![]() |
PCDVD¼Æ¦ì¬ì§Þ°Q½×°Ï
(https://www.pcdvd.com.tw/index.php)
- ¨t²Î²Õ¥ó
(https://www.pcdvd.com.tw/forumdisplay.php?f=19)
- - ¸Ë¤@±i30´X¸Uªººô¥d»Ýn¤°»ò¼Ëªº¥D¾÷°t³Æ¡H
(https://www.pcdvd.com.tw/showthread.php?t=653444)
|
---|
¦pªG¤½¥qºÊ±±ºô¸ô«Ê¥]¥Î¦øªA¾¹
¨ºn¬Ý¤½¥qªºtraffic °÷¤£°÷¤j ¡A´¿¸g¥Õ·ö¸Ë¤@Óintel Äê¥d¥h°µsniffer °¨¤W¿N¦º¡A¬Ý¼Ó¥Dþ±i¡A·Pı¹³¬O³sþºØ·|³Qrouter drop «Ê¥]ªº«Ê¥]³£¥i¥HÂ^¨ú¶W°ªÀÉsniffer ¯Åªººô¥d©Ò¥Hhdd¸ò¥D¾÷n§Ë¦n¤@ÂI¤£µMcpu¥ú¤ÀªR«Ê¥]³£¨Ó¤£¤Î¤F¡C |
¨þ¨þ~~«ØÄ³�**û¦n¤@ÂIªºPOWER...
¦pªG¤£©È§nªº¸ÜZIPPY 400W¥i¥H¦Ò¼{... |
30¸U...¶â..¨S¦³¨ä¥¦µwÅ骺¸Ñ¨M¤è®×¶Ü?
|
ÁÂÁ¦U¦ì¦^À³¡I
µwºÐ³¡¤À¡A¦]¬°¬O´ú¸Õ¾÷¡A©Ò¥H¸ê®Æ¤£«n ¸Ó¾÷¾¹¥Dnªº¥Î³~¦³ÂI¹³¸ôÃäºÊµø¾¹ ¦Ü©ó³o±i¥d¬°¦ó³o»ò¶Q... ¯Ã¦èÄõì¼t¨ºÃä¨îqªº»ù¿ú¤@¶}©l´N¬O³o»ò¶Q ¥dªº¥Î³~¬O¡G«Ê¥]Â^¨ú»P¶Ç°e ¸¹ºÙ *100% data capture Security can only be assured if 100% of all Network data is inspected Standard NICs drop significant amounts of data This is especially important to security agencies and lawful intercept companies *CPU Off Load Standard NICs swamp the CPU with programming demands Endace Interface Cards off load this task allowing application programmes to run much faster The user's experience is a much faster systems that doesn¡¦t crash or lock up *Full line rate Data volumes are ever increasing and any restriction in the network acts as bottleneck Standard Network Interface Cards are such a bottle neck often restricting the system performance to half or a quarter of the available bandwidth Endace technologies ensures maximum use of the available bandwidth as it removes all bottlenecks *Hardware acceleration of software Additional processing for the most demanding customers Pre-processing tasks like filtering, searching, reconstruction and matching greatly increases system performance and throughput and is now a must have for High End Network Security Systems |
¨S¦³¥´****ªº·N«ä¡A¦]¬°§Ú¤£¬O·~°È¡A¦Ó¥B³o¥dªº¥«³õ¬O¦b¬Y¨Ç¯S©w¤½¥q¾÷Ãöªº¯S©w¥Î³~¤W
