- I-Wireshark iyi-analyzer yephakethe yenethiwekhi yomthombo ovulekile yamahhala.
- Ikuvumela ukuthi uthwebule futhi uhlaziye ithrafikhi evela ezindaweni ezahlukene zenethiwekhi ngesikhathi sangempela.
- Inikeza izinketho zokuhlunga ukuze ubuke ithrafikhi ethile njenge-TCP evela kumakheli athile we-IP.
- Ilungiselela ukuthunyelwa kwedatha yephakheji kumafomethi angafundwa umuntu njenge-CSV, i-XML, nombhalo.
Iyini iWireshark futhi ingeyani?
UWireshark ungumbungazi ovelele
I-Wireshark iyiphunga lephakethe lomthombo wamahhala nelivulekile elisetshenziselwa ukuxazulula izinkinga zenethiwekhi, ukuhlaziya, nokuhlola ukuphepha. Thatha idatha ku-Ethernet yekhompyutha, i-Wi-Fi, i-PPP/HDLC, nezinye izixhumi ezibonakalayo. I-Wireshark ingasetshenziswa ukuhlola ithrafikhi ekhona noma ukuhlaziya izingodo zokuxhumana zomlando phakathi kwamasistimu.
I-Wireshark yaziwa nangokuthi i-Ethereal (igama eyayinalo ngaphambi kokuthi iqanjwe kabusha ngokuthi i-Wireshark), kodwa igama lamanje lizosetshenziswa kulesi sihloko.
Thatha idatha kusuka ku-Ethernet yekhompyutha, i-Wi-Fi, i-PPP/HDLC, nezinye izixhumi ezibonakalayo.
I-Wireshark iyi-analyzer yephakethe lenethiwekhi, okusho ukuthi ingakwazi ukuthwebula idatha kusuka ku-Ethernet yekhompyutha, i-Wi-Fi, nezinye izixhumi ezixhunyanisiwe.
I-Wireshark ingasetshenziswa ukuthwebula ithrafikhi kunoma yisiphi isixhumi esibonakalayo ohlelweni. Ungakwazi futhi ukuthwebula izixhumanisi zokusebenzelana eziningi ngesikhathi esisodwa futhi uzihlanganise zibe ukusakaza okukodwa okubonakalayo. Ithuluzi lisekela izinhlobo eziningi zokuxhunywa kwenethiwekhi, njengezixhumanisi ze-serial ye-PPP/HDLC (ngokulawula imodemu noma ngaphandle kwayo), i-Ethernet (kanye ne-IEEE 802), amanethiwekhi amabhuloho e-FDDI/Ethernet, ama-adaptha e-ATM LANE/FR/ATM, njll., kodwa hhayi i-Token Ring noma i-Frame Relay ngoba lezi zivumelwano zisebenzisa Uhlu Lokulawula Ukufinyelela (Arkls okwamanje olungasekelwe yi-Wire).
Ungakwazi ukuzulazula ngokuhlanganyela kudatha yokuthwebula yesikhathi sangempela usebenzisa ibha yokuskrola noma ngokuchofoza kunoma iyiphi iphakheji futhi ubuke imininingwane yayo.
Ungaphinda uchofoze egameni lesixhumi esibonakalayo senethiwekhi ukuze ubuke kuphela amaphakethe athwetshulwe yileso sixhumi esibonakalayo, kunokuba ubuke wonke amaphakethe athwetshulwe yizo zonke izixhumanisi.
Ivumela izinketho ezimbalwa zokuhlunga, okuhlanganisa ukuthwebula kuphela ithrafikhi ye-TCP ekhelini elithile le-IP.
I-Wireshark iyithuluzi elivulekile elikuvumela ukuthi uthwebule futhi uhlaziye ithrafikhi yenethiwekhi. Noma ubani angayisebenzisa, kodwa iwusizo kakhulu kubaphathi benethiwekhi nabanye ochwepheshe abadinga ukuxazulula izinkinga zamanethiwekhi abo.
