Darkstat - Mai Binciken Traffic na Hanyar Sadarwar Yanar Gizo na Linux


Darkstat dandamali ne na giciye, mai nauyi, mai sauƙi, kayan aikin ƙididdiga na cibiyar sadarwa na ainihi wanda ke ɗaukar zirga-zirgar hanyar sadarwa, ƙididdige ƙididdiga game da amfani, kuma yana ba da rahotanni akan HTTP.

  • Sabar sabar gidan yanar gizo mai haɗe-haɗe tare da aikin matsawa.
  • Mai ɗauka, zaren guda ɗaya kuma ingantaccen mai nazarin hanyoyin sadarwa na tushen yanar gizo.
  • Haɗin yanar gizon yana nuna zane-zane na zirga-zirga, rahotanni kowane mai watsa shiri da tashar jiragen ruwa na kowane mai watsa shiri.
  • Yana goyan bayan asynchronous reverse DNS ƙuduri ta amfani da tsarin yaro.
  • Tallafi don yarjejeniya ta IPv6.

  • libpcap – ɗakin karatu mai ɗaukar hoto C/C++ don kama zirga-zirgar hanyar sadarwa.

Kasancewa ƙananan girman, yana amfani da ƙananan albarkatun ƙwaƙwalwar ajiyar tsarin kuma yana da sauƙin shigarwa, daidaitawa da amfani a cikin Linux kamar yadda aka bayyana a ƙasa.

Yadda ake Sanya Darkstat Network Traffic Analyzer a Linux

1. Sa'ar al'amarin shine, ana samun darkstat a cikin ma'ajin software na rarrabawar Linux na yau da kullum kamar RHEL/CentOS da Debian/Ubuntu.

$ sudo apt-get install darkstat		# Debian/Ubuntu
$ sudo yum install darkstat		# RHEL/CentOS
$ sudo dnf install darkstat		# Fedora 22+

2. Bayan shigar da darkstat, kuna buƙatar saita shi a cikin babban fayil ɗin sanyi /etc/darkstat/init.cfg.

$ sudo vi /etc/darkstat/init.cfg

Lura cewa don manufar wannan koyawa, za mu yi bayanin wajibi ne kawai da kuma mahimman zaɓuɓɓukan daidaitawa don ku fara amfani da wannan kayan aikin.

Yanzu canza darajar START_DARKSTAT daga no zuwa yes kuma saita yanayin duhun zai saurara tare da zaɓin INTERFACE.

Hakanan kuma DIR = ”/var/lib/darkstat” da DAYLOG=”–daylog darkstat.log” zažužžukan don tantance kundin adireshi da fayil ɗin shiga bi da bi.

START_DARKSTAT=yes
INTERFACE="-i ppp0"
DIR="/var/lib/darkstat"
# File will be relative to $DIR:
DAYLOG="--daylog darkstat.log"

3. Fara darkstat daemon don yanzu kuma kunna shi don farawa a tsarin boot kamar haka.

------------ On SystemD ------------ 
$ sudo systemctl start darkstat
$ sudo /lib/systemd/systemd-sysv-install enable darkstat
$ sudo systemctl status darkstat

------------ On SysV Init ------------
$ sudo /etc/init.d/darkstat start
$ sudo chkconfig darkstat on
$ sudo /etc/init.d/darkstat status

4. Ta hanyar tsoho, darkstat yana sauraron tashar jiragen ruwa 667, don haka buɗe tashar jiragen ruwa akan Tacewar zaɓi don ba da damar shiga.

------------ On FirewallD ------------
$ sudo firewall-cmd --zone=public --permanent --add-port=667/tcp
$ sudo firewall-cmd --reload

------------ On IPtables ------------
$ sudo iptables -A INPUT -p udp -m state --state NEW --dport 667 -j ACCEPT
$ sudo iptables -A INPUT -p tcp -m state --state NEW --dport 667 -j ACCEPT
$ sudo service iptables save

------------ On UFW Firewall ------------
$ sudo ufw allow 667/tcp
$ sudo ufw reload

5. A ƙarshe, shiga cikin mahaɗin yanar gizo na darkstat ta zuwa URL http://Server-IP:667.

Kuna iya sake loda hotuna ta atomatik ta danna kan da off maɓallan.

Sarrafa Darkstat Daga Layin Umurni a cikin Linux

Anan, zamuyi bayanin wasu mahimman misalai na yadda zaku iya sarrafa darkstat daga layin umarni.

6. Don tattara ƙididdiga na cibiyar sadarwa akan ƙirar eth0, zaku iya amfani da tutar -i kamar yadda ke ƙasa.

$ darkstat -i eth0

7. Don hidimar shafukan yanar gizo akan takamaiman tashar jiragen ruwa, haɗa da alamar -p kamar wannan.

$ darkstat -i eth0 -p 8080

8. Don sa ido kan kididdigar cibiyar sadarwa don sabis ɗin da aka bayar, yi amfani da -f ko tuta ta tace. Ƙayyadadden bayanin tacewa a cikin misalin da ke ƙasa zai kama zirga-zirgar da ke da alaƙa da sabis na SSH.

$ darkstat -i eth0 -f "port 22"

Ƙarshe amma ba kalla ba, idan kuna son rufe darkstat ƙasa a hanya mai tsabta; ana ba da shawarar aika SIGTERM ko siginar SIGINT zuwa tsarin iyaye duhu.

Da farko, sami ID na tsarin iyaye na duhustat (PPID) ta amfani da umarnin pidof:

$ pidof darkstat

Sannan kashe tsarin kamar haka:

$ sudo kill -SIGTERM 4790
OR
$ sudo kill -15 4790

Don ƙarin zaɓuɓɓukan amfani, karanta ta cikin ma'anar darkstat:

$ man darkstat

Hanyar Magana: Shafin Farko na Darkstat

Hakanan kuna iya son karanta labarai masu alaƙa akan sa ido kan hanyar sadarwar Linux.

  1. Kayan Aikin Layin Umurni 20 don Kula da Ayyukan Linux
  2. 13 Kayan aikin Kula da Ayyukan Linux
  3. Netdata - Kayan aikin Kula da Ayyukan Linux na Lokaci-lokaci
  4. BCC - Kayan aikin daɗaɗɗa don Ayyukan Linux da Kula da hanyar sadarwa

Shi ke nan! A cikin wannan labarin, mun bayyana yadda ake shigarwa da amfani da darkstat a cikin Linux don kama zirga-zirgar hanyar sadarwa, ƙididdige amfani, da kuma nazarin rahotanni akan HTTP.

Kuna da wasu tambayoyi da za ku yi ko tunanin da za ku raba, yi amfani da fam ɗin sharhin da ke ƙasa?