Probe: ipv6_neighbor#
Monitors the mapping of static and dynamic IPv6 addresses to mac addresses. Triggers if a new dynamic mapping appears or a conflict is observed.
Inspected Packets#
This probe looks for packets with the following characteristics:
- EtherType: IPv6
- IPv6 next header: ICMPv6
- ICMPv6 type:
- neighbor advertisement
- neighbor solicitation
Configuration#
probes:
ipv6_neighbor:
# enable this probe
enable: true
# learn dynamic resolutions
dynamic_enable: true
# list of static resolutions
static_resolutions:
- ip: 2a02::1
mac: 00:00:5e:00:53:01
- ip: 2a02::2
mac: 00:00:5e:00:53:2a
See also: schema description
Events#
| Name | Description |
|---|---|
IPV6_NEIGHBOR_NEW_DYNAMIC | dynamic_enable is true and a resolution is learned |
IPV6_NEIGHBOR_SPOOFED_DYNAMIC | an observed resolution conflicts with a dynamic learned one |
IPV6_NEIGHBOR_SPOOFED_STATIC | an observed resolution conflicts with a static configured one |
IPV6_NEIGHBOR_UNKNOWN | dynamic_enable is false and a resolution is unknown |