[unisog] Anybody seen this before

[Peter Van Epp]

On Wed, Sep 24, 2008 at 12:30:54PM -0400, Valdis.Kletnieks at vt.edu wrote:
> On Tue, 23 Sep 2008 16:37:22 PDT, Peter Van Epp said:
> > 	Anyone know if this is the latest attempt to beat the packeteer (which
> > is my current guess)? DSCC tossed up what it said was an IPV6 ping scan which
> > suprised us, as we aren't routing V6 however looking at the packet it appears
> > to be a V4 packet with a V6 header and udp packet inside it. My first guess
> > (since most of them are coming from wireless) is an attempt to evade the 
> > packeteer (which I think won't work because I expect it will hit default which
> > is shaped although I haven't verified that yet):
> 
> My guess with a 2002: address is that you have a wireless laptop that has
> IPv6 enabled, and somebody is squawking an announcement for a 6-to-4 gateway
> and the laptop is attempting to use that because you're not routing native IPv6.
> 
> It's not an attempt to beat the packeteer, it's an attempt to beat your lack
> of IPv6 support :)

	We (the local Gigapop) have not been able to find a local transit
provider that supports commodity V6, we asked on our last transit renewal. We 
have V6 on the REN side (although we SFU aren't at present routing it) via 
Canarie but that doesn't peer with commercial most of the time (it was for a 
while leaking in from the Korea REN, I2 intentionally blocks commodity V6
to external peers such as Canarie).
	Now we are going to need to train DSCC to ignore what look like local
port scans to V6 addresses without (hopefully anyway) ignoring anything V6 :-).
>From the argus logs we have been seeing this incoming for some time (in the 
months anyway) but are only in the last couple of weeks seeing more that 
sporadic answering from internal and there has always been some Vista around 
so I'm somewhat suprised (and alway suspicious of the p2p crowd :-)). Thanks
to both of you for the info!

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada