Howdy,

I'm embarrassed that I have to ask for help as I've been using shorewall for 10+ years, but I've wasted a lot of time trying to add IPV6 capability to my small home network (mainly for fun). My home net is similar to this: http://shorewall.org/XenMyWay.html only I'm using KVM.

ISP is ATT with adsl2 and the nvg510 modem. It normally only supports handing out IPV6 addresses via 6rd. The network that is handed out is a /60 but by default the modem only adds a single /64 route. Since one can get root access on the modem, I've added additional /64 routes. So one network goes to my wan interface, and the other to my lan interface.

From the shorewall box, I can use ping6 just fine and I can wget ipv6 only web sites as well. I can also ping devices on the lan and the interface on the modem. But from my lan I can only get as far as ping the eth0 and eth1 interfaces on the shorewall box. Using tcpdump, I can see packets going out from eth0 -> eth1 but then there is some weird link local address solicitation going on between the modem and eth1. See the attached notes.txt where I show all interfaces and shorewall traces of a laptop on lan trying to ping cnn.com. You can see the packets going out, but on return, the modem doesn't know where to send them. And then also attached the configs.

Probably an idiot mistake, but I'm looking forward to seeing what I did wrong :)

Regards,
Samuel Smith

Attachment: config.tar
Description: Unix tar archive

modem br interface: 2602:314:b51b:6080:5bf:b1ff:fe72:8920
shorewall wan eth1: 2602:314:b51b:6080:208:a1ff:fe05:bf34
shorewall lan eth0: 2602:314:b51b:6088:208:a1ff:fe05:bf33



# modem:
# ip -6 route
2602:314:b51b:6080::1 via :: dev sit1  proto kernel  metric 256  mtu 1472 
advmss 1412 hoplimit 4294967295
2602:314:b51b:6080::/64 dev br1  metric 1024  mtu 1472 advmss 1412 hoplimit 
4294967295
2602:314:b51b:6088::/64 dev br1  metric 1024  mtu 1472 advmss 1412 hoplimit 
4294967295
2602:300::/28 dev sit1  metric 1024  mtu 1472 advmss 1412 hoplimit 4294967295
fe80::/64 dev ptm0  proto kernel  metric 256  mtu 1500 advmss 1440 hoplimit 
4294967295
fe80::/64 dev ptm0.0  proto kernel  metric 256  mtu 1500 advmss 1440 hoplimit 
4294967295
fe80::/64 dev eth0.16  proto kernel  metric 256  mtu 1500 advmss 1440 hoplimit 
4294967295
fe80::/64 dev eth1.16  proto kernel  metric 256  mtu 1500 advmss 1440 hoplimit 
4294967295
fe80::/64 dev eth2.16  proto kernel  metric 256  mtu 1500 advmss 1440 hoplimit 
4294967295
fe80::/64 dev eth3.16  proto kernel  metric 256  mtu 1500 advmss 1440 hoplimit 
4294967295
fe80::/64 dev br2  proto kernel  metric 256  mtu 1500 advmss 1440 hoplimit 
4294967295
fe80::/64 dev eth0  proto kernel  metric 256  mtu 1500 advmss 1440 hoplimit 
4294967295
fe80::/64 dev br1  proto kernel  metric 256  mtu 1500 advmss 1440 hoplimit 
4294967295
fe80::/64 via :: dev sit1  proto kernel  metric 256  mtu 1472 advmss 1412 
hoplimit 4294967295
ff00::/8 dev ptm0  metric 256  mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev ptm0.0  metric 256  mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev eth0.16  metric 256  mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev eth1.16  metric 256  mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev eth2.16  metric 256  mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev eth3.16  metric 256  mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev br2  metric 256  mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev eth0  metric 256  mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev br1  metric 256  mtu 1500 advmss 1440 hoplimit 4294967295
ff00::/8 dev sit1  metric 256  mtu 1472 advmss 1412 hoplimit 4294967295
default dev sit1  metric 1024  mtu 1472 advmss 1412 hoplimit 4294967295
# 


#shorewall box:
ShoreWall:/etc/shorewall6# ip -6 route
2602:314:b51b:6080::/64 dev eth1  proto kernel  metric 256  expires 86397sec
2602:314:b51b:6088::/64 dev eth0  proto kernel  metric 256  expires 44774sec
fe80::/64 dev eth1  proto kernel  metric 256  mtu 1472
fe80::/64 dev eth0  proto kernel  metric 256 
fe80::/64 dev eth2  proto kernel  metric 256 
fe80::/64 dev ifb0  proto kernel  metric 256 
default via fe80::7ebf:b1ff:fe72:8920 dev eth1  proto ra  metric 1024  expires 
3997sec hoplimit 64
ShoreWall:/etc/shorewall6# 