¤@¡B«Ê¥]ºI¨ú¡XLibpcap&Wincap(For user-level) »¡©ú:¥ô¦ó¥Ñºô¸ô¶Ç¿éªº¸ê®Æ³£¥i¥Ñ³oÓ³nÅé§@ºI¨úªº°Ê§@¡A¤§«á¦A§@¨ä¥L¥Î³~¡C (www.tcpdump.org) ¤G¡Bºô¸ôºÊ±±¤Î¸ê®ÆÀò±o¡XTcpdump(Data acquisition and Network Monitoring) »¡©ú:¥i§â¸ê®ÆË¤J»Ýnªº¦a¤è¡C(www.tcpdump.org) ¤T¡B§Y®Éªº°»´ú¤J«I(passive network monitoring)¡XBRO »¡©ú:¥i§@¦¨¤@ºØ¨t²Î¥Î¨Ó³Q°Ê¦¡ªººô¸ôºÊ¬Ý,§Y®Éªº°»´ú¥X¤J«I¦æ¬°¡C(bro-ids.org/) Some sites may wish to run a commercial IDS as their front-line of defense, and then also run Bro as a way to: Verify the results of the commercial IDS / defense-in-depth Attain richer forensics capabilities Provide policy-checking capabilities not facilitated by the commercial IDS Experiment with new approaches and incorporate leading-edge research ¥|¡BATM & PoS Ocx ªººÊ±±¤ÎPCAP¬É±©Ò»Ý¤§Driver,Libraries,Utilities and Analysis³nÅé¡XCoralReef »¡©ú:¥¦¥i§@¬°¦bATM¤Wµ¥ºô¸ô®»¨ú«Ê¥]©ÎºÊ¬Ý¥\¯à®Éªº¬É±¡C(www.caida.org/tools/measurement/coralreef) ¤¡Bºô¸ô¬y¶q¤ÀªR(sniffer)¡Xethereal »¡©ú:¥Î«Ê¥]®»¨ú¤§¤è¦¡´ú¥Xºô¸ô²{¤µ¤§¬y¶q¨Ã¤ÀªR¡C(www.ethereal.com) ¤»¡BRTFMªº«×¶qºÞ²z¤Î¸ê®Æ¬y¤§¤ÀªR¡XNeTraMet »¡©ú:(www2 auckland.ac.nz/net/NeTraMet) ¤C¡B IDS¡Xsnort »¡©ú:¨¾¤J«I°»´ú¤§³nÅé¡A¥i¥[¥H¥]¸Ë¦¨IDS¨Ñºô¸ô¨¾Àb«È¤J«I¤§²Ä¤@¹D¨¾½u¡C(www.snort.org) ¤K¡BTCP¤ÀªR¤u¨ã¡Xtcptrace »¡©ú:§@¬°tcp¤ÀªR¤§¤u¨ã¡C(liq.cs.ohiou.edu/software/tcptrace/tcptrace.html) ¤E¡B§@¬°ºô¸ô¬y¶qªº±´°w¡A¥iÅã¥Üºô¸ô¤§¥Î³~¡Xntop »¡©ú:Ãþ¦üUNIXªºTOP¡C(www.ntop.org) ¤Q¡B§@¬°¬y¶q¤§µo´²¾¹(base on libpcap)¡Xfprobe »¡©ú:¥i§@¬°netflowªºµo´²¾¹¡A´£¨Ñ¤@ºØnetflow¡C (fprobe.sourceforge.net) ¤Q¤@¡B¹ïtcpdump©Ò®»¨ú¨ìªºÀɮצA»s§@¤@¦¸¡Xtcpreplay »¡©ú: (tcpreplay.sourceforge.net)( http://tcpreplay.synfin.net/trac/) ¤Q¤G¡B«Ê¥]²£¥Í¾¹¡Xlibnet »¡©ú: (libnet.packetfactory.net/libnet) ¤Q¤T¡B¥i´£¨Ñ§@¦¨Qosªº«×¶q¤u¨ã¡Xoreneta »¡©ú:¥i¹ï¨âÂI¤§¶¡ªºQos§@¤@Ó«×¶q¤u¨ã¡C(oreneta.ccaba.upc.es) ¤Q¥|¡Bºô¸ô«Ê¥]ªº°¼¿ý¡X ª½±µ§Q¥ÎDAG¥dªºÀ³¥Îµ{¦¡§@ºô¸ô«Ê¥]ªº°¼¿ý |
¤p§Ì´X¦~«e¤]ª±¹LÃþ¦üªºªF¦è¡A¤£¹L¨S¥Î¨ì³o»ò¦nªº¥d´N¬O¡A¦ý¬O¼Ó¥D²{¦b»¡n²Õ´ú¸Õ¾÷¡A¬On´ú¸Õ¤°»ò¡H¦pªG¥u¬O´ú´ú¥\¯à¡A¨º·íµMÀH«K²Õ¤@¥x¥i´¡PCI-Xªº¾÷¾¹¬Ý¬Ý³nµwÅé¥i¤£¥i¥H¶]§Y¥i¡A¦ý¬O¦pªGn´úThroughputµ¥À£¤O´ú¸Õ¡A³o¼Ëªº¾÷¾¹¤p§Ìı±o¿ý¤£¤F¦h¤[¡A¥d¨SÃz¾÷¾¹·|¥ýÃz¡C
¥H«e¦b°µÃþ¦üªºÀ£¤O´ú¸Õ¡A¤j³£¬OÉÓ¥i¥H¨gÄé«Ê¥]ªº»ö¾¹¡AµM«á´úSwitch¨ìºô¥d¨ì°¼¿ý¥D¾÷¬ö¿ýªº¯à@¡A³q±`²~ÀV¤£¤@©w¬O·|¦bºô¥d¤W¡A¦³®ÉSwitch´N¥ý±¾¤F¡A¦³®É¬O°¼¿ý¥D¾÷¼µ¤£¦í¡A¤£¹L³o³£n¸Õ¹L¤~·|ª¾¹D¡C |
³oºØ¥d´N¥Î¦øªA¾¹¥D¾÷ªO
I/O®Ä¯à¤ñ¸ûOK!@@ |
¤Þ¥Î:
³o¥d¥xÆW¶Rªº¨ì¶Ü??¦n¹³¤£¿ù£z |
¼Ó¥D,¥i¥H½Ð§Aµ¹´X±i¹Ï¬Ý¤@¤U¶Ü? ¨S¬Ý¹L³æ»ù³o»ò°ª¤¶±¥d.
|
§Ú·Q°Ý¤@¤U~~¤@Áû146gb scsi¤¶±~~15k~~¦h¤Ö¿ú??
|
©Ò¦³ªº®É¶¡§¡¬°GMT +8¡C ²{¦bªº®É¶¡¬O09:37 PM. |
vBulletin Version 3.0.1
powered_by_vbulletin 2025¡C