6Guard: a honeypot-based IPv6 attack detector

6Guard is a honeypot-based IPv6 attack detector aiming at detecting the link-local level attacks, especially when the port-mirror feature of switch is unavailable.

Intallation

1. 1. Download and install Scapy in your machine. (apt-get install python-scapy)
2. 1. Download the v1.0 tarball directly or the latest code from Github Repository, then extract it into a directory.

Usage

1. 1. Enter the directory of 6Guard.
2. 1. Run $ sudo ./conf_generator.py to generate the configuration files.
3. 1. Run $ sudo ./6guard.py.

Note: The ./conf directory stores the configuration files of the honeypots and the globalpot. The ./log directory stores the operation logs and the attacking records. The ./pcap directory stores the message-related packets that can be reviewed in Wireshark.