#neighbors 
ShoreWall:/etc/shorewall6# ip -6 neigh
fe80::fc08:a1ff:fe05:bf35 dev eth2 lladdr fe:08:a1:05:bf:35 STALE
fe80::fc08:a1ff:fe05:bf34 dev eth1 lladdr fe:08:a1:05:bf:34 STALE
fe80::7ebf:b1ff:fe72:8920 dev eth1 lladdr 7c:bf:b1:72:89:20 router STALE
2602:314:b51b:6088:2677:3ff:fe26:3a98 dev eth0 lladdr 24:77:03:26:3a:98 STALE
fe80::54e2:cdff:fe7f:3b97 dev eth2 lladdr fe:08:a1:05:bf:2a STALE
fe80::2677:3ff:fe26:3a98 dev eth0 lladdr 24:77:03:26:3a:98 STALE

ShoreWall:/etc/shorewall6# ifconfig 
eth0      Link encap:Ethernet  HWaddr 00:08:a1:05:bf:33  
          inet addr:10.36.36.1  Bcast:10.36.36.255  Mask:255.255.255.0
          inet6 addr: 2602:314:b51b:6088:208:a1ff:fe05:bf33/64 Scope:Global
          inet6 addr: fe80::208:a1ff:fe05:bf33/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:149726169 errors:0 dropped:0 overruns:0 frame:0
          TX packets:303864319 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:17512303393 (16.3 GiB)  TX bytes:457849471001 (426.4 GiB)

eth1      Link encap:Ethernet  HWaddr 00:08:a1:05:bf:34  
          inet addr:75.1.182.8  Bcast:75.1.255.255  Mask:255.255.0.0
          inet6 addr: 2602:314:b51b:6080:208:a1ff:fe05:bf34/64 Scope:Global
          inet6 addr: fe80::208:a1ff:fe05:bf34/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:405698130 errors:0 dropped:0 overruns:0 frame:0
          TX packets:274052086 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:463662856951 (431.8 GiB)  TX bytes:87407901557 (81.4 GiB)


#laptop on lan:
wlan0     Link encap:Ethernet  HWaddr 24:77:03:26:3a:98  
          inet addr:10.36.36.200  Bcast:10.36.36.255  Mask:255.255.255.0
          inet6 addr: 2602:314:b51b:6088:2677:3ff:fe26:3a98/64 Scope:Global
          inet6 addr: fe80::2677:3ff:fe26:3a98/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:38378605 errors:0 dropped:0 overruns:0 frame:0
          TX packets:18978592 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:42644878579 (39.7 GiB)  TX bytes:5360740594 (4.9 GiB)


#can't ping or reach ipv6 only web
root@t61:~# ping6 cnn.com
PING cnn.com(2a04:4e42:200::323) 56 data bytes
^C
--- cnn.com ping statistics ---
62 packets transmitted, 0 received, 100% packet loss, time 60999ms

