Skip to main content.

RSS Feeds

To keep yourself up-to-date with the latest changes on NDPMon, several RSS feeds are available at this URL. More precisely, by subscribing to this feed, you will be able to follow all new file releases.

News

13 August 2009: Version 1.4.0 Released !

Long time no see, but NDPMon 1.4.0 is released! Many changes in this release:

  • The code was passed in Fortify to ensure security of the sources (avoid buffer overflows...)
  • This permitted to clean up the code and begin some reorganisation of the sources
  • The code does now have a Doxygen documentation, still incomplete but it is on its way. See the documentation section for more details.
  • New alerts: NDPMon now checks all default parameters in a RA.
  • New countermeasures plugin: sends NDP messages in response to attacks or misconfigurations to reduce the impact on hosts. Known as working on Linux only at the moment.
  • New extra package: icmplib, inspired from THC IPv6 Hacking toolkit, a library to create and send easily NDP packages. Known as working on Linux only at the moment.

Welcome to Thomas Buerhing in the developers community and many thanks to him for this release. We hope to keep on working together on NDPMon and make the project more active in the next months.
Deb and RPM packets for i386 architecture will be released soon.

16 January 2008: Version 1.3d Released !

NDPMon 1.3d is released ! It consists in a bug correction. The general tests for wrong fields in captured packets are now performed only on NDP packets, and not on all ICMPv6 packets. Thanks to Eric Vyncke from Cisco for reporting this bug.

07 November 2007: RPM Packages !

RPM packages releases for i386 and x86_64/AMD64 packages. They are available in the download section. These RPMs have been successfully tested under Fedora Core 7 with i386 architecture. If you use them and encounter troubles or successes (on Fedora, Red Hat, Mandriva...), please let us know: frederic.beck@loria.fr.

25 October 2007: Version 1.3c Released !

NDPMon 1.3c is released ! It integrates a few new alrets and reports:

  • wrong ipv6 router: if neither the Link Local Address and the MAC address are known for a RA
  • wrong RA flags: if the managed and other flags in the RA are not well set
  • wrong source link address option: the MAC address in the Link Adress option does not match with the Ethernet source address
  • wrong ipv6 hop limit: IPv6 Hop Limit is not 255
  • wrong RA lifetimes: preferred lifetime is bigger than the valid lifetime
  • RA valid lifetime too short: valid lifetime is less than 2 hours

This release comes along with the second version of the web interface, integrating the latest changes in NDPMon.

04 October 2007: Binary Packages !

NDPMon is now available in binary packages. At the moment, only Debian i386 and AMD64 packages are available in the download section. We are aiming at distributing it for other distribution, if you want to help, you are more than welcome. This announcement goes with non-official 1.3b release (only available via SVN).

NDPMon is also referenced in Wikipedia, in English and French.

25 September 2007: Version 1.3a and WEB interface Released !

The first version of the WEB interface has been released ! It displays information about the discovered nodes, the configuration, the alerts and a first statistic module. Please refer to the extras section for more information.

NDPMon version 1.3a has also been released. It integrates very few and small modification to work with the WEB interface. The main changes are:

  • create_html_table.py: replaces demopipeprogram.pl and stores the alerts in an XML file
  • discovery_history.dat: each time the neighbor list is updated, a line is added in this file with the time and the number of doscovered nodes. Reinitialized at startup.

10 September 2007: Version 1.3 Released !

We continued our work on the porting of NDPMon to other OS. NDPMon now runs under Linux, FreeBSD, OpenBSD, NetBSD and Mac OS X (tested successfully under Mac OS X 10.4 - Tiger). The configure script detects automatically the OS and make possible to build the tool accordingly. Finally, the tool is now compliant with the Filesystem Hierarchy Standard, the Makefile being modified accordingly.

Fpr more informations, please refer to the Documentation.

31 July 2007: Version 1.2 Released !

FreeBSD Support ! Thanks to Janos Mohacsi NDPMon is now working under FreeBSD and available in the ports ditribution. Some other minor corrections to the previous patches applied have been grought to the tool (correction in the learning phase for example).

13 March 2007: Website update !

The article Monitoring the Neighbor Discovery Protocol has been presented at IPv6TD 2007. We got very good feedback on the tool during this conference, and we decided to define a ToDo list for the tool. It is available in the Roadmap page.

26 February 2007: Version 1.1b Released !

Minor corrections

  • Bug correction in IPv6 Global addresses gestion (check on multicast addresses)
  • Code cleaning

On the road to a WEB interface for displaying the results and statistics: a smal script generating a GNUPlot graph of MAC vendors and a small ndpmon2html tool from Maik Fröchtenicht (TU-Clausthal) added in the extras section.

05 January 2007: Version 1.1 Released !

Applied patch from Steffen Strueber

  • New logging system with pipes
  • Reformated mail report
  • Warnings corrected

21 November 2006: Version 1.0b Released !

Added MAC Manufacturer Resolution

  • Manufacturers' database extracted from Wireshark thanks to the script make-manuf
  • Manufacturer added in neighbor's representation (structures and XML)
  • New Sysloged Alert: Unknown Manufacturer - The MAC address may be forged

15 November 2006: Version 1.0a Released !

Minor adjustment in the learning phase to integrate the routers

  • Router's definition derived from Router Advertisements
  • Configuration file generated accordingly

06 November 2006: Version 1.0 Released !

This time a major update has been performed. The data structures have been modified, to be more compliant to the IPv6 standards:

  • New routers an neighbors definition
  • Modification fo the analysis functions accordingly
  • New Alerts: Wrong couple IP/MAC for a router, New Global IPv6 Address, New Link Local Address
  • Possibility to modify the paths to DTD and XML files at startup
  • Few minors code corrections
  • Updated documentation and manpage

October 2006: Version 0.1b Released !

This is not a major update, only a few minor bugs and improvements have been brought to the tool:

  • Better gestion of Syslog
  • Packaging of the tool, with autoconf/automake, licensing...

September 2006: Version 0.1 Released !

First release of NDPMon, Neighbor Discovery Protocol Monitor.