Itọsọna Sysadmins Linux kan si Isakoso Nẹtiwọọki, Laasigbotitusita ati N ṣatunṣe aṣiṣe
Awọn iṣẹ ṣiṣe deede ti olutọju eto pẹlu tito leto, mimu, laasigbotitusita, ati iṣakoso awọn olupin ati awọn nẹtiwọọki laarin awọn ile-iṣẹ data. Ọpọlọpọ awọn irinṣẹ ati awọn ohun elo lo wa ni Linux ti a ṣe apẹrẹ fun awọn idi iṣakoso.
Ninu nkan yii, a yoo ṣe atunyẹwo diẹ ninu awọn irinṣẹ laini pipaṣẹ ti a lo julọ ati awọn ohun elo fun iṣakoso nẹtiwọọki ni Lainos, labẹ awọn isọri oriṣiriṣi. A yoo ṣalaye diẹ ninu awọn apẹẹrẹ lilo wọpọ, eyiti yoo jẹ ki iṣakoso nẹtiwọọki rọrun pupọ ni Lainos.
Atokọ yii wulo bakanna si awọn ẹlẹrọ nẹtiwọọki akoko-kikun.
Iṣeto ni Nẹtiwọọki, Laasigbotitusita ati Awọn irinṣẹ n ṣatunṣe aṣiṣe
ifconfig jẹ irinṣẹ wiwo laini aṣẹ fun iṣeto ni wiwo nẹtiwọọki ati tun lo lati ṣe ipilẹ awọn atọkun ni akoko bata eto. Lọgan ti olupin kan ba n ṣiṣẹ ati ṣiṣe, o le lo lati fi Adirẹsi IP si oju wiwo ati muu ṣiṣẹ tabi mu wiwo wa lori ibeere.
O tun lo lati wo ipo Adirẹsi IP, Adirẹsi Hardware/MAC, bii MTU (Iwọn Gbigbe Iwọn) ti awọn atọkun lọwọlọwọ lọwọlọwọ. ifconfig jẹ bayi wulo fun n ṣatunṣe aṣiṣe tabi ṣiṣe atunṣe eto.
Eyi ni apẹẹrẹ lati ṣe afihan ipo ti gbogbo awọn atọkun nẹtiwọọki ti n ṣiṣẹ.
$ ifconfig
enp1s0 Link encap:Ethernet HWaddr 28:d2:44:eb:bd:98
inet addr:192.168.0.103 Bcast:192.168.0.255 Mask:255.255.255.0
inet6 addr: fe80::8f0c:7825:8057:5eec/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:169854 errors:0 dropped:0 overruns:0 frame:0
TX packets:125995 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:174146270 (174.1 MB) TX bytes:21062129 (21.0 MB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:15793 errors:0 dropped:0 overruns:0 frame:0
TX packets:15793 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1
RX bytes:2898946 (2.8 MB) TX bytes:2898946 (2.8 MB)
Lati ṣe atokọ gbogbo awọn atọkun eyiti o wa lọwọlọwọ, boya oke tabi isalẹ, lo Flag -a kan.
$ ifconfig -a
Lati fi adirẹsi IP si wiwo, lo aṣẹ atẹle.
$ sudo ifconfig eth0 192.168.56.5 netmask 255.255.255.0
Lati muu wiwo nẹtiwọọki ṣiṣẹ, tẹ.
$ sudo ifconfig up eth0
Lati mu maṣiṣẹ tabi tiipa wiwo nẹtiwọọki kan, tẹ.
$ sudo ifconfig down eth0
Akiyesi: Biotilẹjẹpe ifconfig jẹ ọpa nla, o ti di arugbo bayi (ti dinku), rirọpo rẹ ni aṣẹ ip eyiti o ti ṣalaye ni isalẹ.
Kini Iyato Laarin ifconfig ati ip ”fin ”lati ni imọ siwaju sii nipa rẹ.)
Aṣẹ atẹle yoo fihan adirẹsi IP ati alaye miiran nipa wiwo nẹtiwọọki kan.
$ ip addr show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: enp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 28:d2:44:eb:bd:98 brd ff:ff:ff:ff:ff:ff
inet 192.168.0.103/24 brd 192.168.0.255 scope global dynamic enp1s0
valid_lft 5772sec preferred_lft 5772sec
inet6 fe80::8f0c:7825:8057:5eec/64 scope link
valid_lft forever preferred_lft forever
3: wlp2s0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether 38:b1:db:7c:78:c7 brd ff:ff:ff:ff:ff:ff
...
Lati fi adiresi IP silẹ fun igba diẹ si wiwo nẹtiwọọki kan pato (eth0), tẹ.
$ sudo ip addr add 192.168.56.1 dev eth0
Lati yọ adirẹsi IP ti a sọtọ kuro ni wiwo nẹtiwọọki (eth0), tẹ.