root@t61:~# 



#packets going out on shorewall box from eth0 -> eth1, but return packets don't 
get forwarded past eth1:
Jun 28 14:25:59 shorewall kernel: [4147614.354913] TRACE: 
raw:PREROUTING:policy:2 IN=eth0 OUT= 
MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=64 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=20
Jun 28 14:25:59 shorewall kernel: [4147614.354939] TRACE: 
mangle:PREROUTING:policy:1 IN=eth0 OUT= 
MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=64 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=20
Jun 28 14:25:59 shorewall kernel: [4147614.354956] TRACE: mangle:FORWARD:rule:1 
IN=eth0 OUT=eth1 MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=20
Jun 28 14:25:59 shorewall kernel: [4147614.354967] TRACE: 
mangle:FORWARD:policy:2 IN=eth0 OUT=eth1 
MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=20
Jun 28 14:25:59 shorewall kernel: [4147614.354978] TRACE: filter:FORWARD:rule:2 
IN=eth0 OUT=eth1 MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=20
Jun 28 14:25:59 shorewall kernel: [4147614.355001] TRACE: 
filter:loc_frwd:rule:2 IN=eth0 OUT=eth1 
MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=20
Jun 28 14:25:59 shorewall kernel: [4147614.355015] TRACE: 
filter:dynamic:return:1 IN=eth0 OUT=eth1 
MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=20
Jun 28 14:25:59 shorewall kernel: [4147614.355030] TRACE: 
filter:loc_frwd:rule:4 IN=eth0 OUT=eth1 
MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=20
Jun 28 14:25:59 shorewall kernel: [4147614.355039] TRACE: 
mangle:POSTROUTING:policy:1 IN= OUT=eth1 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=20
Jun 28 14:25:59 shorewall kernel: [4147614.390706] TRACE: 
raw:PREROUTING:policy:2 IN=eth1 OUT= 
MAC=33:33:ff:26:3a:98:7c:bf:b1:72:89:20:86:dd 
SRC=fe80:0000:0000:0000:7ebf:b1ff:fe72:8920 
DST=ff02:0000:0000:0000:0000:0001:ff26:3a98 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 
PROTO=ICMPv6 TYPE=135 CODE=0
Jun 28 14:25:59 shorewall kernel: [4147614.390727] TRACE: 
mangle:PREROUTING:policy:1 IN=eth1 OUT= 
MAC=33:33:ff:26:3a:98:7c:bf:b1:72:89:20:86:dd 
SRC=fe80:0000:0000:0000:7ebf:b1ff:fe72:8920 
DST=ff02:0000:0000:0000:0000:0001:ff26:3a98 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 
PROTO=ICMPv6 TYPE=135 CODE=0
Jun 28 14:26:00 shorewall kernel: [4147614.854231] TRACE: 
raw:PREROUTING:policy:2 IN=eth1 OUT= 
MAC=33:33:00:00:00:01:7c:bf:b1:72:89:20:86:dd 
SRC=fe80:0000:0000:0000:7ebf:b1ff:fe72:8920 
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=104 TC=0 HOPLIMIT=255 FLOWLBL=0 
PROTO=ICMPv6 TYPE=134 CODE=0
Jun 28 14:26:00 shorewall kernel: [4147614.854254] TRACE: 
mangle:PREROUTING:policy:1 IN=eth1 OUT= 
MAC=33:33:00:00:00:01:7c:bf:b1:72:89:20:86:dd 
SRC=fe80:0000:0000:0000:7ebf:b1ff:fe72:8920 
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=104 TC=0 HOPLIMIT=255 FLOWLBL=0 
PROTO=ICMPv6 TYPE=134 CODE=0
Jun 28 14:26:00 shorewall kernel: [4147614.854271] TRACE: mangle:INPUT:policy:1 
IN=eth1 OUT= MAC=33:33:00:00:00:01:7c:bf:b1:72:89:20:86:dd 
SRC=fe80:0000:0000:0000:7ebf:b1ff:fe72:8920 
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=104 TC=0 HOPLIMIT=255 FLOWLBL=0 
PROTO=ICMPv6 TYPE=134 CODE=0
Jun 28 14:26:00 shorewall kernel: [4147614.854282] TRACE: filter:INPUT:rule:1 
IN=eth1 OUT= MAC=33:33:00:00:00:01:7c:bf:b1:72:89:20:86:dd 
SRC=fe80:0000:0000:0000:7ebf:b1ff:fe72:8920 
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=104 TC=0 HOPLIMIT=255 FLOWLBL=0 
PROTO=ICMPv6 TYPE=134 CODE=0
Jun 28 14:26:00 shorewall kernel: [4147614.854308] TRACE: filter:net-fw:rule:1 
IN=eth1 OUT= MAC=33:33:00:00:00:01:7c:bf:b1:72:89:20:86:dd 
SRC=fe80:0000:0000:0000:7ebf:b1ff:fe72:8920 
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=104 TC=0 HOPLIMIT=255 FLOWLBL=0 
PROTO=ICMPv6 TYPE=134 CODE=0
Jun 28 14:26:00 shorewall kernel: [4147614.854323] TRACE: 
filter:dynamic:return:1 IN=eth1 OUT= 
MAC=33:33:00:00:00:01:7c:bf:b1:72:89:20:86:dd 
SRC=fe80:0000:0000:0000:7ebf:b1ff:fe72:8920 
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=104 TC=0 HOPLIMIT=255 FLOWLBL=0 
PROTO=ICMPv6 TYPE=134 CODE=0
Jun 28 14:26:00 shorewall kernel: [4147614.854340] TRACE: filter:net-fw:rule:4 
IN=eth1 OUT= MAC=33:33:00:00:00:01:7c:bf:b1:72:89:20:86:dd 
SRC=fe80:0000:0000:0000:7ebf:b1ff:fe72:8920 
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=104 TC=0 HOPLIMIT=255 FLOWLBL=0 
PROTO=ICMPv6 TYPE=134 CODE=0
Jun 28 14:26:00 shorewall kernel: [4147615.354797] TRACE: 
raw:PREROUTING:policy:2 IN=eth0 OUT= 
MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=64 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=21
Jun 28 14:26:00 shorewall kernel: [4147615.354825] TRACE: 
mangle:PREROUTING:policy:1 IN=eth0 OUT= 
MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=64 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=21
Jun 28 14:26:00 shorewall kernel: [4147615.354845] TRACE: mangle:FORWARD:rule:1 
IN=eth0 OUT=eth1 MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=21
Jun 28 14:26:00 shorewall kernel: [4147615.354856] TRACE: 
mangle:FORWARD:policy:2 IN=eth0 OUT=eth1 
MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=21
Jun 28 14:26:00 shorewall kernel: [4147615.354868] TRACE: filter:FORWARD:rule:2 
IN=eth0 OUT=eth1 MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=21
Jun 28 14:26:00 shorewall kernel: [4147615.354893] TRACE: 
filter:loc_frwd:rule:2 IN=eth0 OUT=eth1 
MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=21
Jun 28 14:26:00 shorewall kernel: [4147615.354908] TRACE: 
filter:dynamic:return:1 IN=eth0 OUT=eth1 
MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=21
Jun 28 14:26:00 shorewall kernel: [4147615.354924] TRACE: 
filter:loc_frwd:rule:4 IN=eth0 OUT=eth1 
MAC=00:08:a1:05:bf:33:24:77:03:26:3a:98:86:dd 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=21
Jun 28 14:26:00 shorewall kernel: [4147615.354933] TRACE: 
mangle:POSTROUTING:policy:1 IN= OUT=eth1 
SRC=2602:0314:b51b:6088:2677:03ff:fe26:3a98 
DST=2a04:4e42:0200:0000:0000:0000:0000:0323 LEN=104 TC=0 HOPLIMIT=63 FLOWLBL=0 
PROTO=ICMPv6 TYPE=128 CODE=0 ID=11311 SEQ=21
Jun 28 14:26:00 shorewall kernel: [4147615.390740] TRACE: 
raw:PREROUTING:policy:2 IN=eth1 OUT= 
MAC=33:33:ff:26:3a:98:7c:bf:b1:72:89:20:86:dd 
SRC=fe80:0000:0000:0000:7ebf:b1ff:fe72:8920 
DST=ff02:0000:0000:0000:0000:0001:ff26:3a98 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 
PROTO=ICMPv6 TYPE=135 CODE=0
Jun 28 14:26:00 shorewall kernel: [4147615.390763] TRACE: 
mangle:PREROUTING:policy:1 IN=eth1 OUT= 
MAC=33:33:ff:26:3a:98:7c:bf:b1:72:89:20:86:dd 
SRC=fe80:0000:0000:0000:7ebf:b1ff:fe72:8920 
DST=ff02:0000:0000:0000:0000:0001:ff26:3a98 LEN=72 TC=0 HOPLIMIT=255 FLOWLBL=0 
PROTO=ICMPv6 TYPE=135 CODE=0


