From 0554951cb66652132e422d7b106904952ca17c9b Mon Sep 17 00:00:00 2001 From: Christian Kreibich Date: Sat, 4 May 2024 11:14:12 -0700 Subject: [PATCH] Clarify membership in the Site::private_address_space prefix list. [skip ci] IANA's IPv6 special-purpose address registry now has members that technically meet the definition of not being globally reachable, but don't imply operating locally. An example: https://datatracker.ietf.org/doc/draft-ietf-6man-sids/06/ This change just explains that distinction. --- scripts/base/utils/site.zeek | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/scripts/base/utils/site.zeek b/scripts/base/utils/site.zeek index e3e309da66..ec9fd69e79 100644 --- a/scripts/base/utils/site.zeek +++ b/scripts/base/utils/site.zeek @@ -7,7 +7,11 @@ module Site; export { ## A list of subnets that are considered private address space. ## - ## By default, it has address blocks defined by IANA as not being routable over the Internet. + ## By default, it has address blocks defined by IANA as not being + ## routable over the Internet. Some address blocks are reserved for + ## purposes inconsistent with the address architecture (such as + ## 5f00::/16), making them neither clearly private nor routable. We do + ## not include such blocks in this list. ## ## See the `IPv4 Special-Purpose Address Registry `_ ## and the `IPv6 Special-Purpose Address Registry `_