$ sudo ip addr del 192.168.56.15/24 dev eth0
Lati fihan tabili aladugbo lọwọlọwọ ninu ekuro, tẹ.
$ ip neigh 192.168.0.1 dev enp1s0 lladdr 10:fe:ed:3d:f3:82 REACHABLE
pipaṣẹ ifup ṣiṣẹ ni wiwo nẹtiwọọki kan, ṣiṣe ni o wa lati gbe ati gba data.
$ sudo ifup eth0
pipaṣẹ ifdown pa a ni wiwo nẹtiwọọki duro, tọju ni ipo kan nibiti ko le gbe tabi gba data.
$ sudo ifdown eth0
aṣẹ ifquery ti a lo lati ṣe itupalẹ iṣeto ni wiwo nẹtiwọọki, n jẹ ki o gba awọn idahun si ibeere nipa bii o ṣe tunto lọwọlọwọ.
$ sudo ifquery eth0
ethtool jẹ iwulo laini aṣẹ fun wiwa ati ṣiṣatunṣe awọn aye iṣakoso oludari wiwo nẹtiwọọki ati awọn awakọ ẹrọ. Apẹẹrẹ ti o wa ni isalẹ fihan lilo ti ethtool ati aṣẹ kan lati wo awọn ipilẹ fun wiwo nẹtiwọọki.
$ sudo ethtool enp0s3 Settings for enp0s3: Supported ports: [ TP ] Supported link modes: 10baseT/Half 10baseT/Full 100baseT/Half 100baseT/Full 1000baseT/Full Supported pause frame use: No Supports auto-negotiation: Yes Advertised link modes: 10baseT/Half 10baseT/Full 100baseT/Half 100baseT/Full 1000baseT/Full Advertised pause frame use: No Advertised auto-negotiation: Yes Speed: 1000Mb/s Duplex: Full Port: Twisted Pair PHYAD: 0 Transceiver: internal Auto-negotiation: on MDI-X: off (auto) Supports Wake-on: umbg Wake-on: d Current message level: 0x00000007 (7) drv probe link Link detected: yes
ping (Packet INternet Groper) jẹ ohun elo ti o lo deede fun idanwo asopọ laarin awọn ọna meji lori nẹtiwọọki kan (Agbegbe Agbegbe Nẹtiwọọki (LAN) tabi Wide Agbegbe Nẹtiwọọki (WAN)). O lo ICMP (Ilana Ifiranṣẹ Iṣakoso Intanẹẹti) lati ṣe ibaraẹnisọrọ si awọn apa lori nẹtiwọọki kan.
Lati ṣe idanwo isopọmọ si oju ipade miiran, nirọrun pese IP rẹ tabi orukọ olupin, fun apẹẹrẹ.
$ ping 192.168.0.103 PING 192.168.0.103 (192.168.0.103) 56(84) bytes of data. 64 bytes from 192.168.0.103: icmp_seq=1 ttl=64 time=0.191 ms 64 bytes from 192.168.0.103: icmp_seq=2 ttl=64 time=0.156 ms 64 bytes from 192.168.0.103: icmp_seq=3 ttl=64 time=0.179 ms 64 bytes from 192.168.0.103: icmp_seq=4 ttl=64 time=0.182 ms 64 bytes from 192.168.0.103: icmp_seq=5 ttl=64 time=0.207 ms 64 bytes from 192.168.0.103: icmp_seq=6 ttl=64 time=0.157 ms ^C --- 192.168.0.103 ping statistics --- 6 packets transmitted, 6 received, 0% packet loss, time 5099ms rtt min/avg/max/mdev = 0.156/0.178/0.207/0.023 ms
O tun le sọ fun pingi lati jade lẹhin nọmba pàtó kan ti awọn apo-iwe ECHO_REQUEST, ni lilo asia -c bi o ti han.
$ ping -c 4 192.168.0.103 PING 192.168.0.103 (192.168.0.103) 56(84) bytes of data. 64 bytes from 192.168.0.103: icmp_seq=1 ttl=64 time=1.09 ms 64 bytes from 192.168.0.103: icmp_seq=2 ttl=64 time=0.157 ms 64 bytes from 192.168.0.103: icmp_seq=3 ttl=64 time=0.163 ms 64 bytes from 192.168.0.103: icmp_seq=4 ttl=64 time=0.190 ms --- 192.168.0.103 ping statistics --- 4 packets transmitted, 4 received, 0% packet loss, time 3029ms rtt min/avg/max/mdev = 0.157/0.402/1.098/0.402 ms
Traceroute jẹ iwulo laini aṣẹ fun wiwa ọna kikun lati eto agbegbe rẹ si eto nẹtiwọọki miiran. O tẹ nọmba ti awọn hops (olulana IP's) ni ọna yẹn ti o rin irin-ajo lati de ọdọ olupin ipari. O jẹ iwulo laasigbotitusita nẹtiwọọki rọrun-lati-lo lẹhin aṣẹ ping.
