Why do you need IPv6 Neighbor Solicitation to get the MAC address?

Every node automatically generates a link-local address, but: That address might not be generated with the EUI-64 format specified in RFC 2464. IPv6 addresses may also be cryptographically generated addresses (RFC 3972), temporary privacy addresses (RFC 4941), or in modern operating systems, stable privacy addresses (RFC 7217). An address that looks like it has an …

Read more

what does “dead beef” mean?

http://en.wikipedia.org/wiki/Hexspeak http://www.urbandictionary.com/define.php?term=dead%3Abeef “Dead beef” is a very popular sentence in programming, because it is built only from letters a-f, which are used in hexadecimal notation. Colons in the beginning and in the middle of the sentence make this sentence a (theoretically) valid IPv6 address.

Banning IPv6 addresses

Banning per /128 does not scale when a subnet of /64 size is used for an attack. You will end up with 2^64 entries in the table, potentially causing a denial of service. End-users will always receive a /56 per global address assignment policy. Businesses will always receive a /48 per global address See: https://www.rfc-editor.org/rfc/rfc6177 …

Read more