bretterhofer.at\/blog\/projects\/ipv6\/tcpdump-and-ipv6\/","title":{"rendered":"TCPDUMP and IPv6"},"content":{"rendered":"<p>tcpdump -i eth0 &#8220;icmp6 &amp;&amp; ip6[40] == 128&#8221;<\/p>\n<p>The most common <a href=\"http:\/\/en.wikipedia.org\/wiki\/Internet_Control_Message_Protocol_version_6\">ICMPv6 types<\/a> are:<\/p>\n<ul>\n<li><strong>unreachable<\/strong>: 1<\/li>\n<li><strong>too-big<\/strong>: 2<\/li>\n<li><strong>time-exceeded<\/strong>: 3<\/li>\n<li><strong>echo-request<\/strong>: 128<\/li>\n<li><strong>echo-reply<\/strong>: 129<\/li>\n<li><strong>router-solicitation<\/strong>: 133<\/li>\n<li><strong>router-advertisement<\/strong>: 134<\/li>\n<li><strong>neighbor-solicitation<\/strong>: 135<\/li>\n<li><strong>neighbor-advertisement<\/strong>: 136<\/li>\n<\/ul>\n<p>tcpdump -i eth0 &#8220;icmp6 &amp;&amp; ip6[40] == 128&#8221;<br \/>\ntcpdump -i eth0 -nr ipv6_traffic.pcap &#8220;ip6 and not tcp port 22&#8221;<\/p>\n<div id=\"ipv6-and-tcp\" class=\"section\">\n<h3><a class=\"toc-backref\" href=\"https:\/\/www.insecure.ws\/linux\/ipv6_notes.html#id3\">IPv6 and TCP<\/a><\/h3>\n<div class=\"code highlight-python\">\n<div class=\"highlight\">\n<pre>tcpdump -nr ipv6_traffic.pcap ip6 proto 6\r\ntcpdump -nr ipv6_traffic.pcap ip6 protochain 6\r\n<\/pre>\n<\/div>\n<\/div>\n<\/div>\n<div id=\"ipv6-and-udp\" class=\"section\">\n<h3><a class=\"toc-backref\" href=\"https:\/\/www.insecure.ws\/linux\/ipv6_notes.html#id4\">IPv6 and UDP<\/a><\/h3>\n<div class=\"code highlight-python\">\n<div class=\"highlight\">\n<pre>tcpdump -nr ipv6_traffic.pcap ip6 proto 17\r\ntcpdump -nr ipv6_traffic.pcap ip6 and udp<\/pre>\n<\/div>\n<\/div>\n<\/div>\n<p>ss<\/p>\n","protected":false},"excerpt":{"rendered":"<p>tcpdump -i eth0 &#8220;icmp6 &amp;&amp; ip6[40] == 128&#8221; The most common ICMPv6 types are: unreachable: 1 too-big: 2 time-exceeded: 3 echo-request: 128 echo-reply: 129 router-solicitation:<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":333,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bretterhofer.at\/blog\/wp-json\/wp\/v2\/pages\/709"}],"collection":[{"href":"https:\/\/bretterhofer.at\/blog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bretterhofer.at\/blog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bretterhofer.at\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bretterhofer.at\/blog\/wp-json\/wp\/v2\/comments?post=709"}],"version-history":[{"count":3,"href":"https:\/\/bretterhofer.at\/blog\/wp-json\/wp\/v2\/pages\/709\/revisions"}],"predecessor-version":[{"id":722,"href":"https:\/\/bretterhofer.at\/blog\/wp-json\/wp\/v2\/pages\/709\/revisions\/722"}],"up":[{"embeddable":true,"href":"https:\/\/bretterhofer.at\/blog\/wp-json\/wp\/v2\/pages\/333"}],"wp:attachment":[{"href":"https:\/\/bretterhofer.at\/blog\/wp-json\/wp\/v2\/media?parent=709"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}