Mac OS X 10.7, still no DHCPv6
Dobbins, Roland
rdobbins at arbor.net
Mon Feb 28 04:35:37 UTC 2011
On Feb 28, 2011, at 10:47 AM, Steven Bellovin wrote:
> You really need to look at switch logs for that, even with IPv4: http://www.cs.columbia.edu/~smb/talks/arp-attack.pdf
And flow telemetry, and so forth, yes. With BCP deployment in terms of anti-ARP-spoofing and DCHP snooping/source guard, traceback becomes whole lot easier.
> Also don't forget privacy-enhanced addresses.
Yes, which have extremely negative opsec connotations in terms of complicating traceback.
-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>
The basis of optimism is sheer terror.
-- Oscar Wilde
More information about the NANOG
mailing list