Ninu apẹẹrẹ yii, a n ṣe itọpa awọn apo-ipa ọna ti o gba lati inu eto agbegbe si ọkan ninu awọn olupin Google pẹlu adirẹsi IP 216.58.204.46.
$ traceroute 216.58.204.46 traceroute to 216.58.204.46 (216.58.204.46), 30 hops max, 60 byte packets 1 gateway (192.168.0.1) 0.487 ms 0.277 ms 0.269 ms 2 5.5.5.215 (5.5.5.215) 1.846 ms 1.631 ms 1.553 ms 3 * * * 4 72.14.194.226 (72.14.194.226) 3.762 ms 3.683 ms 3.577 ms 5 108.170.248.179 (108.170.248.179) 4.666 ms 108.170.248.162 (108.170.248.162) 4.869 ms 108.170.248.194 (108.170.248.194) 4.245 ms 6 72.14.235.133 (72.14.235.133) 72.443 ms 209.85.241.175 (209.85.241.175) 62.738 ms 72.14.235.133 (72.14.235.133) 65.809 ms 7 66.249.94.140 (66.249.94.140) 128.726 ms 127.506 ms 209.85.248.5 (209.85.248.5) 127.330 ms 8 74.125.251.181 (74.125.251.181) 127.219 ms 108.170.236.124 (108.170.236.124) 212.544 ms 74.125.251.181 (74.125.251.181) 127.249 ms 9 216.239.49.134 (216.239.49.134) 236.906 ms 209.85.242.80 (209.85.242.80) 254.810 ms 254.735 ms 10 209.85.251.138 (209.85.251.138) 252.002 ms 216.239.43.227 (216.239.43.227) 251.975 ms 209.85.242.80 (209.85.242.80) 236.343 ms 11 216.239.43.227 (216.239.43.227) 251.452 ms 72.14.234.8 (72.14.234.8) 279.650 ms 277.492 ms 12 209.85.250.9 (209.85.250.9) 274.521 ms 274.450 ms 209.85.253.249 (209.85.253.249) 270.558 ms 13 209.85.250.9 (209.85.250.9) 269.147 ms 209.85.254.244 (209.85.254.244) 347.046 ms 209.85.250.9 (209.85.250.9) 285.265 ms 14 64.233.175.112 (64.233.175.112) 344.852 ms 216.239.57.236 (216.239.57.236) 343.786 ms 64.233.175.112 (64.233.175.112) 345.273 ms 15 108.170.246.129 (108.170.246.129) 345.054 ms 345.342 ms 64.233.175.112 (64.233.175.112) 343.706 ms 16 108.170.238.119 (108.170.238.119) 345.610 ms 108.170.246.161 (108.170.246.161) 344.726 ms 108.170.238.117 (108.170.238.117) 345.536 ms 17 lhr25s12-in-f46.1e100.net (216.58.204.46) 345.382 ms 345.031 ms 344.884 ms
MTR jẹ irinṣẹ idanimọ nẹtiwọọki laini-aṣẹ igbalode ti o ṣopọ iṣẹ-ti ping ati traceroute sinu ọpa aisan kan. Iṣagbejade rẹ ti ni imudojuiwọn ni akoko gidi, nipa aiyipada titi iwọ o fi jade kuro ni eto naa nipa titẹ q .
Ọna to rọọrun ti nṣiṣẹ mtr ni lati pese ni orukọ ogun tabi adiresi IP bi ariyanjiyan, bi atẹle.
$ mtr google.com OR $ mtr 216.58.223.78
linux-console.net (0.0.0.0) Thu Jul 12 08:58:27 2018 First TTL: 1 Host Loss% Snt Last Avg Best Wrst StDev 1. 192.168.0.1 0.0% 41 0.5 0.6 0.4 1.7 0.2 2. 5.5.5.215 0.0% 40 1.9 1.5 0.8 7.3 1.0 3. 209.snat-111-91-120.hns.net.in 23.1% 40 1.9 2.7 1.7 10.5 1.6 4. 72.14.194.226 0.0% 40 89.1 5.2 2.2 89.1 13.7 5. 108.170.248.193 0.0% 40 3.0 4.1 2.4 52.4 7.8 6. 108.170.237.43 0.0% 40 2.9 5.3 2.5 94.1 14.4 7. bom07s10-in-f174.1e100.net 0.0% 40 2.6 6.7 2.3 79.7 16.
O le ṣe idinwo nọmba awọn pings si iye kan pato ki o jade kuro ni mtr lẹhin awọn pings wọnyẹn, ni lilo asia -c bi o ti han.
$ mtr -c 4 google.com
ipa ọna jẹ iwulo laini aṣẹ fun iṣafihan tabi ifọwọyi tabili afisona IP ti eto Linux kan. O lo ni akọkọ lati tunto awọn ipa ọna aimi si awọn ọmọ-ogun kan pato tabi awọn nẹtiwọọki nipasẹ wiwo kan.
