Mai duba ƙarshen wurarenka yana jera tsarin VPN kusa da yankin wani kamfanin talla, kuma wannan haɗin yana fara labarin da bayanan ba za su iya tallafa masa ba. Sunan bincike ne na baya da aka zana a kan ƙarshen wuri na lamba, kuma yana canzawa duk lokacin da binciken ya canza. Rukunonin da suka tsaya a gwaji su ne adiresoshin, yanayin haɗin da PID ɗin da ya mallaki soket ɗin.

Babu wani abu a cikin teburin soket da ke bayanin abin da ya ratsa cikin haɗi. Duk abin da ke ɗauke da sunan mai masauki an riga an fassara shi a madadinka.

Sunan da aka warware fassara ne, ba fili ba

Mai duba yana roƙon mai warwarewa ya mai da adireshi suna, kamar yadda tambayar PTR ke aiki a DNS. Amsar na iya zuwa daga ajiyar gida, shigarwar fayil ɗin hosts, sanarwar gano maƙwabci ko mai bayarwa wanda ya ba wani adireshin a makon da ya gabata, kuma kayan aikin ba shi da hanyar bambanta waɗannan tushen. Na'urori biyu da ke kallon haɗi ɗaya na iya buga sunaye daban-daban don adireshin abokin tarayya ɗaya, wanda yake da wuya a bayyana idan ka yi imani cewa sunan ya fito daga waya. Ka ɗauki alamar a matsayin sauƙi ga idanun ɗan adam ba wai sanarwa game da wanda ya karɓi bayanan ba.

Takardun TCPView sun bayyana rukunonin ƙarshen wuri, yanayi da tsari kuma sun rubuta kashe sunayen da aka warware, abin da ya cancanci yi kafin ka karanta wani ma'ana a cikin yanki. Kashe warwarewa yana sa rashin tabbas ya zama bayyane maimakon ƙirƙirar shi: har yanzu kana da adireshi, kuma aikin yanke shawara kan abin da yake nufi ya koma gare ka kawai.

Karanta rukunonin lambobi bisa tsari

Yi aiki daga hagu zuwa dama ka tsaya a rukuni na farko da ya amsa tambayarka. Ƙarshen wuri na gida yana nuna abin da tsarin ya ɗaure da shi, ƙarshen wuri na nesa yana nuna ko abokin tarayya ya wanzu kwata-kwata, yanayin yana nuna ko ƙungiyar tana raye, kuma PID ɗin yana haɗa layin da fayil ɗin da ake aiwatarwa.

Abubuwan lura guda uku da ke ƙasa sifofi ne na misali ba fitar da aka ɗauka daga kowace na'ura a nan ba. An haɗa su bisa abin da kowanne zai iya tallafawa, domin tambayar da mutane suke yi wa layin soket ita ce:

What the row showsWhat it rules outWhat it cannot show
An open listener with no peer addressAny remote party; nothing beyond this host has reached the portWhether the local service is well configured, or who is allowed to use it
An association in the open stateThat the entry is cosmetic; a peer address exists and was acceptedWhich application data crossed it, or whether that peer is trustworthy
An association whose counters moveThat the conversation is idle or already staleWhat was requested, what came back, or who started it

Buɗaɗɗen mai sauraro da wasu na'urori ba za su iya isa ba, wanda aka ɗaure da adireshin kewayawa, shine yadda yawancin abokan ciniki na VPN ke fallasa tashar sarrafa nasu. Ɗaure da alamar duniya yana nufin tsarin ya karɓi haɗi a kowace fuska, kuma ko hakan yana da haɗari ya dogara da katangar wuta ta mai masauki ba layin kansa ba. Ƙungiya da ta wanzu kuma tana ɗauke da ƙididdiga ita kaɗai take kama da zargin da mutane suka saba so su yi, kuma ko da wannan layin yana tsayawa kafin kayan aiki.

Tabbatar da mallaka kafin ka ambaci mai laifi

Asalin tsari shine inda yawancin zarge-zarge suke gazawa a zahiri. Ana sake amfani da PID, masu sabuntawa da mataimakan burauza suna haifar da yara na ɗan lokaci, kuma abokin ciniki na VPN na iya mika zirga-zirgarsa ga sabis ɗin tsarin mai gata. Kwatanta hanyar fayil ɗin da ake aiwatarwa da tsarin iyaye maimakon sunan nuni, domin wanda ya gina binary ɗin shine yake zaɓar sunan nuni.

tcpvcon -n -a
Get-Process -Id 4188 | Select-Object Id, ProcessName, Path

Irin wannan karatu yana nan a Linux, inda ƙididdigar soket na iya ɗaukar bayanin tsari idan kana da isasshen gata don ganin soket ɗin wasu masu amfani. Neman soket ɗin da aka kafa waɗanda aka ɗaure da tashar 443 ko daga gare ta yana taƙaita fitar zuwa layukan da suka dace:

ss -tunp state established '( sport = :443 or dport = :443 )'

Ɗauki tambarin lokaci tare da layin. PID shi kaɗai manuniya ce mai motsi, domin zuwa lokacin da ka buɗe mai sarrafa tsari soket ɗin na iya zama na magaji kuma hanyar da kake bincika ba za ta kasance wadda ta riƙe haɗin ba. Rubuta biyun ƙarshen wuri, yanayin da PID a matsayin abin lura ɗaya, kuma binciken zai tsira daga sake farawa ko ra'ayi na biyu.

Abin da suna ke da daraja har yanzu

Sunan mai masauki ba shaida marar amfani ba ne. Yana rubuta cewa wani ya haɗa wannan adireshin da wannan sunan a wani lokaci. Wannan haɗin ya cancanci kulawa idan adireshin na mai bayarwa ne da ke hidimar dubban abokan ciniki marasa alaƙa. Da'awa ce mafi rauni fiye da manufa, kuma ita ce kaɗai da'awar da alamar za ta iya tallafawa.

Idan suna ya yi kama da kuskure, kwatanta adireshin da jeri da aka wallafa na mai bayarwa sannan ka tambayi abin da tsarin yake yi a wannan lokacin: duba sabuntawa, kiran lasisi, aika telemetry ko musafaha na rami. Waɗannan ayyukan suna barin sifofin haɗi daban-daban, kuma daidaita sifar da lokacin ya fi bayar da bayani fiye da daidaita sunan da kamfanin da ba ka amince da shi.

Kiyaye layin kafin ka ƙare mataimaki na tarayya ko ka cire wani abu. Ƙarshen da za a iya karewa ya ƙunshi ƙarshen wuri ɗaya da aka lura, yanayinsa da mai shi; hukunci na dukan alama da aka gina a kan alama da aka warware ba shaida ba ne, kuma ba shaida ba ne kuma kwanciyar hankali cewa sanannen mai masaukin saukewa dole ne ya kasance marar lahani.

Labarai masu alaƙa