IPv6 support in Bro

Zeek
1

Hello,

I would like to contribute to the IPv6 part of Bro development.

So I would like to know what is roadmap in this area and how I could help.

Cheers,

Julien

2

We don't have any roadmap but you can already compile in IPv6
support by configuring with --enable-brov6.

What specificially would you like to see?

Robin

3

I want to improve Bro IPv6 support, and I'm just wondering where to start (header fields, extensions, ICMPv6...).

Thanks

Julien

Robin Sommer a écrit :

4

As far as I know there's nobody currently working on something along
these lines. I guess the best approach for you might be to follow
the flow of a packet through Bro's core, starting with the
NetSessions::NextPacket() method in Sessions.cc, which is the main
entry point for packets.

Robin

5

OK thank you, I start working on it.

Julien

Robin Sommer a écrit :

6

I want to improve Bro IPv6 support

That would be terrific!

and I'm just wondering where to
start (header fields, extensions, ICMPv6...).

I think the highest priority is dealing with encapsulated headers
(e.g., options), as these are the most immediate shortcoming in
Bro's IPv6 analysis that come to mind.

    Vern