A cikin labarin na gaba zamu kalli Ntopng. Labari ne game da mai kula da zirga-zirgar ababen hawa ya samo asali ne daga ainihin shirin da aka sani da Ntop, wanda kungiyar Ingilishi mai suna iri daya ta kirkira a shekarar 1998. Ntopng shine aikace-aikacen saka idanu da Hanyar hanyar sadarwa yanar gizo kuma an sake shi a ƙarƙashin GPLv3. Zai samar mana da ingantaccen kuma ɓoyayyen mai amfani da yanar gizo don bincika bayanan zirga-zirgar hanyar sadarwa a ainihin lokacin da kuma tarihi.
An tsara wannan aikace-aikacen don zama babban aiki, ƙaramin maye gurbin amfani da kwantena. Sunan ya fito ne daga "ntop na gaba tsara”. Ana samun sigar lambar tushe don tsarin aiki: Unix, Gnu / Linux, BSD, Mac OS X da Windows. Akwai nau'ikan binary don CentOS, Ubuntu, da OS X. Injin ntopng an rubuta shi ne a cikin C ++, yayin da ake rubutun yanar gizo a cikin Lua.
Ntopng yana da mahimmanci binciken zirga-zirgar ababen hawa wanda zai sanya ido kan amfani da hanyar sadarwa. Ya dogara ne akan libpcap, Laburaren da aka rubuta a matsayin wani ɓangare na babban shirin da ake kira Farashin TCP. Ntopng ya dogara ne akan sabar maɓallin ƙimar Redis maimakon ɗakunan ajiya na gargajiya, yana amfani da nDPI don binciken yarjejeniya, yana tallafawa ƙasa mai watsa shiri, kuma yana iya nuna bincike na kwararar lokaci don mahaɗan haɗin.
Ntopng shine samuwa a cikin nau'i uku; Community: Sigogin kyauta da na buɗewa wanda aka shirya akan GitHub lasisi a ƙarƙashin GNU GPLv3, Professional y ciniki. Versionswararrun andwararrun Masana'antu da prisean ciniki za su ba mu wasu ƙarin fasali.
Janar halaye na Ntopng
- Kama fakiti Capture Kamawa / watsawa ta amfani da kayan aiki na asali tare da PF_RING. Kudin kwafin Zero-kwafin rarraba cikin zaren, aikace-aikace, da injunan kamala. Ya haɗa da tallafin Libpcap don haɗakarwa mara kyau tare da aikace-aikacen gado.
- Rikodin zirga-zirga Rikodi na hanyar sadarwa mara asara na 10 Gbit zuwa sama tare da n2 disk. Tsarin fayil ɗin PCAP na masana'antu daidai. Yana ba da izinin dawo da fakitoci cikin sauri ta amfani da BPF. Daidaita zirga zirga tare da disk2n.
- Binciken hanyar sadarwa → n Binciken- NetFlow v5 / v9 / IPFIX ƙarin bincike tare da goyan baya don bincika L7 abun ciki.
- Rahoton kan amfani da yarjejeniyar IP Ko da ma har zuwa yanzu don rarraba shi ta hanyar irin yarjejeniya.
- Nazarin zirga-zirga Analysis Binciken zirga-zirgar yanar gizo mai saurin gudu da tarin kwarara ta amfani da ntopng. Statisticsididdigar zirga-zirga mai ɗorewa a cikin tsarin RRD. Kafa 7 bincike leveraging nDPI, Tsarin DPI mai budewa. Har ila yau don rarraba zirga-zirga bisa ga tushe / makoma.
- Geolocate da Masu Gudanar da Gida Will Wannan za'a yi shi a taswirar ƙasa.
- Injin faɗakarwa → Zamu iya kama maharan da ba su dace ba.
- Samar da ƙididdigar hanyoyin sadarwa → Yin amfani da fasahar HTML5 / AJAX.
- Za mu sami cikakken tallafi don ladabi na hanyar sadarwa na yanzu Ciki har da IPv4 da IPv6.
Waɗannan su ne kawai wasu daga cikin siffofin. Za su iya ka shawarce su duka a cikin aikin yanar gizo.
Shigar da ntopng akan Ubuntu
para shigar da wannan kayan aikin akan Ubuntu 18.04Abinda yakamata kayi shine bude tashar (Ctrl + Alt + T) sannan ka rubuta wannan umarnin a ciki:
sudo apt install ntopng
Abu na gaba da zamuyi shine shirya fayil din daidaitawa wanda yake /etc/ntopng.conf kuma ba damuwa da layin hanyar sadarwarmu ko ƙara shi:
sudo vim /etc/ntopng.conf
Mataki na gaba zai kasance shirya fayil /etc/ntopng.start kuma ƙara IP na uwar garkenmu a can:
sudo vim /etc/ntopng.start
Bayan shigarwa da daidaitawa, zamu iya sake kunnawa ntopng service tare da wannan umarnin:
systemctl restart ntopng
A wannan gaba, za mu iya shigar da Ntopng dubawa daga burauzar yanar gizo ta amfani da URL mai zuwa:
http://IP-DEL-SERVIDOR:3000
Sunan sunan mai amfani da kalmar wucewa sune gudanarwa - gudanarwa don farkon shiga. Bayan haka, zai tambaye mu mu canza wannan kalmar sirri.
Takardun
Idan kana so moreara koyo game da yadda yake aiki ko samun ƙarin bayani game da ntopng, zaka iya ziyartar Takaddun mai amfani da kuma Takaddun API. Hakanan za'a iya samun ƙarin bayani a cikin aikin yanar gizo.
Wannan babban kayan aikin kayan aikin kyauta ne wanda ke ba mu kyakkyawan dama don Kula da zirga-zirgar zirga-zirga. Ntopng kyakkyawan zaɓi ne don gwada waɗanda suke son amfani da aikace-aikace kaɗan ci gaba fiye da al'ada don bincika zirga-zirgar hanyoyin sadarwa.