O le wo tabili afisona ekuro IP nipasẹ titẹ.
$ route Destination Gateway Genmask Flags Metric Ref Use Iface default gateway 0.0.0.0 UG 100 0 0 enp0s3 192.168.0.0 0.0.0.0 255.255.255.0 U 100 0 0 enp0s3 192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
Awọn ofin lọpọlọpọ lo wa ti o le lo lati tunto afisona. Eyi ni diẹ ninu awọn ti o wulo:
Ṣafikun ẹnu-ọna aiyipada si tabili afisona.
$ sudo route add default gw <gateway-ip>
Ṣafikun ipa ọna nẹtiwọọki kan si tabili afisona.
$ sudo route add -net <network ip/cidr> gw <gateway ip> <interface>
Paarẹ titẹsi ipa-ọna kan pato lati tabili afisona.
$ sudo route del -net <network ip/cidr>
Nmcli jẹ irọrun-lati-lo, ọpa laini aṣẹ ti a le kọ lati ṣe ijabọ ipo nẹtiwọọki, ṣakoso awọn isopọ nẹtiwọọki, ati iṣakoso NetworkManager.
Lati wo gbogbo awọn ẹrọ nẹtiwọọki rẹ, tẹ.
$ nmcli dev status DEVICE TYPE STATE CONNECTION virbr0 bridge connected virbr0 enp0s3 ethernet connected Wired connection 1
Lati ṣayẹwo awọn isopọ nẹtiwọọki lori eto rẹ, tẹ.
$ nmcli con show Wired connection 1 bc3638ff-205a-3bbb-8845-5a4b0f7eef91 802-3-ethernet enp0s3 virbr0 00f5d53e-fd51-41d3-b069-bdfd2dde062b bridge virbr0
Lati wo awọn isopọ ti n ṣiṣẹ nikan, ṣafikun Flag -a kan.
$ nmcli con show -a
Ṣiṣayẹwo Nẹtiwọọki ati Awọn irinṣẹ Itupalẹ Iṣe
netstat jẹ ọpa laini aṣẹ ti o ṣe afihan alaye ti o wulo gẹgẹbi awọn asopọ nẹtiwọọki, awọn tabili afisona, awọn iṣiro wiwo, ati pupọ diẹ sii, niti ilana eto nẹtiwọọki Linux. O wulo fun laasigbotitusita nẹtiwọọki ati itupalẹ iṣẹ ṣiṣe.
Ni afikun, o tun jẹ irinṣẹ n ṣatunṣe aṣiṣe iṣẹ nẹtiwọọki ipilẹ ti a lo lati ṣayẹwo iru awọn eto wo ni ngbọ lori awọn ibudo wo. Fun apeere, aṣẹ atẹle yoo fihan gbogbo awọn ibudo TCP ni ipo gbigbọ ati iru awọn eto wo ni wọn ngbọ lori wọn.
$ sudo netstat -tnlp Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:587 0.0.0.0:* LISTEN 1257/master tcp 0 0 127.0.0.1:5003 0.0.0.0:* LISTEN 1/systemd tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 1015/dovecot tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 1015/dovecot tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 1/systemd tcp 0 0 0.0.0.0:465 0.0.0.0:* LISTEN 1257/master tcp 0 0 0.0.0.0:53 0.0.0.0:* LISTEN 1404/pdns_server tcp 0 0 0.0.0.0:21 0.0.0.0:* LISTEN 1064/pure-ftpd (SER tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 972/sshd tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 975/cupsd tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 1257/master tcp 0 0 0.0.0.0:8090 0.0.0.0:* LISTEN 636/lscpd (lscpd - tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 1015/dovecot tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 1015/dovecot tcp6 0 0 :::3306 :::* LISTEN 1053/mysqld tcp6 0 0 :::3307 :::* LISTEN 1211/mysqld tcp6 0 0 :::587 :::* LISTEN 1257/master tcp6 0 0 :::110 :::* LISTEN 1015/dovecot tcp6 0 0 :::143 :::* LISTEN 1015/dovecot tcp6 0 0 :::111 :::* LISTEN 1/systemd tcp6 0 0 :::80 :::* LISTEN 990/httpd tcp6 0 0 :::465 :::* LISTEN 1257/master tcp6 0 0 :::53 :::* LISTEN 1404/pdns_server tcp6 0 0 :::21 :::* LISTEN 1064/pure-ftpd (SER tcp6 0 0 :::22 :::* LISTEN 972/sshd tcp6 0 0 ::1:631 :::* LISTEN 975/cupsd tcp6 0 0 :::25 :::* LISTEN 1257/master tcp6 0 0 :::993 :::* LISTEN 1015/dovecot tcp6 0 0 :::995 :::* LISTEN 1015/dovecot
Lati wo tabili afisona ekuro, lo asia -r (eyiti o jẹ deede si pipaṣẹ ipa ọna loke).
