Ukuthwebula amaphakethe kude: inzwa ihlale endaweni, umhlaziyi abe kude

Ukuthwebula amaphakethe kuhambisana nendawo lapho amaphakethe esevele egeleza khona, futhi umhlaziyi okude akavamile ukuhlala lapho. Ukuhlelwa okusebenzayo inzwa esigabeni esibhekwayo kanye ne-VPN ethwala ukuphatha nokulanda, hhayi isixhumanisi sonke esibonisiwe. Lokho kwehlukanisa kugcina ikhompyutha yomhlaziyi ingaphandle kwendlela yokuthwebula futhi kugcina idatha ebucayi endaweni. Izinyathelo ngezansi zikhetha isixhumi, zikhawulela ifayela futhi zihambisa kuphela lokho umbuzo okudingayo.

Ikhompyutha ekude akuyona i-tap

Ukujoyina inethiwekhi nge-VPN kunika umshini wakho indlela eya enzweni, hhayi amandla okubona ithrafikhi phakathi kwamanye amahost. Ukuthwebula okwenziwe kukhompyutha yakho kubona kuphela amaphakethe alethwe kusixhumi sekhompyutha yakho. Ukubuka isixhumanisi esishintshiwe kudinga ukuthi umnikazi wenethiwekhi anikeze isibuko noma i-tap edla inzwa endaweni. Noma kunjalo isibuko sinemikhawulo, ngoba izindawo ezigcwele ngokweqile zilahla amafreyimu futhi isango alikaze libone ithrafikhi ehlala ngaphakathi kwe-VLAN efanayo.

Ukugeleza okubethelwe kuhlala kubethelwe futhi enzweni, ngoba umthwalo we-TLS ungoweziphetho. Ukuthwebula kunikeza izihloko, isikhathi nomthamo, hhayi umbhalo ocacile.

Khetha isixhumi esikwazi ukubona ukugeleza

Ngaphambi kokuhlunga noma yini, bhala uhlu lwezixhumi futhi uqinisekise ukuthi yisiphi esithwala indlela obuzwe ngayo. Ukuqagela phakathi kwembobo yomzimba, ukuhlanganiswa kanye nebhuloho kuyindlela evamile yokuqoqa ifayela elingenalutho.

ip -br link
dumpcap -D

Qondanisa igama lesixhumi nendawo yokubuka kurekhodi loshintsho, hhayi ngegama olikhumbulayo kwelinye ihost. Uma inani lamaphakethe lihlala linguziro ngenkathi isevisi ibonakala imatasa, inzwa isesigabeni esingalungile noma isibuko silungiselelwe enye indlela. Qinisekisa indlela kuqala ngokushintshana okwaziwayo, ukuze isibuko esiphukile singathathwa njengohlelo oluthule. Bhala imininingwane yesixhumi nesibuko kumanothi okuthwebula ngenkathi kusasha.

Khawulela ukuthwebula ngesihlungi nangeringi

Ukuthwebula okungenamikhawulo kugcwalisa idiski futhi kuqoqa okungaphezu kwalokho umbuzo okudingayo. Faka umthombo, indawo kanye neprotocol evunyelwe kusihlungi, bese ukhawulela usayizi wefayela nenani lamafayela.

tcpdump -i eth0 -n -s 128 -c 5000 -W 4 -C 25 -w /var/tmp/cap.pcap 'host 203.0.113.10 and tcp port 443'

Ikheli nembobo ngenhla yizibonelo ezivela ebangeni lemibhalo, ngakho shintsha ngezinto ezigunyaziwe futhi ugcine iwindi lifushane ngokwanele ukuze ubufakazi budlule eringini. Ubude besithombe bunquma umthwalo kuyilapho kugcina izihloko, okujwayelekile ukwanele umbuzo wokuxhumana futhi kulula kakhulu ukugcina. Funda umugqa wokulahla we-kernel okhishwa yi-tcpdump ekupheleni, ngoba inani eliphezulu lokulahla lisho ukuthi ukuthwebula akuphelele hhayi ukuthula. Gcina iwindi olidingayo ngaphambi kokuba iringi ibhale phezu kwayo, futhi urekhode intambo yesihlungi eceleni kwegama lefayela.

Hambisa ifayela, hhayi isixhumanisi sonke

Thola ukuthwebula okuqediwe ngomzila wokuphatha esikhundleni sokusakaza isibuko ku-WAN. Ukudlulisa okukodwa kulula ukuyigunyaza, ukuyirekhoda nokuyisusa kunokuthumela okuqhubekayo.

scp [email protected]:/var/tmp/cap.pcap ./

Gcina ifayela lifundeka kuphela yi-akhawunti yomsebenzisi, futhi ulisuse enzweni lapho ikhophi yokuhlaziya isiqinisekisiwe. Uma ukuthumela bukhoma kuyisidingo ngempela, linganisa ukugqunywa kwesibuko nokuthutha ndawonye, ngoba umthwalo owengeziwe ungadlula isabelomali sesixhumanisi. Rekhoda izikhala zokubona noma ngabe yini, ngoba ukuthwebula ubufakazi obunendawo yokubuka eyaziwayo hhayi irekhodi eliphelele lenethiwekhi.