Is it possible to discover all hosts in IPv6 subnet?
I know that ping6 -I eth0 ff02::1 works for link scoped addresses. But if I use ping6 -I eth0 2000:1::1 ff02::1 I can't get global address, also using ff05 or ff08 is not helping.

Is there any way to discover global address hosts have on my network?
If I know link scoped address, can I discover all addreses that host has assigned on this interface?

Maybe nmap is that you are looking for.
Good luck.

nmaping 2^96 possible hosts doesn't seem like a good idea :-)

nmaping 2^96 possible hosts doesn't seem like a good idea

But...did you read the man page? nmap can do the same that ping6...and
more, much more...
Bye.

What are you exactly suggesting? I can't see how nmap can help me here.

nmaping 2^96 possible hosts doesn't seem like a good idea

Of course, it's stupid...

What are you exactly suggesting?

Exactly? Nothing... I can't.

I dont know anything about your machines, your subnet structure, your intentions... discover all hosts (maybe computers, routers, mobiles, consoles ...) in a ipv6 subnet is a complex work. You have to ponder numerous factors and curry out a good thinked strategic plan. A ping scan maybe sufficient in determined situations, but the most of times, isn't it.

I tell you about nmap thinking in all this. You will not find a simple option in nmap manual to do this, you will find a lot of things that you can use in your plan.

Yes, it sound like a very very freaky hacker sentence...

Take a look to http://www.faqs.org/rfcs/rfc5157.html and read all the links -if you have time-, all are very interesting. And forgive my previous post, it was very presumptuous.