Re: IPV six

Jonathan Lee via Snort-users <[email protected]> Wed, 15 Oct 2025 20:37:31 -0700
Newsgroups gmane.comp.security.ids.snort.general
Message-ID <[email protected]>
--===============6295306689581898192==
Content-Type: multipart/alternative; boundary=Apple-Mail-FA49203E-BD7D-4FA7-8C83-83A85427FF23
Content-Transfer-Encoding: 7bit


--Apple-Mail-FA49203E-BD7D-4FA7-8C83-83A85427FF23
Content-Type: text/plain;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

It=E2=80=99s with hurricane electric tunnel broker and it does detect ipv6  A=
ppID items all the time and once and a while some sql items for ipv6 for pos=
sible invasive actors but nothing on the scale of ipv4
Sent from my iPhone

> On Oct 15, 2025, at 19:18, Thanh. Nguyen Van <[email protected]> wrote=
:
>=20
> =EF=BB=BF Thanks for your support. How do you cacula traffic ipv4 and ipv6=
 on one interface ?
> rgds.
> =C4=90=C6=B0=E1=BB=A3c g=E1=BB=ADi t=E1=BB=AB iPhone c=E1=BB=A7a t=C3=B4i
>=20
>> V=C3=A0o ng=C3=A0y 16 thg 10, 2025, l=C3=BAc 01:38, Anna Norokh -X (anoro=
kh - SOFTSERVE INC at Cisco) via Snort-users <[email protected]> =C4=
=91=C3=A3 vi=E1=BA=BFt:
>>=20
>> Both the IPv4 and IPv6 traffic that you are seeing would be helpful. This=
 will help understand the possible issue and suggest detection profiles that=
 could be configured.

--Apple-Mail-FA49203E-BD7D-4FA7-8C83-83A85427FF23
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html class=3D"apple-mail-supports-explicit-dark-mode"><head><meta http-equi=
v=3D"content-type" content=3D"text/html; charset=3Dutf-8"></head><body dir=3D=
"auto">It=E2=80=99s with hurricane electric tunnel broker and it does detect=
 ipv6 &nbsp;AppID items all the time and once and a while some sql items for=
 ipv6 for possible invasive actors but nothing on the scale of ipv4<div><div=
 dir=3D"ltr">Sent from my iPhone</div><div dir=3D"ltr"><br><blockquote type=3D=
"cite">On Oct 15, 2025, at 19:18, Thanh. Nguyen Van &lt;[email protected]=
m&gt; wrote:<br><br></blockquote></div><blockquote type=3D"cite"><div dir=3D=
"ltr">=EF=BB=BF

<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8">


Thanks for your support. How do you cacula traffic ipv4 and ipv6 on one inte=
rface ?
<div>rgds.<br id=3D"lineBreakAtBeginningOfSignature">
<div dir=3D"ltr">=C4=90=C6=B0=E1=BB=A3c g=E1=BB=ADi t=E1=BB=AB iPhone c=E1=BB=
=A7a t=C3=B4i</div>
<div dir=3D"ltr"><br>
<blockquote type=3D"cite">V=C3=A0o ng=C3=A0y 16 thg 10, 2025, l=C3=BAc 01:38=
, Anna Norokh -X (anorokh - SOFTSERVE INC at Cisco) via Snort-users &lt;snor=
[email protected]&gt; =C4=91=C3=A3 vi=E1=BA=BFt:<br>
<br>
</blockquote>
</div>
<blockquote type=3D"cite">
<div dir=3D"ltr">
<div dir=3D"ltr" style=3D"font-family: Aptos, Arial, Helvetica, sans-serif; f=
ont-size: 12pt; color: rgb(0, 0, 0);">
Both the IPv4 and IPv6 traffic that you are seeing would be helpful. This wi=
ll help understand the possible issue and suggest detection profiles that co=
uld be configured.</div>
<div dir=3D"ltr" style=3D"font-family: Aptos, Arial, Helvetica, sans-serif; f=
ont-size: 12pt; color: rgb(0, 0, 0);">
</div>
</div>
</blockquote>
</div>


</div></blockquote></div></body></html>=

--Apple-Mail-FA49203E-BD7D-4FA7-8C83-83A85427FF23--

--===============6295306689581898192==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Snort-users mailing list
[email protected]
Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-users

	To unsubscribe, send an email to:
	[email protected]

Please visit http://blog.snort.org to stay current on all the latest Snort news!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

--===============6295306689581898192==--