#tcpdump shows modem not forwarding correctly or not getting back current link 
local address  (trying to do neighbor solicitation):
ShoreWall:/etc/shorewall# tcpdump -i eth1 -n -XX -vvv -s0 -S -e  ip6
tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 262144 
bytes
14:26:06.734117 00:08:a1:05:bf:34 > 7c:bf:b1:72:89:20, ethertype IPv6 (0x86dd), 
length 118: (hlim 63, next-header ICMPv6 (58) payload length: 64) 
2602:314:b51b:6088:2677:3ff:fe26:3a98 > 2a04:4e42:200::323: [icmp6 sum ok] 
ICMP6, echo requ
est, seq 27
--snip--
14:26:06.762187 7c:bf:b1:72:89:20 > 33:33:ff:26:3a:98, ethertype IPv6 (0x86dd), 
length 86: (hlim 255, next-header ICMPv6 (58) payload length: 32) 
fe80::7ebf:b1ff:fe72:8920 > ff02::1:ff26:3a98: [icmp6 sum ok] ICMP6, neighbor 
solicitation,
 length 32, who has 2602:314:b51b:6088:2677:3ff:fe26:3a98
          source link-address option (1), length 8 (1): 7c:bf:b1:72:89:20
--snip--
14:26:07.729057 00:08:a1:05:bf:34 > 7c:bf:b1:72:89:20, ethertype IPv6 (0x86dd), 
length 118: (hlim 63, next-header ICMPv6 (58) payload length: 64) 
2602:314:b51b:6088:2677:3ff:fe26:3a98 > 2a04:4e42:200::323: [icmp6 sum ok] 
ICMP6, echo requ
est, seq 28
--snip--

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to