$ netstat -r Destination Gateway Genmask Flags MSS Window irtt Iface default gateway 0.0.0.0 UG 0 0 0 enp0s3 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 enp0s3 192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
Akiyesi: Biotilẹjẹpe Netstat jẹ ọpa nla, o ti di arugbo bayi (ti dinku), rirọpo rẹ ni aṣẹ ss eyiti o ti ṣalaye ni isalẹ.
ss (awọn iṣiro iho) jẹ iwulo laini aṣẹ aṣẹ lati ṣe iwadii awọn iho. O da awọn iṣiro iho silẹ ati ṣafihan alaye ti o jọra si netstat. Ni afikun, o fihan TCP diẹ sii ati alaye ipinle ti a fiwe si awọn ohun elo miiran ti o jọra.
Apẹẹrẹ ti n tẹle fihan bi a ṣe le ṣe atokọ gbogbo awọn ibudo TCP (awọn iho) ti o ṣii lori olupin kan.
$ ss -ta State Recv-Q Send-Q Local Address:Port Peer Address:Port LISTEN 0 100 *:submission *:* LISTEN 0 128 127.0.0.1:fmpro-internal *:* LISTEN 0 100 *:pop3 *:* LISTEN 0 100 *:imap *:* LISTEN 0 128 *:sunrpc *:* LISTEN 0 100 *:urd *:* LISTEN 0 128 *:domain *:* LISTEN 0 9 *:ftp *:* LISTEN 0 128 *:ssh *:* LISTEN 0 128 127.0.0.1:ipp *:* LISTEN 0 100 *:smtp *:* LISTEN 0 128 *:8090 *:* LISTEN 0 100 *:imaps *:* LISTEN 0 100 *:pop3s *:* ESTAB 0 0 192.168.0.104:ssh 192.168.0.103:36398 ESTAB 0 0 127.0.0.1:34642 127.0.0.1:opsession-prxy ESTAB 0 0 127.0.0.1:34638 127.0.0.1:opsession-prxy ESTAB 0 0 127.0.0.1:34644 127.0.0.1:opsession-prxy ESTAB 0 0 127.0.0.1:34640 127.0.0.1:opsession-prxy LISTEN 0 80 :::mysql :::* ...
Lati ṣe afihan gbogbo awọn isopọ TCP ti nṣiṣe lọwọ papọ pẹlu awọn aago wọn, ṣiṣe aṣẹ atẹle.
$ ss -to
NC (NetCat) tun tọka si bi awọn "" Ọbẹ Swiss Army ọbẹ ", jẹ ohun elo ti o lagbara ti a lo fun fere eyikeyi iṣẹ-ṣiṣe ti o ni ibatan si awọn ibọwọ TCP, UDP, tabi UNIX. O ti lo awọn isopọ TCP ṣiṣi, tẹtisi TCP alainidena ati Awọn ibudo UDP, ṣe ọlọjẹ ibudo pẹlu diẹ sii.
O tun le lo bi awọn aṣoju TCP ti o rọrun, fun idanwo daemon nẹtiwọọki, lati ṣayẹwo ti awọn ibudo latọna jijin ba de ọdọ ati pupọ diẹ sii. Siwaju si, o le bẹ nc pọ pẹlu aṣẹ pv lati gbe awọn faili laarin awọn kọnputa meji.
Apẹẹrẹ atẹle, yoo fihan bi o ṣe le ṣe ọlọjẹ atokọ ti awọn ibudo.
$ nc -zv server2.tecmint.lan 21 22 80 443 3000
O tun le ṣọkasi ibiti awọn ibudo bi o ti han.
$ nc -zv server2.tecmint.lan 20-90
Apẹẹrẹ atẹle n fihan bii o ṣe le lo nc lati ṣii asopọ TCP kan si ibudo 5000 lori olupin2.tecmint.lan, ni lilo ibudo 3000 bi ibudo orisun, pẹlu akoko ipari ti awọn aaya 10.
$ nc -p 3000 -w 10 server2.tecmint.lan 5000
Nmap (Mapper Nẹtiwọọki) jẹ ohun elo ti o lagbara ati pupọ ti o wapọ pupọ fun eto Linux/awọn alakoso nẹtiwọọki. O ti lo alaye ti o ṣajọ nipa agbalejo kan tabi ṣawari awọn nẹtiwọọki gbogbo nẹtiwọọki kan. Nmap tun lo lati ṣe awọn ọlọjẹ aabo, iṣayẹwo nẹtiwọọki ati wiwa awọn ibudo ṣiṣi lori awọn ọmọ-ogun latọna jijin ati pupọ diẹ sii.
