Abstract:The state of the network can be reflected by the background traffic. Negative network measurements can be a very important way to understand the Internet. I would like to express appreciation to CERNET, who provided us with an IPv6 address space allocated but not a fully used network. By announcing a large /20 covering prefixes on this address, we have published routing information on China's domestic education network, business network, and foreign education network. Based on the honeypot method, we collect relative traffic at the last hop router of the experiment network. Thus, we make our experiment environment a network telescope. We discover that background radiation traffic grew more rapidly than it was years ago under the current ipv6 network situation. Moreover, suspicious IPv6 address scanning traffic shows up. We classify and analyze the traffic and classify all the source addresses and destination addresses. We found that the source addresses are mainly from Asian countries. In particular, we conduct further detection and monitor on the suspicious source addresses. We analyze the time when it appears and what it scans, including the destination address and the port type. The most interesting destination ports to the outside world are mainly 80, 8080, 443, 53, 21, 22, 23, and 25, which are related to web services and host system applications. We explain most of the data and highlight the significant attributes of the data. We found several special addresses scanning our address segment periodically. Our work reveals the situation and the problem under the current IPv6 network situation.

CERNET IPv6 Testbed [J]

CNGI-CERNET2: an IPv6 Deployment in China

Observations of IPv6 traffic

IPv6-Network Telescope Network Traffic Overview

Experience of Conformance Testing on IPv6 Protocols

The Transition to IPv6, Part 1: 4over6 for the China Education and Research Network.

NTS6: IPv6 Based Network Topology Service System of CERNET2

Design of CERNET2 in CNGI Core Network

Understanding Current IPv 6 Performance : A Case Study from CERNET

The Research of 4over6 Transition System Deployment for IPv6 Backbone

The Transition to IPv6, Part II: The Softwire Mesh Framework Solution

Comparison of Five Different Routers in Neighbor Discovery Protocol Conformance Testing

Understanding IPv6 Usage: Communities and Behaviors

The IPv6 Network-Layer Topology Discovery of CERNET2

Optical Network: Cernet'S Experiences and Prospective

IPv6-Darknet Network Traffic Detection.

4over6: IPv4 network interconnection over IPv6 backbone without explicit tunneling

Survey of Internet IPv6 Transition Technologies

Research on Constructing Security and Reliable IPv6 Network

Research papers: A study of traffic from the perspective of a large pure IPv6 ISP

IPv6 Development in China