Efficient IPv6 address scanning based on hostname correlation in IPv6-only network
Ce Sun, Liancheng Zhang, Ruijuan Wang, Yakai Fang, Hongtao Zhang, Haojie Zhu, Luyang Li

TL;DR
This paper introduces HFinder6, a new method for scanning IPv6 addresses in networks that only use IPv6, by using hostnames to find active devices more efficiently.
Contribution
HFinder6 is a novel IPv6 address scanning method for IPv6-only networks that uses hostname correlation and active triggering to improve scanning efficiency and completeness.
Findings
HFinder6 discovers 43 IPv6 addresses across 18 OS versions in an average of 10.29 seconds in IPv6-only networks.
HFinder6 outperforms existing tools by identifying 3.67 more IPv6 addresses per second and scanning 35 more addresses.
HFinder6 successfully identifies 14 additional OS versions compared to other tools, enhancing scanning completeness by up to 5.37 times.
Abstract
Existing on-link IPv6 address scanning technologies based on IPv6-only information, such as multicast Ping6 scanning, invalid extension header scanning, multicast listener discovery (MLD) scanning, and stateless address auto-configuration scanning, rely on protocol features such as ICMPv6, MLD, and other protocol features to induce responses. However, these scanning packets are easily intercepted by the default security mechanisms of modern OSs (Operating Systems), leading to issues such as low OS coverage and incomplete IPv6 address scan results of alive nodes. On-link IPv6 address scanning technologies based on dual-stack correlation information (e.g., FScan6, LLMNR6, and LinkScan6) utilize local domain names, hostnames, and other dual-stack correlation information to enhance IPv6 address discovery capabilities. However, these technologies overly rely on IPv4 networks, resulting in…
Genes, proteins, chemicals, diseases, species, mutations and cell lines named across the full text — each resolved to its canonical identifier and authoritative record.
Click any figure to enlarge with its caption.
Figure 10
Figure 11
Figure 12
Figure 1
Figure 2
Figure 3
Figure 4
Figure 5
Figure 6
Figure 7
Figure 8
Figure 9
Figure 13
Figure 14
Figure 15Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsIPv6, Mobility, Handover, Networks, Security · Network Traffic and Congestion Control · Software-Defined Networks and 5G
