Muutke küpsiste eelistusi

E-raamat: Network Flow Analysis

  • Formaat: EPUB+DRM
  • Ilmumisaeg: 01-Jun-2010
  • Kirjastus: No Starch Press,US
  • Keel: eng
  • ISBN-13: 9781593273002
Teised raamatud teemal:
  • Formaat - EPUB+DRM
  • Hind: 29,03 €*
  • * hind on lõplik, st. muud allahindlused enam ei rakendu
  • Lisa ostukorvi
  • Lisa soovinimekirja
  • See e-raamat on mõeldud ainult isiklikuks kasutamiseks. E-raamatuid ei saa tagastada.
  • Formaat: EPUB+DRM
  • Ilmumisaeg: 01-Jun-2010
  • Kirjastus: No Starch Press,US
  • Keel: eng
  • ISBN-13: 9781593273002
Teised raamatud teemal:

DRM piirangud

  • Kopeerimine (copy/paste):

    ei ole lubatud

  • Printimine:

    ei ole lubatud

  • Kasutamine:

    Digitaalõiguste kaitse (DRM)
    Kirjastus on väljastanud selle e-raamatu krüpteeritud kujul, mis tähendab, et selle lugemiseks peate installeerima spetsiaalse tarkvara. Samuti peate looma endale  Adobe ID Rohkem infot siin. E-raamatut saab lugeda 1 kasutaja ning alla laadida kuni 6'de seadmesse (kõik autoriseeritud sama Adobe ID-ga).

    Vajalik tarkvara
    Mobiilsetes seadmetes (telefon või tahvelarvuti) lugemiseks peate installeerima selle tasuta rakenduse: PocketBook Reader (iOS / Android)

    PC või Mac seadmes lugemiseks peate installima Adobe Digital Editionsi (Seeon tasuta rakendus spetsiaalselt e-raamatute lugemiseks. Seda ei tohi segamini ajada Adober Reader'iga, mis tõenäoliselt on juba teie arvutisse installeeritud )

    Seda e-raamatut ei saa lugeda Amazon Kindle's. 