O le ṣayẹwo ọlọpa kan nipa lilo orukọ olupin rẹ tabi adiresi IP, fun apẹẹrẹ.
$ nmap google.com Starting Nmap 6.40 ( http://nmap.org ) at 2018-07-12 09:23 BST Nmap scan report for google.com (172.217.166.78) Host is up (0.0036s latency). rDNS record for 172.217.166.78: bom05s15-in-f14.1e100.net Not shown: 998 filtered ports PORT STATE SERVICE 80/tcp open http 443/tcp open https Nmap done: 1 IP address (1 host up) scanned in 4.92 seconds
Ni omiiran, lo adirẹsi IP bi o ti han.
$ nmap 192.168.0.103 Starting Nmap 6.40 ( http://nmap.org ) at 2018-07-12 09:24 BST Nmap scan report for 192.168.0.103 Host is up (0.000051s latency). Not shown: 994 closed ports PORT STATE SERVICE 22/tcp open ssh 25/tcp open smtp 902/tcp open iss-realsecure 4242/tcp open vrml-multi-use 5900/tcp open vnc 8080/tcp open http-proxy MAC Address: 28:D2:44:EB:BD:98 (Lcfc(hefei) Electronics Technology Co.) Nmap done: 1 IP address (1 host up) scanned in 0.13 seconds
Ka awọn nkan ti o wulo wa ti o tẹle lori aṣẹ nmap.
- Bii a ṣe le Lo Awọn iwe afọwọkọ Nmap Script (NSE) ni Linux
- Itọsọna Wulo si Nmap (Scanner Security Security) ni Kali Linux
- Wa Gbogbo Awọn alejo IP Awọn adirẹsi IP Ti o sopọ lori Nẹtiwọọki ni Lainos
Awọn ohun elo Lookup DNS
pipaṣẹ ogun jẹ ohun elo ti o rọrun fun ṣiṣe awọn iṣawari DNS, o tumọ awọn orukọ alejo si awọn adirẹsi IP ati idakeji.
$ host google.com google.com has address 172.217.166.78 google.com mail is handled by 20 alt1.aspmx.l.google.com. google.com mail is handled by 30 alt2.aspmx.l.google.com. google.com mail is handled by 40 alt3.aspmx.l.google.com. google.com mail is handled by 50 alt4.aspmx.l.google.com. google.com mail is handled by 10 aspmx.l.google.com.
iwo (olufun alaye agbegbe) tun jẹ iwulo wiwa DNS miiran ti o rọrun, ti a lo lati beere alaye ti o jọmọ DNS gẹgẹbi A Record, CNAME, MX Record ati be be lo, fun apẹẹrẹ:
$ dig google.com ; <<>> DiG 9.9.4-RedHat-9.9.4-51.el7 <<>> google.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23083 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 13, ADDITIONAL: 14 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;google.com. IN A ;; ANSWER SECTION: google.com. 72 IN A 172.217.166.78 ;; AUTHORITY SECTION: com. 13482 IN NS c.gtld-servers.net. com. 13482 IN NS d.gtld-servers.net. com. 13482 IN NS e.gtld-servers.net. com. 13482 IN NS f.gtld-servers.net. com. 13482 IN NS g.gtld-servers.net. com. 13482 IN NS h.gtld-servers.net. com. 13482 IN NS i.gtld-servers.net. com. 13482 IN NS j.gtld-servers.net. com. 13482 IN NS k.gtld-servers.net. com. 13482 IN NS l.gtld-servers.net. com. 13482 IN NS m.gtld-servers.net. com. 13482 IN NS a.gtld-servers.net. com. 13482 IN NS b.gtld-servers.net. ;; ADDITIONAL SECTION: a.gtld-servers.net. 81883 IN A 192.5.6.30 b.gtld-servers.net. 3999 IN A 192.33.14.30 c.gtld-servers.net. 14876 IN A 192.26.92.30 d.gtld-servers.net. 85172 IN A 192.31.80.30 e.gtld-servers.net. 95861 IN A 192.12.94.30 f.gtld-servers.net. 78471 IN A 192.35.51.30 g.gtld-servers.net. 5217 IN A 192.42.93.30 h.gtld-servers.net. 111531 IN A 192.54.112.30 i.gtld-servers.net. 93017 IN A 192.43.172.30 j.gtld-servers.net. 93542 IN A 192.48.79.30 k.gtld-servers.net. 107218 IN A 192.52.178.30 l.gtld-servers.net. 6280 IN A 192.41.162.30 m.gtld-servers.net. 2689 IN A 192.55.83.30 ;; Query time: 4 msec ;; SERVER: 192.168.0.1#53(192.168.0.1) ;; WHEN: Thu Jul 12 09:30:57 BST 2018 ;; MSG SIZE rcvd: 487
Nslookup tun jẹ iwulo laini aṣẹ aṣẹ olokiki lati beere awọn olupin DNS mejeeji ni ibaraenisepo ati ti kii ṣe ibaraenisọrọ. O ti lo lati beere awọn igbasilẹ awọn orisun DNS (RR). O le wa igbasilẹ\"A" (adiresi IP) ti ibugbe bi o ti han.
