On 05/29/2013 04:03 AM, Dave Thaler wrote: >>>> [...] I could rely on the >>>> ICMPv6 "address resolution failed" error messages sent by your local >>>> router (i.e., if I receive one of such messages, you're not there. If I >>>> don't, >> you are). >>> >>> Ok, yes that one is interesting. >> >> An attacker just needs one vector to be successful. > > Agree. Putting the above example vector into the draft would help the reader > understand the motivation for the problem.
Isn't it enough simply noting that the target node can be probed? Getting into the specific details of the probe packet (stimulus/response) seems like "over-specifying" things to me... Cheers, -- Fernando Gont SI6 Networks e-mail: fg...@si6networks.com PGP Fingerprint: 6666 31C6 D484 63B2 8FB1 E3C4 AE25 0D55 1D4E 7492 -------------------------------------------------------------------- IETF IPv6 working group mailing list ipv6@ietf.org Administrative Requests: https://www.ietf.org/mailman/listinfo/ipv6 --------------------------------------------------------------------
