Hello Jordi, Malick Jordi, thanks for forwarding this message. Hope my response goes thru since I'm also subscribe to afripv6.
Malick, As Jordi said we are working in a very similar study (actually probably identical), in this moment I'm happy to tell you we have everything up & running. The take away of Jordi's message and our message in general is that you need to take a different approach, you can not just scan the full IPv6 address space; you mentioned nmap however AFAIK nmap does not allow IPv6 host scanning. As an additional comment many years ago, just for fun (I was leaning multi threading) I wrote a very short python3 script for host scanning IPv6 networks [1]: https://blog.acostasite.com/2014/12/python-script-probably-useless-but.html The key part for your project is to identify the recursive resolvers, you have many ways of doing this, example: you could use the logs of a DNS authoritative server for a zone. Here you will find more information (in English): https://prensa.lacnic.net/news/en/research/new-lacnic-research-initiative-identifies-open-dns-servers-in-the-region https://prensa.lacnic.net/news/en/ipv6-en/lacnic-launches-new-service-for-detecting-open-dns-servers-with-ipv6-in-the-region Our public tester: https://warp.lacnic.net/dns-open-resolvers-con-ipv6 We are publishing some results (worldwide, not only LACNIC region): https://stats.labs.lacnic.net/IPv6/DNSOpenResolver/ Hope the above helps. Alejandro, [1] https://github.com/alejandroacostaalamo/Python3-ipv6hostscanner On 11/3/19 9:33 AM, JORDI PALET MARTINEZ wrote: > > I can point to the authors of a similar study in LACNIC (in copy). > > > > https://labs.lacnic.net/Identificando-servidores-DNS-IPv6-Open-Resolvers/ > > > > The article mentions as well a similar study in RIPE. Sorry is Spanish! > > > > I think the point is to go from the “reverse root server” administered > by Afrinic, so you don’t need to do a complete scanning, which will be > near to impossible … > > > > This was also presented in the LACNIC31: > https://www.lacnic.net/3636/50/evento/agenda-lacnic-31#thursday-ftl > > > > Look for the slides and video: > > > > *Identifying Open Resolvers in IPv6* > Alejandro Acosta, Darío Gómez > > > > I’m sure they will be able to help! > > > > Regards, > > Jordi > > @jordipalet > > > > > > > > El 3/11/19 16:21, "Malick K. ALASSANE" <alkomal...@gmail.com > <mailto:alkomal...@gmail.com>> escribió: > > > > My objective for this study is to detect open DNS resolvers in the > AFRINIC IP space. > > > > Le dim. 3 nov. 2019, à 16 h 05, JORDI PALET MARTINEZ via > AfrIPv6-Discuss <afripv6-discuss@afrinic.net > <mailto:afripv6-discuss@afrinic.net>> a écrit : > > Hi Malick, > > > > That’s somehow, one of the “advantages” of IPv6, that make it much > more difficult. > > > > If the operators and end-users are doing a good work, they will > not be assigning neither contiguous prefixes, neither contiguous > prefixes/LANs, neither contiguous hosts! > > > > May be if you explain a bit more what you’re trying to achieve, we > can give some ideas. > > > > Regards, > > Jordi > > @jordipalet > > > > > > > > El 3/11/19 15:57, "Malick K. ALASSANE" <alkomal...@gmail.com > <mailto:alkomal...@gmail.com>> escribió: > > > > Good morning, everyone! > I'm doing a study on afrinic's IP address blocks. I didn't have > any constraints with ipv4 address blocks. The use of the zmap tool > allowed me to do a quick scan on all available IPV4 addresses. > Unfortunately, i don't know how to scan IPV6 blocks without taking > a long time. Nmap, can help me, but it could take several years to > finish. Zmap or Masscan don't support ipv6. > > I would like to know if anyone has a solution to quickly scan ipv6 > address blocks to identify ipv6 servers that offer a service. > > > > Thanks for your help! > > _______________________________________________ AfrIPv6-Discuss > mailing list AfrIPv6-Discuss@afrinic.net > <mailto:AfrIPv6-Discuss@afrinic.net> > https://lists.afrinic.net/mailman/listinfo/afripv6-discuss > > > ********************************************** > IPv4 is over > Are you ready for the new Internet ? > http://www.theipv6company.com > The IPv6 Company > > This electronic message contains information which may be > privileged or confidential. The information is intended to be for > the exclusive use of the individual(s) named above and further > non-explicilty authorized disclosure, copying, distribution or use > of the contents of this information, even if partially, including > attached files, is strictly prohibited and will be considered a > criminal offense. If you are not the intended recipient be aware > that any disclosure, copying, distribution or use of the contents > of this information, even if partially, including attached files, > is strictly prohibited, will be considered a criminal offense, so > you must reply to the original sender to inform about this > communication and delete it. > > _______________________________________________ > AfrIPv6-Discuss mailing list > AfrIPv6-Discuss@afrinic.net <mailto:AfrIPv6-Discuss@afrinic.net> > https://lists.afrinic.net/mailman/listinfo/afripv6-discuss > > _______________________________________________ AfrIPv6-Discuss > mailing list AfrIPv6-Discuss@afrinic.net > https://lists.afrinic.net/mailman/listinfo/afripv6-discuss > > > ********************************************** > IPv4 is over > Are you ready for the new Internet ? > http://www.theipv6company.com > The IPv6 Company > > This electronic message contains information which may be privileged > or confidential. The information is intended to be for the exclusive > use of the individual(s) named above and further non-explicilty > authorized disclosure, copying, distribution or use of the contents of > this information, even if partially, including attached files, is > strictly prohibited and will be considered a criminal offense. If you > are not the intended recipient be aware that any disclosure, copying, > distribution or use of the contents of this information, even if > partially, including attached files, is strictly prohibited, will be > considered a criminal offense, so you must reply to the original > sender to inform about this communication and delete it. >
pEpkey.asc
Description: application/pgp-keys
_______________________________________________ AfrIPv6-Discuss mailing list AfrIPv6-Discuss@afrinic.net https://lists.afrinic.net/mailman/listinfo/afripv6-discuss