Products by Protocol

Codenomicon TCP Test Tool for IPv6 Data Sheet

  • Test tool: Codenomicon TCP Test Tool for IPv6
  • Direction: Server
  • Tagline: Dependability and Reliability for the Next-Generation Internet

Codenomicon IPv6 Test Tools help software developers, testers and administrators search and eliminate security-related flaws in Internet Protocol Version 6 (IPv6) protocol implementations proactively and cost-effectively. Early elimination of bugs with security implications greatly reduces costs later on in the software lifecycle. Proactive testing will help improve the quality and reliability of your IPv6 products and promote customer trust.

Internet Protocol (IP) is the most important communications protocol in the world today. Estimates show that up to 800-900 million people depend on the current IP Version 4 for their daily communications needs. IPv6, the successor of IPv4, is rapidly becoming more and more widespread, and it is expected that all IPv4 nodes will eventually migrate to use IPv6. IPv6 implementations are already found in routers, switches, firewalls, desktop and server systems, laptops, PDAs, cell phones and other mobile systems, as well as a large number of embedded systems. All of these devices are vulnerable to exploitation through externally-supplied malformed protocol data. Effects of malicious data range from transient parsing errors to complete system takeovers. As IPv6 and its common associated protocols (TCP, UDP, ICMP, MLD) are beginning to be in an extremely crucial role in modern society, the dependability and reliability of IPv6 implementations must be verified. Codenomicon IPv6 Test Tools are sold in a bundle, with separate test tools for TCP, UDP, ICMPv6, and core IPv6.

Used specifications

Specification Title
RFC793 Transmission Control Protocol - DARPA Internet Program
RFC1072 TCP Extensions for Long-Delay Paths
RFC1146 TCP Alternate Checksum Options
RFC1323 TCP Extensions for High Performance
RFC1644 T/TCP -- TCP Extensions for Transactions - Functional Specification
RFC1693 An Extension to TCP : Partial Order Service
RFC2018 TCP Selective Acknowledgment Options
RFC2385 Protection of BGP Sessions via the TCP MD5 Signature Option
RFC2460 Internet Protocol, Version 6 (IPv6) Specification
RFC2883 An Extension to the Selective Acknowledgement (SACK) Option for TCP

Test tool general features

  • Fully automated black-box negative testing
  • Ready-made test cases
  • Written in Java(tm)
  • GUI, command line, remote interface modes
  • Instrumentation (health-check) capability
  • Support and maintenance
  • Comprehensive user documentation
  • Results reporting and analysis

Tool-specific information

Tested TCP Options Notes Specifications
End of Option List RFC793
No Operation RFC793
Maximum Segment Size RFC793
WSOPT - Window Scale RFC1323
SACK Permitted RFC2018
SACK RFC2018
Echo RFC1072
Echo Reply RFC1072
TSOPT - Time Stamp RFC1323
Partial Order Connection Permitted RFC1693
Partial Order Service Profile RFC1693
Connection Count RFC1644
Connection Count New RFC1644
Connection Count Echo RFC1644
TCP Alternate Checksum Request RFC1146
TCP Alternate Checksum Data RFC1146
Skeeter n/a
Bubba n/a
Trailer Checksum n/a
MD5 Signature RFC2385
SCPS Capabilities n/a
Selective Negative Acknowledgements n/a
Record Boundaries n/a
Corruption Experienced n/a
SNAP n/a
TCP Compression Filter n/a
Tested known TCP vulnerabilities Description
WinNuke OOB bug - TCP urgent pointer is set (to end of data) and (some) data is sent to netbios (139) port
Land A spoofed packet with the SYN flag set is sent to an open port (such as 113 or 139) while setting the target host/port as source host/port
SynDrop A mix of Land and teardrop/bonk attacks
LaTierra Modification of Land attack

This page lists the test tool data sheets available for sales and support. Please note that the information in these sheets is subject to periodical change.

Test Tool Datasheet: