Txhawm rau txheeb xyuas cov tsheb khiav hauv lub network, nws yuav tsum xa cov pob ntawv network mus rau NTOP / NPROBE lossis Out-of-band Network Security thiab Saib Xyuas Cov Cuab Yeej.Muaj ob txoj hauv kev rau qhov teeb meem no:
Port Mirroring(tseem hu ua SPAN)
Network Kais(tseem hu ua Replication Tap, Aggregation Tap, Active Tap, Copper Kais, Ethernet Kais, thiab lwm yam)
Ua ntej piav qhia qhov sib txawv ntawm ob txoj kev daws teeb meem (Port Mirror thiab Network Tap), nws yog ib qho tseem ceeb kom nkag siab tias Ethernet ua haujlwm li cas.Ntawm 100Mbit thiab siab dua, cov tswv tsev feem ntau hais lus puv npo, txhais tau tias ib tus tswv tuaj yeem xa (Tx) thiab tau txais (Rx) ib txhij.Qhov no txhais tau hais tias ntawm 100 Mbit cable txuas nrog ib tus tswv tsev, tag nrho cov nyiaj tau los ntawm lub network uas ib tus tswv tuaj yeem xa / tau txais (Tx / Rx)) yog 2 × 100 Mbit = 200 Mbit.
Port mirroring yog active packet replication, uas txhais tau hais tias lub network ntaus ntawv yog lub cev lub luag hauj lwm rau luam cov pob ntawv mus rau mirrored chaw nres nkoj.
Qhov no txhais tau hais tias lub cuab yeej yuav tsum ua txoj haujlwm no los ntawm kev siv qee qhov peev txheej (xws li CPU), thiab ob qho tib si cov lus qhia yuav raug rov ua dua rau tib qhov chaw nres nkoj.Raws li tau hais ua ntej, hauv Ib qhov txuas duplex tag nrho, qhov no txhais tau tias
A -> B thiab B -> A
Tus lej ntawm A yuav tsis pub dhau lub network ceev ua ntej pob ntawv poob tshwm sim.Qhov no yog vim lub cev tsis muaj qhov chaw los luam cov pob ntawv.Nws hloov tawm tias qhov chaw nres nkoj mirroring yog cov txheej txheem zoo vim nws tuaj yeem ua tau los ntawm ntau lub keyboards (tab sis tsis yog tag nrho), vim tias feem ntau ntawm cov keyboards nrog qhov tsis zoo ntawm pob ntawv poob, yog tias koj saib xyuas qhov txuas nrog ntau dua 50% load, lossis iav qhov chaw nres nkoj mus rau qhov chaw nres nkoj sai dua (xws li iav 100 Mbit chaw nres nkoj mus rau 1 Gbit chaw nres nkoj).Tsis txhob hais tias pob ntawv tsom iav yuav xav tau kev hloov pauv cov peev txheej, uas tuaj yeem thauj khoom thiab ua rau kev sib pauv kev ua haujlwm tsis zoo.Nco ntsoov tias koj tuaj yeem txuas 1 qhov chaw nres nkoj rau ib qho chaw nres nkoj, lossis 1 VLAN rau ib qho chaw nres nkoj, tab sis feem ntau koj tsis tuaj yeem luam ntau qhov chaw nres nkoj rau 1. (Yog li daim iav pob ntawv) ploj lawm.
Network TAP (Terminal Access Point)yog ib tug passive hardware ntaus ntawv, uas yuav passively ntes tsheb nyob rau hauv ib tug network.Nws yog feem ntau siv los saib xyuas cov tsheb khiav ntawm ob lub ntsiab lus hauv lub network.Yog tias lub network ntawm ob lub ntsiab lus no muaj lub cev muaj zog, lub network TAP yuav yog txoj hauv kev zoo tshaj plaws los ntes cov tsheb.
Lub network TAP muaj tsawg kawg yog peb qhov chaw nres nkoj: qhov chaw nres nkoj A, B chaw nres nkoj, thiab qhov chaw saib xyuas.Txhawm rau tso tus kais ntawm cov ntsiab lus A thiab B, lub network cable ntawm point A thiab point B yog hloov nrog ob lub cables, ib qho mus rau TAP's A chaw nres nkoj, lwm qhov mus rau TAP's B chaw nres nkoj.Lub TAP hla tag nrho cov tsheb khiav ntawm ob lub ntsiab lus network, yog li lawv tseem txuas nrog ib leeg.Lub TAP kuj luam cov tsheb khiav mus rau nws qhov chaw nres nkoj saib, yog li ua kom cov cuab yeej tsom xam mloog.
Network TAPs feem ntau yog siv los ntawm kev saib xyuas thiab sau cov khoom siv xws li APS.TAPs kuj tseem siv tau rau hauv daim ntawv thov kev ruaj ntseg vim tias lawv tsis muaj kev cuam tshuam, tsis tuaj yeem tshawb pom hauv lub network, tuaj yeem cuam tshuam nrog kev sib koom ua haujlwm puv thiab tsis sib koom, thiab feem ntau yuav dhau los ntawm kev khiav tsheb txawm tias tus kais nres ua haujlwm lossis poob lub zog. .
Raws li Network Taps cov chaw nres nkoj tsis tau txais tab sis xa tawm xwb, qhov hloov pauv tsis muaj qhov cuam tshuam uas zaum tom qab cov chaw nres nkoj.Qhov tshwm sim yog tias nws tshaj tawm cov pob ntawv mus rau txhua qhov chaw nres nkoj.Yog li ntawd, yog tias koj txuas koj cov cuab yeej saib xyuas mus rau qhov hloov, cov cuab yeej zoo li no yuav tau txais tag nrho cov pob ntawv.Nco ntsoov tias cov txheej txheem no ua haujlwm yog tias cov cuab yeej saib xyuas tsis xa ib pob ntawv mus rau qhov hloov pauv;txwv tsis pub, qhov hloov pauv yuav xav tias cov pob ntawv tapped tsis yog rau cov cuab yeej zoo li no.Txhawm rau ua tiav qhov ntawd, koj tuaj yeem siv lub network cable uas koj tsis tau txuas nrog TX xaim, lossis siv IP-tsawg (thiab DHCP-tsawg) network interface uas tsis xa cov pob ntawv txhua.Thaum kawg nco ntsoov tias yog tias koj xav siv tus kais dej kom tsis txhob poob cov pob ntawv, ces tsis txhob sib koom ua ke cov lus qhia lossis siv qhov hloov pauv qhov twg cov lus qhia tau qeeb qeeb (xws li 100 Mbit) uas qhov chaw sib koom ua ke (xws li 1 Gbit).
Yog li, yuav ua li cas ntes Network Traffic?Network Kais vs Hloov Ports Daim iav
1- Yooj yim configuration: Network Kais> Chaw nres nkoj daim iav
2- Network Performance Influence: Network Kais <Port Mirror
3- Capture, Replication, Aggregation, Forwarding Ability: Network Kais > Chaw nres nkoj daim iav
4- Traffic Forwarding Latency: Network Kais <Port Mirror
5- Tsheb thauj mus los ua ntej muaj peev xwm: Network Kais> Chaw nres nkoj daim iav
Lub sij hawm xa tuaj: Mar-30-2022