$ nslookup google.com Server: 192.168.0.1 Address: 192.168.0.1#53 Non-authoritative answer: Name: google.com Address: 172.217.166.78
O tun le ṣe iṣawari wiwa ase yiyipada bi o ṣe han.
$ nslookup 216.58.208.174 Server: 192.168.0.1 Address: 192.168.0.1#53 Non-authoritative answer: 174.208.58.216.in-addr.arpa name = lhr25s09-in-f14.1e100.net. 174.208.58.216.in-addr.arpa name = lhr25s09-in-f174.1e100.net. Authoritative answers can be found from: in-addr.arpa nameserver = e.in-addr-servers.arpa. in-addr.arpa nameserver = f.in-addr-servers.arpa. in-addr.arpa nameserver = a.in-addr-servers.arpa. in-addr.arpa nameserver = b.in-addr-servers.arpa. in-addr.arpa nameserver = c.in-addr-servers.arpa. in-addr.arpa nameserver = d.in-addr-servers.arpa. a.in-addr-servers.arpa internet address = 199.180.182.53 b.in-addr-servers.arpa internet address = 199.253.183.183 c.in-addr-servers.arpa internet address = 196.216.169.10 d.in-addr-servers.arpa internet address = 200.10.60.53 e.in-addr-servers.arpa internet address = 203.119.86.101 f.in-addr-servers.arpa internet address = 193.0.9.1
Awọn atupale Packet Nẹtiwọọki Linux
Tcpdump jẹ agbara pupọ ati lilo nẹtiwọọki laini aṣẹ jakejado ti a lo. O ti lo lati mu ati itupalẹ awọn apo-iwe TCP/IP ti a tan kaakiri tabi gba lori nẹtiwọọki lori wiwo kan pato.
Lati mu awọn apo-iwe lati inu wiwo ti a fifun, ṣafihan rẹ nipa lilo aṣayan -i .
$ tcpdump -i eth1 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on enp0s3, link-type EN10MB (Ethernet), capture size 262144 bytes 09:35:40.287439 IP linux-console.net.ssh > 192.168.0.103.36398: Flags [P.], seq 4152360356:4152360552, ack 306922699, win 270, options [nop,nop,TS val 2211778668 ecr 2019055], length 196 09:35:40.287655 IP 192.168.0.103.36398 > linux-console.net.ssh: Flags [.], ack 196, win 5202, options [nop,nop,TS val 2019058 ecr 2211778668], length 0 09:35:40.288269 IP linux-console.net.54899 > gateway.domain: 43760+ PTR? 103.0.168.192.in-addr.arpa. (44) 09:35:40.333763 IP gateway.domain > linux-console.net.54899: 43760 NXDomain* 0/1/0 (94) 09:35:40.335311 IP linux-console.net.52036 > gateway.domain: 44289+ PTR? 1.0.168.192.in-addr.arpa. (42)
Lati mu nọmba kan pato ti awọn apo-iwe, lo aṣayan -c lati tẹ nọmba ti o fẹ sii.
$ tcpdump -c 5 -i eth1
O tun le mu ki o fipamọ awọn apo-iwe si faili kan fun itupalẹ nigbamii, lo Flag -w lati ṣalaye faili o wu.
$ tcpdump -w captured.pacs -i eth1
Wireshark jẹ olokiki, alagbara, wapọ ati rọrun lati lo irinṣẹ fun yiya ati itupalẹ awọn apo-iwe ni nẹtiwọọki ti a yipada-paati, ni akoko gidi.
O tun le fi data ti o ti mu silẹ si faili kan fun ayewo nigbamii. O ti lo nipasẹ awọn alabojuto eto ati awọn onise-ẹrọ nẹtiwọọki lati ṣe atẹle ati ṣayẹwo awọn apo-iwe fun aabo ati awọn idi laasigbotitusita.
Ka nkan wa “Awọn imọran 10 Lori Bii o ṣe le Lo Wireshark lati Itupalẹ Awọn apo-iṣẹ Nẹtiwọọki lati ni imọ siwaju sii nipa Wireshark”.
bmon jẹ alagbara, laini aṣẹ n ṣakiyesi nẹtiwọọki ti o da lori ati iwulo n ṣatunṣe aṣiṣe fun awọn eto bii Unix, o mu awọn eeka nẹtiwọọki ti o jọmọ ati tẹ wọn ni oju ni ọna kika ọrẹ eniyan. O jẹ igbẹkẹle igbẹkẹle ati abojuto munadoko bandwidth gidi ati iṣiro nkan oṣuwọn.
