Merge from /nmap-exp/david/nmap-ipv6.

This is raw IPv6 packet support for most port and ping scans, Neighbor
Discovery, and traceroute.
This commit is contained in:
david 2011-06-08 01:24:48 +00:00
parent b08c07339a
commit 4aa4a154f9
39 changed files with 3448 additions and 1752 deletions

View file

@ -558,9 +558,7 @@ you would expect.</para>
underlying TCP stack must have received a SYN/ACK or RST and
the host is marked available. If the connection attempt
is left hanging until a timeout is reached, the host is
marked as down. This workaround is also used for IPv6
connections, as raw IPv6 packet building support is not yet
available in Nmap.<indexterm><primary>IPv6</primary><secondary>limitations of</secondary></indexterm>
marked as down.
</para>
</listitem>
@ -725,9 +723,6 @@ you would expect.</para>
packets.<indexterm><primary>raw packets</primary></indexterm>
Using SCTP INIT Pings is currently not possible for unprivileged
users.<indexterm><primary>unprivileged users</primary><secondary>limitations of</secondary></indexterm>
The same limitation applies to IPv6, which is currently not
supported for
SCTP INIT Ping.<indexterm><primary>IPv6</primary><secondary>limitations of</secondary></indexterm>
</para>
</listitem>
@ -1125,7 +1120,7 @@ name, usually the first. The one exception to this is the deprecated
FTP bounce scan (<option>-b</option>). By default, Nmap performs a
SYN Scan, though it substitutes a connect scan if the user does not
have proper privileges to send raw packets (requires root access on
Unix) or if IPv6 targets were specified. Of the scans listed in this
Unix). Of the scans listed in this
section, unprivileged users can only execute connect and FTP bounce
scans.</para>
@ -1170,7 +1165,7 @@ error (type 3, code 1, 2, 3, 9, 10, or 13) is received. The port is also consid
<listitem>
<para>TCP connect scan is the default TCP scan type when SYN scan is
not an option. This is the case when a user does not have raw packet
privileges or is scanning IPv6 networks. Instead of writing raw
privileges. Instead of writing raw
packets as most other scan types do, Nmap asks the underlying
operating system to establish a connection with the target machine and
port by issuing the <function>connect</function> system call. This is
@ -3990,7 +3985,7 @@ hosts with at least one
<para>Since 2002, Nmap has offered IPv6 support for its most
popular features. In particular, ping scanning (TCP-only),
connect scanning, version detection, and the Nmap Scripting
port scanning, version detection, and the Nmap Scripting
Engine all support IPv6. The command syntax is the same as
usual except that you also add the <option>-6</option>
option. Of course, you must use IPv6 syntax if you specify