Hi Jinmei,
Nominally, XPING only returns the following information:
- Interface status (UP/DOWN/Does not exist)
- Protocols running on the interface (IPv4, IPv6)
Some additional information may be gleaned. We see this as a security issue and
present mitigations. Please see the Security Considerations section.
Ron
>
> Message: 3
> Date: Tue, 28 Mar 2017 11:39:53 -0700
> From: ???? <[email protected]>
> To: Internet Area <[email protected]>
> Subject: [Int-area] xping and IPv6 Node Information Queries
> Message-ID:
> <CAJE_bqf2=qxLVx-
> [email protected]>
> Content-Type: text/plain; charset=UTF-8
>
> The idea of xping reminded me of IPv6 Node Information Queries
> (RFC4620). In my understanding operators hated it because it was
> deemed to disclose too much information, and the feature is generally
> disabled by default if implemented. Maybe the xping draft refers to
> it and explains how these two are different (I've not read the entire
> text of xping yet - sorry).
>
> --
> JINMEI, Tatuya
>
>
>
_______________________________________________
Int-area mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/int-area