Ka nkan wa “bmon - Abojuto Nẹtiwọọki Bandwidth Alagbara kan ati Ọpa n ṣatunṣe aṣiṣe lati ni imọ siwaju sii nipa bmon”.
Awọn irinṣẹ Isakoso Firewall Linux
iptables jẹ ọpa laini aṣẹ fun tito leto, mimu, ati ṣayẹwo awọn tabili sisẹ apo-iwe IP ati ilana NAT. O lo lati ṣeto ati ṣakoso ogiriina Linux (Netfilter). O gba ọ laaye lati ṣe atokọ awọn ofin idanimọ apo ti o wa tẹlẹ; fikun tabi paarẹ tabi yipada awọn ofin idanimọ apo; ṣe atokọ awọn kika-ofin fun awọn ofin idanimọ apo.
O le kọ ẹkọ bi o ṣe le lo awọn Iptables fun awọn idi pupọ lati ọdọ awọn itọsọna wa ti o rọrun sibẹsibẹ ti o gbooro.
- Itọsọna Ipilẹ lori IPTables (Firewall Linux) Awọn imọran/Awọn pipaṣẹ
- 25 Awọn ofin Firewall iwulo IPtable Gbogbo Olutọju Linux yẹ ki o Mọ
- Bii o ṣe le Ṣeto ogiri ogiri Iptables lati muu Wiwọle Latọna jijin si Awọn Iṣẹ
- Bii a ṣe le Dena Awọn ibeere ICMP Ping si Awọn ọna Linux
Firewalld jẹ daemon ti o lagbara ati agbara lati ṣakoso ogiriina Linux (Netfilter), gẹgẹ bi awọn iptables. O nlo\"awọn agbegbe nẹtiwọọki" dipo INPUT, OUTPUT ati Awọn IWỌN IWAJU ninu awọn iptables. Lori awọn pinpin kaakiri Linux lọwọlọwọ bi RHEL/CentOS 7 ati Fedora 21+, a ti rọpo awọn iptables ni ina.
Lati bẹrẹ pẹlu firewalld, kan si awọn itọsọna wọnyi ti a ṣe akojọ rẹ si isalẹ:
- Awọn ofin ‘FirewallD’ Wulo lati Tunto ati Ṣakoso Firewall ni Lainos Bii a ṣe le Tunto ‘FirewallD’ ni RHEL/CentOS 7 ati Fedora 21 Bii o ṣe le Bẹrẹ/Duro ati Ṣiṣe/Mu FirewallD ati Firewall Iptables wa ni Linux
- Ṣiṣeto Samba ati Tunto ogiriinaD ati SELinux lati Gba Pinpin Faili lori Linux/Windows
Pataki: Awọn apẹrẹ tun wa ni atilẹyin ati pe o le fi sii pẹlu oluṣakoso package YUM. Sibẹsibẹ, o ko le lo Firewalld ati awọn iptables ni akoko kanna lori olupin kanna - o gbọdọ yan ọkan.
UFW jẹ olokiki ti a mọ ati aiyipada irinṣẹ iṣeto ni ogiriina lori Debian ati awọn kaakiri Ubuntu Linux. O ti lo oke mu/mu ogiriina eto, ṣafikun/paarẹ/yipada/tunto awọn ofin sisẹ apo-iwe ati pupọ diẹ sii.
Lati ṣayẹwo ipo ogiriina UFW, tẹ.
$ sudo ufw status
Ti ogiriina UFW ko ṣiṣẹ, o le muu ṣiṣẹ tabi mu ṣiṣẹ nipa lilo pipaṣẹ atẹle.
$ sudo ufw enable
Lati mu ogiriina UFW ṣiṣẹ, lo aṣẹ atẹle.
$ sudo ufw disable
Ka nkan wa\"Bii o ṣe le ṣeto Ogiriina UFW lori Ubuntu ati Debian" lati ni imọ siwaju sii UFW).
Ti o ba fẹ wa alaye diẹ sii nipa eto kan pato, o le kan si awọn oju-iwe eniyan rẹ bi o ti han.
$ man programs_name
Iyẹn ni gbogbo fun bayi! Ninu itọsọna okeerẹ yii, a ṣe atunyẹwo diẹ ninu awọn irinṣẹ laini pipaṣẹ ti a lo julọ ati awọn ohun elo fun iṣakoso nẹtiwọọki ni Lainos, labẹ awọn isọri oriṣiriṣi, fun awọn alabojuto eto, ati pe o wulo bakanna si awọn alakooso nẹtiwọọki kikun/awọn onimọ-ẹrọ.
O le pin awọn ero rẹ nipa itọsọna yii nipasẹ fọọmu asọye ni isalẹ. Ti a ba padanu eyikeyi lilo nigbagbogbo ati awọn irinṣẹ nẹtiwọọki Nẹtiwọọki pataki/awọn ohun elo tabi alaye ti o ni ibatan to wulo, tun jẹ ki a mọ.