I mea e kālailai ai i ke kaʻa pūnaewele, pono e hoʻouna i ka ʻeke pūnaewele iā NTOP/NPROBE a i ʻole Out-of-band Network Security and Monitoring Tools. Aia ʻelua mau hoʻonā i kēia pilikia:
Ke aniani ʻana o ke awa(ʻike ʻia hoʻi ʻo SPAN)
Pākuʻi Pūnaewele(ʻike ʻia hoʻi ʻo Replication Tap, Aggregation Tap, Active Tap, Copper Tap, Ethernet Tap, a pēlā aku.)
Ma mua o ka wehewehe ʻana i nā ʻokoʻa ma waena o nā hoʻonā ʻelua (Port Mirror a me Network Tap), he mea nui e hoʻomaopopo pehea e hana ai ka Ethernet. Ma 100Mbit a ma luna, ʻōlelo pinepine nā kikowaena ma ka duplex piha, ʻo ia hoʻi, hiki i kekahi kikowaena ke hoʻouna (Tx) a loaʻa (Rx) i ka manawa like. ʻO ke ʻano kēia ma kahi kaula 100 Mbit i hoʻopili ʻia i hoʻokahi kikowaena, ʻo ka nui o ke kaʻa pūnaewele e hiki ai i kekahi kikowaena ke hoʻouna/loaʻa (Tx/Rx)) he 2 × 100 Mbit = 200 Mbit.
ʻO ka Port mirroring he hana hou ʻana o ka packet, ʻo ia hoʻi ke kuleana kino o ka hāmeʻa pūnaewele no ke kope ʻana i ka packet i ke awa i hoʻopili ʻia.
ʻO ke ʻano kēia, pono ka hāmeʻa e hana i kēia hana ma ka hoʻohana ʻana i kekahi kumuwaiwai (e like me ka CPU), a e kope ʻia nā kuhikuhi kaʻa ʻelua i ka awa like. E like me ka mea i ʻōlelo ʻia ma mua, ma kahi loulou duplex piha, ʻo ia hoʻi
A -> B a me B -> A
ʻAʻole e ʻoi aku ka huina o A ma mua o ka wikiwiki o ka pūnaewele ma mua o ka nalowale ʻana o ka packet. ʻO kēia no ka mea ʻaʻohe wahi e kope ai i nā packets. Ua ʻike ʻia he ʻenehana maikaʻi loa ka hoʻololi ʻana i ke awa no ka mea hiki ke hana ʻia e nā kuapo he nui (akā ʻaʻole nā mea āpau), no ka mea ʻo ka hapa nui o nā kuapo me ka hemahema o ka nalowale o ka packet, inā ʻoe e nānā i kahi loulou me ka ukana ma luna o 50%, a i ʻole ke aniani i nā awa ma kahi awa wikiwiki (e laʻa me ke aniani ʻana i nā awa 100 Mbit ma kahi awa 1 Gbit). ʻAʻole e haʻi ʻia he pono paha ka hoʻololi ʻana i nā kumuwaiwai kuapo i ka hoʻololi ʻana, kahi e hoʻouka ai i ka hāmeʻa a hoʻohaʻahaʻa i ka hana hoʻololi. E hoʻomaopopo hiki iā ʻoe ke hoʻohui i 1 awa i hoʻokahi awa, a i ʻole 1 VLAN i hoʻokahi awa, akā ʻaʻole hiki iā ʻoe ke kope i nā awa he nui i 1. (No laila e like me ke aniani packet) ua nalowale.
He TAP Pūnaewele (Poʻo Komo Terminal)he mea hana lako hana piha ʻole ia, hiki ke hopu i ke kaʻa ma kahi pūnaewele. Hoʻohana pinepine ʻia ia e nānā i ke kaʻa ma waena o ʻelua mau wahi i ka pūnaewele. Inā he uwea kino ka pūnaewele ma waena o kēia mau wahi ʻelua, ʻo kahi TAP pūnaewele paha ke ala maikaʻi loa e hopu ai i ke kaʻa.
ʻEkolu mau awa ko ka pūnaewele TAP: he awa A, he awa B, a he awa monitor. No ke kau ʻana i kahi tap ma waena o nā kiko A a me B, ua pani ʻia ke kaula pūnaewele ma waena o ke kiko A a me ke kiko B me nā kaula ʻelua, hoʻokahi e hele ana i ke awa A o ka TAP, ʻo kekahi e hele ana i ke awa B o ka TAP. Hoʻouna ka TAP i nā kaʻa āpau ma waena o nā kiko pūnaewele ʻelua, no laila ua pili mau lākou kekahi i kekahi. Kope pū ka TAP i ke kaʻa i kona awa monitor, no laila e hiki ai i kahi mea loiloi ke hoʻolohe.
Hoʻohana pinepine ʻia nā TAP Pūnaewele e nā mea nānā a me nā mea hōʻiliʻili e like me APS. Hiki ke hoʻohana ʻia nā TAP i nā polokalamu palekana no ka mea ʻaʻole lākou e hoʻopilikia, ʻaʻole hiki ke ʻike ʻia ma ka pūnaewele, hiki ke hana me nā pūnaewele full-duplex a me nā pūnaewele i kaʻana like ʻole ʻia, a e hele pinepine i waena o ke kaʻa ʻoiai inā e pau ka hana ʻana o ka tap a nalowale paha ka mana.
ʻOiai ʻaʻole loaʻa nā awa Network Taps akā hoʻouna wale, ʻaʻohe manaʻo o ke kuapo i ka mea e noho ana ma hope o nā awa. ʻO ka hopena, hoʻolaha ia i nā packets i nā awa āpau. No laila, inā ʻoe e hoʻopili i kāu mea nānā i ke kuapo, e loaʻa i kēlā mea nā packets āpau. E hoʻomaopopo he hana kēia ʻano hana inā ʻaʻole hoʻouna ka mea nānā i kekahi packet i ke kuapo; inā ʻaʻole, e manaʻo ke kuapo ʻaʻole no ia mea nā packets i kāʻei ʻia. I mea e hoʻokō ai i kēlā, hiki iā ʻoe ke hoʻohana i kahi kaula pūnaewele kahi āu i hoʻopili ʻole ai i nā kaula TX, a i ʻole e hoʻohana i kahi interface pūnaewele IP-less (a me DHCP-less) ʻaʻole hoʻouna i nā packets. ʻO ka hope loa e hoʻomaopopo inā makemake ʻoe e hoʻohana i kahi tap no ka nalowale ʻole o nā packets, a laila mai hoʻohui i nā kuhikuhi a hoʻohana paha i kahi kuapo kahi i lohi ai nā kuhikuhi i kāʻei ʻia (e laʻa me 100 Mbit) ma mua o ke awa hoʻohui (e laʻa me 1 Gbit).
No laila, pehea e hopu ai i ke kaʻa pūnaewele? Network Taps vs Switch Ports Mirror
1- Hoʻonohonoho maʻalahi: Network Tap > Port Mirror
2- Ka Mana o ka Hana Pūnaewele: Network Tap < Port Mirror
3- Hopu, Hana Hou, Hōʻuluʻulu, Hiki ke Hoʻouna: Network Tap > Port Mirror
4- Ka Latency Hoʻouna Kaʻa: Network Tap < Port Mirror
5- Ka Mana Hana Hoʻomākaukau Kaʻahele: Pākuʻi Pūnaewele > Aniani Puka
Ka manawa hoʻouna: Malaki-30-2022
