Repository navigation
ScanStatus
A response may be marked INDIRECT when the response comes from an IPv6 device in the network path, rather than the specific host under test (HUT). Common examples of such mid-point devices, also known as relay or transit devices, are routers or firewalls. The responding IPv6 address is recorded and displayed. An INDIRECT indication modifies the underlying result; it is not itself a separate port status. For example, an indirectly generated administrative-prohibition response may be reported as INDIRECT-ADMPHBTD.
Each TCP port tested by IPscan will return one of the following states, or one of the ICMPv6 codes detailed in below:
| TCP Port Status | Definition |
|---|---|
| 🔴 TCPOPEN | A SYN+ACK response was received in response to the connection request, indicating that the TCP port is accepting connections. You should check that this is the expected outcome since an attacker may be able to compromise your machine by accessing this IPv6 address and TCP port combination. |
| 🟢 TCPSTEALTH | No response was received within the allocated time. This is the ideal TCP result because no response was observed from the tested address/port combination. |
| 🟡 TCPRST | A TCP RST response was received. This usually indicates that the TCP port is closed, i.e. no service is listening. The host or another device in the path is nevertheless responding. |
| 🟡 TCPFINACK | A TCP FIN+ACK (soft-close) response was received. The host or another device in the path is responding, but a direct TCP connection could not be established. |
| 🟡 TCPACK | A TCP ACK response was received, indicating that the port appeared already open to the probe. The host or another device in the path is responding, but a direct connection could not be established by this test. |
Each UDP port tested by IPscan will return one of the following states, or one of the ICMPv6 codes detailed below:
| UDP Port Status | Definition |
|---|---|
| 🔴 UDPOPEN | A valid UDP response was received from the tested UDP port. |
| 🟢 UDPSTEALTH | No UDP response or matching ICMPv6 error response was received within the allocated time period. This is the ideal response since no-one can ascertain your machine's presence at this IPv6 address and UDP port combination. |
ICMPv6 ECHO REQUEST packets are sent to the host under test (HUT) and will return one of the following states, or one of the ICMPv6 codes detailed below:
| ECHO REQUEST Status | Definition |
|---|---|
| 🟡 ECHOREPLY | A valid ICMPv6 ECHO RESPONSE packet was received from the tested host. |
| 🟢 ECHONOREPLY | No ECHO RESPONSE packet or matching ICMPv6 error response was received within the allocated time. |
ICMPv6 response statuses can be returned for any of the TCP, UDP or ECHO RESPONSE tests. When IPscan receives a matching ICMPv6 error response containing the packet it tested, the response is classified according to its ICMPv6 type and code. This includes ICMPv6 Type 1 Codes (which provide detail on a general 'Destination Unreachable' error) listed in the table below:
| ICMPv6 Type 1 Status | Definition |
|---|---|
| 🟡 NOROUTE | Code 0 — No route to destination. |
| 🟡 ADMPHBTD | Code 1 — Communication with destination administratively prohibited. |
| 🟡 BEYONDSCOPE | Code 2 — Beyond scope of source address. |
| 🟡 ADDRUNREACH | Code 3 — Address unreachable. |
| 🟡 PORTUNREACH | Code 4 — Port unreachable. |
| 🟡 FAILEDPOLICY | Code 5 — Source address failed ingress/egress policy. |
| 🟡 REJECTROUTE | Code 6 — Reject route to destination. |
| 🟡 ICMPV6T1 | ICMPv6 Type 1, with Code outside range 0-6. |
ICMPv6 Types 2-4 listed in the table below are indicative of general IPv6 error conditions and may NOT reflect the status of the tested service:
| ICMPv6 General Error Status | Definition |
|---|---|
| 🟡 PKTTOOBIG | ICMPv6 Type 2 — Packet Too Big. This is a general ICMPv6 error and doesn't reflect the status of the tested service. IPscan sends test packets considerably smaller than the minimum IPv6 packet sizes and so this error is unlikely to be reported. |
| 🟡 TIMEEXCEEDED | ICMPv6 Type 3 — Time Exceeded. This is a general ICMPv6 error and doesn't reflect the status of the tested service. |
| 🟡 PARAMPROB | ICMPv6 Type 4 — Parameter Problem. This is a general ICMPv6 error and doesn't reflect the status of the tested service. |