I-Wireshark inezici ezimbalwa eziyenza ibe ithuluzi elinamandla lokuthwebula nokuhlaziya ithrafikhi yenethiwekhi:
- Ungakwazi ukuhlunga ithrafikhi engadingeki ngokucacisa ikheli lasesizindeni se-inthanethi lomthumeli noma lomamukeli. Isibonelo, uma ufuna ukubona kuphela amaphakethe e-TCP asuka kukhompyutha yakho (ikheli lasesizindeni se-inthanethi 10.0.0.1) eya kwenye ikhompyutha kunethiwekhi yangakini (ikheli lasesizindeni se-inthanethi 10.0.0.2), uzosebenzisa lesi sisho sesihlungi: tcp port 80 host 10.
Abasebenzisi bangathumela amaphakethe kumbhalo, CSV noma amafayela e-XML futhi bayakwazi ukufunda idatha yephakethe ngefomethi ye-hexadecimal kanye neyunithi yezinhlamvu ze-ASCII.
Ungasebenzisa i-Wireshark ukuthumela amaphakethe kumbhalo, i-CSV, noma amafayela e-XML . Ingafunda idatha yamaphakethe ngefomethi ye-hexadecimal, kanye nezintambo ze-ASCII.
Ifomethi ye-CSV isetshenziselwa amaspredishithi nezizindalwazi, kuyilapho i-XML (Ulimi Lwemakhaphu Enwetshiwe) isetshenziselwa ukudlulisa idatha phakathi kwezinhlelo zokusebenza ezinkundleni ezihlukahlukene. I-Hexadecimal ibhekisela ohlelweni lokumelela izinombolo kanambambili olusebenzisa izimpawu ezihlukene eziyi-16, u-0-9 kanye no-A-F (osonhlamvukazi). I-ASCII imele i-American Standard Code for Information Interchange; Kuyisistimu yokubhala ikhodi enikeza uhlamvu ngalunye kukhibhodi inani eliphelele phakathi kuka-0 no-127.
Uhlelo luyithuluzi elihle kakhulu lokuqapha ithrafikhi yenethiwekhi.
I-Wireshark iyi-packet yomthombo ovulekile kanye ne -network protocol analyzer . Ingasetshenziswa ekuxazululeni izinkinga, ekuhlaziyeni nasekuqeqesheni. I-Wireshark ingakusiza:
- Thwebula idatha ebukhoma kusuka kusixhumi esibonakalayo senethiwekhi
- Hlola ifayela lokuthwebula ungaxhunyiwe ku-inthanethi noma nge-GUI.
Amasevisi ahlinzekwa i-Wireshark sniffer
I-Wireshark ingumhlaziyi wephrothokholi yenethiwekhi esetshenziselwa ukuxazulula izinkinga, ukuhlaziya, ukuthuthukiswa kwesoftware kanye nokuxhumana, kanye nemfundo. Izinkonzo zayo eziyinhloko zihlanganisa:
Ukuthwebula ithrafikhi yenethiwekhi: I-Wireshark ingakwazi ukuthwebula ithrafikhi yenethiwekhi yesikhathi sangempela kusuka kuzixhumi ezibonakalayo nezibonakalayo.
Ukuhlaziywa kwephrothokholi: Kungachaza futhi kuhlaziye amaphrothokholi enethiwekhi ahlukene bese kuwabonisa ngefomethi efundeka kalula.
Ukuxazulula izinkinga zenethiwekhi: I-Wireshark isiza ekuboneni nasekuxazululeni izinkinga zenethiwekhi, okuhlanganisa ukwehluleka kwe-DNS, ukubambezeleka kwenethiwekhi nezinkinga zokuxhumeka, njll.
Ukuphepha: Kungasetshenziswa ukuthola izinsongo zokuphepha, okuhlanganisa i-malware, amagciwane, kanye nokuziphatha kwenethiwekhi okungavamile.
Izibalo zenethiwekhi: I-Wireshark isiza ekukhiqizeni imibiko enemininingwane ngezibalo zenethiwekhi futhi ingathwebula amaphakethe emishinini ekude.
Isiphetho
Ekuphetheni, i-Wireshark iyithuluzi elinamandla lokuqapha ithrafikhi yenethiwekhi. Ingasetshenziswa ekuxazululeni izinkinga noma nje ukuze ujabule. Uzothola ukuthi inezici eziningi ezenza kube lula ukuzisebenzisa nokuziqonda, noma ngabe awuyena uchwepheshe kwezokuxhumana , isayensi yamakhompyutha, noma izinhlelo.
