HP-UX IPFilter Version A.03.05.14 Administrator's Guide

HP-UX and IPv6 Support
Using IPv6 Support in HP-UX IPFilter
Chapter 6108
ipfstat
The ipfstat command generates packet filter statistics and filter lists.
It also uses the -6 option for IPv6, but only for the following operations:
• -i—Lists IN rules
• -o—Lists OUT rules
• -h—Lists rule hits
For example, to list the IN rule hits for IPv6, use the following command:
ipfstat -6 -ih
ipmon
There are no major changes to logging for IPv6. The ipmon command
takes the same options as before and no new options are needed to log
IPv6 traffic. Log files include both IPv4 and IPv6 log records, ordered
according to how IPFilter receives the traffic. The log records indicate
IPv6 equivalents such as IPv6 addresses and protocol ICMPv6.
NOTE IPv4 and IPv6 log records cannot be sent to different log files.
New Features for IPv6
The following new features are supported by HP-UX IPFilter for IPv6:
• Stateful ICMP
• IPv6 extension headers
• Tunneled packets
• Fragmentation
Stateful ICMPv6
The following feature is not new, but has been enabled on IPv6. State can
be retained on ICMPv6 using Request-Response ICMPv6 messages. The
only message types are the echo request and echo reply.