摘要
IPv6协议规范与传统的IPv4协议相比有很大的变化,这对基于IP的操作系统指纹识别产生了影响.鉴于IPv6协议规范的变化,比较分析了IPv4的操作系统指纹识别方法"IPID生成与分段""TTL或跳数限制""ICMP端口不可达消息"在IPv6中的适用性、以及IPv6特有的"IPv6扩展头""MTU发现""NDP协议"等指纹识别方法.最后,在局域网络环境中对"跳数限制初值""ICMP端口不可达消息"的方法进行了测试.结果表明,基于IP协议的操作系统指纹识别并没有发生根本性的改变.
The great changes from IPv4 to IPv6 will affect IP-based OS fingerprinting. By analyzing the specification changes from IPv4 to IPv6, the applicability of IPv4-based IPID, TTL, ICMP fingerprinting methods in IPv6 was discussed, the IPv6 specific fingerprinting methods--IPv6, MTU, NDP were analyzed. Some of these methods were tested in a network environment. The results show that IP-based OS fingerprinting methods don＇t fundamentally change.
出处
《湖北文理学院学报》
2013年第5期13-17,共5页
Journal of Hubei University of Arts and Science
基金
湖北省教育厅科研项目(B20122507)
