Kuti mufufuze kuchuluka kwa ma network, ndikofunikira kutumiza paketi ya netiweki ku NOP/NPROBE kapena Out-of-band Network Security and Monitoring Tools.Pali njira ziwiri zothetsera vutoli:
Port Mirroring(wotchedwanso SPAN)
Network Tap(yomwe imadziwikanso kuti Replication Tap, Aggregation Tap, Active Tap, Copper Tap, Ethernet Tap, etc.)
Musanafotokoze kusiyana pakati pa njira ziwirizi (Port Mirror ndi Network Tap), ndikofunikira kumvetsetsa momwe Ethernet imagwirira ntchito.Pa 100Mbit ndi kupitilira apo, olandila nthawi zambiri amalankhula mowirikiza, kutanthauza kuti wolandila wina amatha kutumiza(Tx) ndikulandila(Rx) nthawi imodzi.Izi zikutanthauza kuti pa chingwe cha 100 Mbit cholumikizidwa ndi wolandira mmodzi, kuchuluka kwa kuchuluka kwa magalimoto omwe munthu wina angatumize / kulandira (Tx / Rx)) ndi 2 × 100 Mbit = 200 Mbit.
The Port mirroring ndi yogwira paketi kubwereza, kutanthauza kuti chipangizo netiweki ndi thupi udindo kukopera paketi ku doko galasi.
Izi zikutanthauza kuti chipangizocho chiyenera kuchita ntchitoyi pogwiritsa ntchito zinthu zina (monga CPU), ndipo mayendedwe onse amagalimoto adzabwerezedwanso padoko lomwelo.Monga tanena kale, mu A full duplex ulalo, izi zikutanthauza kuti
A -> B ndi B -> A
Kuchuluka kwa A sikudzapitirira liwiro la netiweki kusanachitike kutayika kwa paketi.Izi ndichifukwa choti mulibe malo okopera mapaketi.Zikuoneka kuti doko mirroring ndi njira yabwino chifukwa angathe kuchitidwa ndi masiwichi ambiri (koma osati onse), chifukwa ambiri masiwichi ndi drawback wa paketi kutayika, ngati inu kuwunika ulalo ndi katundu oposa 50%, kapena galasi madoko olowera padoko lothamanga (mwachitsanzo galasi la 100 Mbit madoko padoko la 1 Gbit).Osanenapo kuti packet mirroring angafunike kusinthana masiwichi chuma, amene akhoza kutsegula chipangizo ndi kuchititsa kusinthana ntchito kunyozeka.Dziwani kuti mutha kulumikiza doko la 1 ku doko limodzi, kapena 1 VLAN ku doko limodzi, koma simungathe kukopera madoko ambiri ku 1. (Monga galasi la paketi) likusowa.
Network TAP (Terminal Access Point)ndi chida cha Hardware, chomwe chimatha kujambula anthu ambiri pamanetiweki.Nthawi zambiri amagwiritsidwa ntchito kuyang'anira kuchuluka kwa magalimoto pakati pa mfundo ziwiri pamaneti.Ngati maukonde pakati pa mfundo ziwirizi ali ndi chingwe chakuthupi, TAP network ikhoza kukhala njira yabwino yojambulira magalimoto.
TAP ya netiweki ili ndi madoko osachepera atatu: doko A, doko la B, ndi doko loyang'anira.Kuyika kampopi pakati pa mfundo A ndi B, chingwe cha netiweki pakati pa mfundo A ndi mfundo B chimasinthidwa ndi zingwe ziwiri, imodzi kupita ku doko la TAP's A, ina kupita kudoko la TAP.TAP imadutsa magalimoto onse pakati pa ma network awiriwa, kotero amalumikizanabe wina ndi mnzake.TAP imakoperanso kuchuluka kwa magalimoto ku doko lake loyang'anira, motero kupangitsa kuti chipangizo chowunikira chimvetsere.
Ma Network TAP amagwiritsidwa ntchito kwambiri poyang'anira ndi kusonkhanitsa zida monga APS.Ma TAP atha kugwiritsidwanso ntchito pamapulogalamu achitetezo chifukwa ndi osasokoneza, sawoneka pa netiweki, amatha kuthana ndi ma network a duplex komanso osagawana nawo, ndipo nthawi zambiri amadutsa magalimoto ngakhale bomba itasiya kugwira ntchito kapena kutaya mphamvu. .
Monga madoko a Network Taps samalandira koma amangotumiza kokha, kusinthaku sikukudziwa yemwe wakhala kumbuyo kwa madoko.Zotsatira zake ndikuti imawulutsa mapaketi kumadoko onse.Chifukwa chake, ngati mulumikiza chipangizo chanu chowunikira ndi chosinthira, chipangizocho chidzalandira mapaketi onse.Dziwani kuti makinawa amagwira ntchito ngati chipangizo chowunikira sichitumiza paketi iliyonse ku switch;apo ayi, chosinthiracho chidzaganiza kuti mapaketi ojambulidwawo si a chipangizo choterocho.Kuti mukwaniritse izi, mutha kugwiritsa ntchito chingwe cha netiweki chomwe simunalumikizane ndi mawaya a TX, kapena kugwiritsa ntchito mawonekedwe a netiweki a IP-less (ndi DHCP-less) omwe samatumiza mapaketi konse.Pomaliza dziwani kuti ngati mukufuna kugwiritsa ntchito mpopi kuti musataye mapaketi, ndiye kuti musaphatikize mayendedwe kapena gwiritsani ntchito chosinthira pomwe mayendedwe okhomedwa amachedwa (monga 100 Mbit) kuti doko lophatikiza (mwachitsanzo 1 Gbit).
Ndiye, Momwe Mungatengere Network Traffic?Network Taps vs Switch Ports Mirror
1- Kusintha kosavuta: Network Tap> Port Mirror
2- Kukokera kwa Network Performance: Network Tap <Port Mirror
3- Jambulani, Kubwereza, Kuphatikiza, Kutha Kutumiza: Network Tap> Port Mirror
4- Kuchedwa Kutumiza Kwa Magalimoto: Network Tap <Port Mirror
5- Kuthekera Kwa Magalimoto Athu: Network Tap> Port Mirror
Nthawi yotumiza: Mar-30-2022
