Ukuze uhlalutye i-traffic yenethiwekhi, kuyimfuneko ukuthumela ipakethi yenethiwekhi kwi-NTOP/NPROBE okanye i-Out-of-band Network Security and Monitoring Tools. Kukho izisombululo ezibini kule ngxaki:
Isibuko sePort(ekwaziwa njenge-SPAN)
Itephu yeNethiwekhi(ekwabizwa ngokuba yiReplication Tap, aggregation tap, Active Tap, Copper Tap, Ethernet Tap, njl.)
Phambi kokuchaza umahluko phakathi kwezisombululo ezimbini (Port Mirror kunye Network Tap), kubalulekile ukuqonda ukuba isebenza njani Ethernet. Kwi-100Mbit nangaphezulu, ababuki zindwendwe baqhele ukuthetha nge-duplex epheleleyo, okuthetha ukuba umamkeli omnye angathumela(Tx) kwaye afumane(Rx) ngaxeshanye. Oku kuthetha ukuba kwi-cable ye-100 ye-Mbit eqhagamshelwe kwi-host host enye, inani elipheleleyo le-traffic yenethiwekhi enye i-host host ingathumela / ifumane (Tx / Rx)) yi-2 × 100 Mbit = 200 Mbit.
Isibuko sesibuko kukuphindwa kwepakethi esebenzayo, okuthetha ukuba isixhobo sothungelwano sinoxanduva ngokwasemzimbeni lokukopa ipakethi kwizibuko elibonisiweyo.
Oku kuthetha ukuba isixhobo kufuneka senze lo msebenzi ngokusebenzisa isibonelelo esithile (esifana ne-CPU), kwaye zombini izikhokelo zendlela ziya kuphinda-phindwa kwizibuko elinye. Njengoko bekutshiwo ngaphambili, kwikhonkco elipheleleyo le-duplex, oku kuthetha ukuba
A - > B kunye no-B -> A
Isixa se-A asiyi kudlula isantya sothungelwano phambi kokuba ilahleko yepakethe yenzeke. Oku kungenxa yokuba akukho ndawo ngokwasemzimbeni yokukopa iipakethi. Kuyavela ukuba isibuko sesibuko bubuchule obukhulu njengoko bunokwenziwa ngotshintsho oluninzi (kodwa ayilulo lonke), kuba uninzi lokutshintsha kunye ne-drawback yelahleko yepakethi, ukuba ubeka iliso kwikhonkco elinomthwalo ongaphezulu kwe-50%, okanye isipili izibuko kwizibuko elikhawulezayo (umzekelo isibuko se-100 Mbit kwizibuko le-Gbit). Singasathethi ke ukuba i-packet mirroring inokufuna ukutshintshiselana ngezixhobo zokutshintsha, ezinokuthi zilayishe isixhobo kwaye zibangele ukusebenza kotshintshiselwano ukuthotywa. Qaphela ukuba ungaqhagamshela izibuko eli-1 kwizibuko elinye, okanye i-1 VLAN kwizibuko elinye, kodwa awukwazi ngokubanzi ukukhuphela izibuko ezininzi ku 1. (Ke njengesibuko sepakethe) ilahlekile.
I-TAP yeNethiwekhi (iNdawo yoFikelelo lweterminal)sisixhobo sehardware esenziwa ngokupheleleyo, esinokuthi sibambe itrafikhi kuthungelwano. Ngokuqhelekileyo isetyenziselwa ukujonga i-traffic phakathi kwamanqaku amabini kwinethiwekhi. Ukuba uthungelwano phakathi kwala manqaku mabini lubandakanya intambo yomzimba, i-TAP yenethiwekhi inokuba yeyona ndlela ilungileyo yokubamba i-traffic.
I-TAP yenethiwekhi inamazibuko amathathu ubuncinane: i-port, i-B port, kunye ne-monitor port. Ukubeka impompo phakathi kwamanqaku A kunye no-B, intambo yenethiwekhi phakathi kwendawo A kunye nenqaku B iyatshintshwa ngeentambo ezimbini, enye iya kwi-TAP's port, enye iya kwi-TAP's port. I-TAP idlula zonke iitrafikhi phakathi kwamanqaku amabini othungelwano, ngoko ke zisaqhagamshelwe omnye komnye. I-TAP iphinda ikhuphele i-traffic kwizibuko layo lokujonga, ngaloo ndlela ivumela isixhobo sokuhlalutya ukumamela.
Ii-TAP zeNethiwekhi ziqhele ukusetyenziswa ngokubeka iliso kunye nokuqokelela izixhobo ezifana ne-APS. Ii-TAPs zisenokusetyenziswa kwizicelo zokhuseleko ngenxa yokuba azikho mqobo, azibonakali kuthungelwano, zinokujongana ne-full-duplex kunye ne-non-shared networks, kwaye ngokuqhelekileyo ziya kudlula kwi-traffic nokuba itephu iyeka ukusebenza okanye ilahlekelwe ngamandla. .
Njengoko i-Network taps izibuko zingafumani kodwa zihambisa kuphela, iswitshi ayinamkhondo ukuba ngubani ohleli emva kwamazibuko. Isiphumo kukuba isasaza iipakethi kuwo onke amazibuko. Ke ngoko, ukuba uqhagamshela isixhobo sakho esweni kwiswitshi, eso sixhobo siya kufumana zonke iipakethi. Qaphela ukuba lo matshini uyasebenza ukuba isixhobo sokubeka iliso asithumeli nayiphi na ipakethi kwisitshixo; ngenye indlela, iswitshi iyakucinga ukuba iipakethi ezicofayo azikho kweso sixhobo. Ukuze ufezekise oko, ungasebenzisa intambo yenethiwekhi ongakhange uqhagamshele iingcingo ze-TX, okanye usebenzise i-IP-less (kunye ne-DHCP-ngaphantsi) ujongano lwenethiwekhi olungathumeli iipakethi kwaphela. Okokugqibela qaphela ukuba ufuna ukusebenzisa itephu ukuze ungalahleki iipakethi, ngoko mhlawumbi ungadibanisi izikhombisi-ndlela okanye usebenzise iswitshi apho izalathiso ezicofayo zicotha khona (umz. 100 Mbit) ukuba izibuko zokudibanisa (umz. 1 Gbit).
Ke, ungabanjwa njani iTrafikhi yeNethiwekhi? Iimpompo zeNethiwekhi vs Isibuko sokutshintsha amaZibuko
I-1- Ulungelelwaniso olulula: Itephu yenethiwekhi> Isibuko sePort
I-2- Impembelelo yoMsebenzi womnatha: Itephu yeNethiwekhi < Isibuko sePort
I-3-Thatha, ukuphindaphinda, ukuHlanganisa, amandla oThutho: Itephu yenethiwekhi > Isibuko sePort
I-4- ILatency yoThutho lweTrafikhi: Itephu yeNethiwekhi < Isibuko sesibuko
I-5- Ubuchule bokwenza kwangaphambili iTrafikhi: Itephu yenethiwekhi > Isibuko sesibuko
Ixesha lokuposa: Mar-30-2022