You know that servers have log files and performance measuring tools and that traditional network devices have LEDs that blink when a port does something. You may have tools that tell you how busy an interface is, but mostly a network device is a black box. Network Flow Analysis opens that black box, demonstrating how to use industry-standard software and your existing hardware to assess, analyze, and debug your network.Unlike packet sniffers that require you to reproduce network problems in order to analyze them, flow analysis lets you turn back time as you analyze your network. Youll learn how to use open source software to build a flow-based network awareness system and how to use network analysis and auditing to address problems and improve network reliability.And much more. Stop asking your users to reproduce problems. Network Flow Analysis gives you the tools and real-world examples you need to effectively analyze your network flow data. Now you can determine what the network problem is long before your customers report it, and you can make that silly phone stop ringing. Network flow analysis is the art of studying the traffic on a computer network. Understanding the ways to export flow and collect and analyze data separates good network administrators from great ones. The detailed instructions in Network Flow Analysis teach the busy network administrator how to build every component of a flow-based network awareness system and how network analysis and auditing can help address problems and improve network reliability. Youll learn what flow is, how flows are used in network management, and how to use a flow analysis system. Real-world examples illustrate how to best apply the appropriate tools and how to analyze data to solve real problems. Author Michael W. Lucas compares existing popular tools for network management, explaining why they dont address common real-world issues and demonstrates how, once you understand the underlying process and techniques of flow management, building a flow management system from freely-available components is not only possible but actually a better choice than much more expensive systems. A detailed and complete guide to exporting, collecting, analyzing, and understanding network flows to make managing networks easier. Network flow analysis is the art of studying the traffic on a computer network. Understanding the ways to export flow and collect and analyze data separates good network administrators from great ones. The detailed instructions in Network Flow Analysis teach the busy network administrator how to build every component of a flow-based network awareness system and how network analysis and auditing can help address problems and improve network reliability. Readers learn what flow is, how flows are used in network management, and how to use a flow analysis system. Real-world examples illustrate how to best apply the appropriate tools and how to analyze data to solve real problems. Lucas compares existing popular tools for network management, explaining why they dont address common real-world issues and demonstrates how, once a network administrator understands the underlying process and techniques of flow management, building a flow management system from freely-available components is not only possible but actually a better choice than much more expensive systems.
Acknowledgments xv
Introduction 1(8)
Network Administration and Network Management
3(1)
Network Management Tools
3(2)
MRTG, Cricket, and Cacti
3(1)
RTG
4(1)
Nagios and Big Brother
4(1)
CiscoWorks, OpenView, and More
4(1)
Enough Griping: What's the Solution!
5(1)
Flow-Tools and Its Prerequisites
6(1)
Flows and This Book
6(3)
1 Flow Fundamentals
9(12)
What Is a Flow?
10(1)
Flow System Architecture
11(1)
The History of Network Flow
12(2)
NetFlow Versions
12(1)
NetFlow Competition
13(1)
The Latest Standards
13(1)
Flows in the Real World
14(4)
ICMP Flows
14(1)
UDP Flows
15(1)
TCP Flows
16(1)
Other Protocols
17(1)
Flow Export and Timeouts
18(1)
Packet-Sampled Flows
19(2)
2 Collectors and Sensors
21(20)
Collector Considerations
21(1)
Operating System
22(1)
System Resources
22(1)
Sensor Considerations
22(2)
Location
23(1)
From Remote Facilities
24(1)
From Private Network Segments/DMZs
24(1)
Implementing the Collector
24(1)
Installing Flow-tools
25(1)
Installing from Packages
25(1)
Installing from Source
25(1)
Running flow-capture
26(2)
Starting flow-capture at Boot
27(1)
How Many Collectors!
28(1)
Collector Log Files
28(1)
Collector Troubleshooting
29(1)
Configuring Hardware Flow Sensors
29(3)
Cisco Routers
30(1)
Cisco Switches
30(1)
Juniper Routers
31(1)
Configuring Software Flow Sensors
32(2)
Setting Up Sensor Server Hardware
32(1)
Network Setup
33(1)
Sensor Server Setup
34(1)
Running the Sensor on the Collector
34(1)
The Sensor: softflowd
34(7)
Running softflowd
35(1)
Watching softflowd
35(6)
3 Viewing Flows
41(16)
Using flow-print
41(5)
Printing Protocol and Port Names
43(1)
Common Protocol and Port Number Assignments
44(1)
Viewing Flow Record Header Information with -p
45(1)
Printing to a Wide Terminal
45(1)
Setting flow-print Formats with -f
46(4)
Showing Interfaces and Ports in Hex with Format -f 0
46(1)
Two Lines with Times, Flags, and Hex Ports Using -f 1
47(1)
Printing BGP Information
48(1)
Wide-Screen Display
48(1)
IP Accounting Format
49(1)
TCP Control Bits and Flow Records
50(2)
ICMP Types and Codes and Flow Records
52(5)
Types and Codes in ICMP
53(1)
Flows and ICMP Details
54(3)
4 Filtering Flows
57(24)
Filter Fundamentals
58(3)
Common Primitives
58(2)
Creating a Simple Filter with Conditions and Primitives
60(1)
Using Your Filter
61(1)
Useful Primitives
61(9)
Protocol, Port, and Control Bit Primitives
61(3)
IP Address and Subnet Primitives
64(1)
Time, Counter, and Double Primitives
65(2)
Interface and BGP Primitives
67(3)
Filter Match Statements
70(5)
Protocols, Ports, and Control Bits
70(2)
Addresses and Subnets
72(1)
Filtering by Sensor or Exporter
72(1)
Time Filters
73(1)
Clipping Levels
73(1)
BGP and Routing Filters
74(1)
Using Multiple Filters
75(1)
Logical Operators in Filter Definitions
76(2)
Logical "or"
76(1)
Filter Inversion
77(1)
Filters and Variables
78(3)
Using Variable-Driven Filters
79(1)
Defining Your Own Variable-Driven Filters
79(1)
Creating Your Own Variables
80(1)
5 Reporting and Follow-Up Analysis
81(36)
Default Report
82(3)
Timing and Totals
83(1)
Packet Size Distribution
84(1)
Packets per Flow
84(1)
Octets in Each Flow
84(1)
Flow Time Distribution
85(1)
Modifying the Default Report
85(3)
Using Variables: Report Type
86(1)
Using Variables: Sort
86(2)
Analyzing Individual Flows from Reports
88(1)
Other Report Customizations
89(3)
Choosing Fields
89(1)
Displaying Headers, Hostnames, and Percentages
90(1)
Presenting Reports in HTML
91(1)
Useful Report Types
92(15)
IP Address Reports
92(2)
Network Protocol and Port Reports
94(2)
Traffic Size Reports
96(1)
Traffic Speed Reports
97(2)
Routing, Interfaces, and Next Hops
99(5)
Reporting Sensor Output
104(1)
BGP Reports
104(3)
Customizing Reports
107(10)
Custom Report: Reset-Only Flows
107(3)
More Report Customizations
110(2)
Customizing Report Appearance
112(5)
6 Perl, Flowscan, and Cflow.Pm
117(22)
Installing Cflow.pm
118(1)
Testing Cflow.pm
118(1)
Install from Operating System Package
118(1)
Install from Source
119(1)
Installing from Source with a Big Hammer
119(1)
flowdumper and Full Flow Information
119(1)
FlowScan and CUFlow
120(1)
FlowScan Prerequisites
121(1)
Installing FlowScan and CUFlow
121(9)
FlowScan User, Group, and Data Directories
122(1)
FlowScan Startup Script
123(1)
Configuring FlowScan
123(1)
Configuring CUFlow: CUFlow.cf
124(3)
Rotation Programs and flow-capture
127(1)
Running FlowScan
128(1)
FlowScan File Handling
128(1)
Displaying CUFlow Graphs
129(1)
Flow Record Splitting and CUFlow
130(3)
Splitting Flows
131(1)
Scripting Flow Record Splitting
132(1)
Filtered CUFlow and Directory Setup
132(1)
Using Cflow.pm
133(6)
A Sample Cflow.pm Script
133(1)
Cflow.pm Variables
134(1)
Other Cflow.pm Exports
135(2)
Acting on Every File
137(1)
Return Value
137(1)
Verbose Mode
138(1)
7 Flowviewer
139(18)
FlowTracker and FlowGrapher vs. CUFlow
140(1)
FlowViewer Security
140(1)
Installing FlowViewer
140(1)
Prerequisites
141(1)
FlowViewer Installation Process
141(1)
Configuring FlowViewer
141(5)
Directories and Site Paths
142(2)
Website Setup
144(1)
Devices and Exporters
144(1)
Troubleshooting the FlowViewer Suite
145(1)
Using FlowViewer
146(4)
Filtering Flows with FlowViewer
146(1)
Reporting Parameters
147(2)
Printed Reports
149(1)
Statistics Reports
149(1)
FlowGrapher
150(2)
FlowGrapher Settings
150(1)
FlowGrapher Output
151(1)
FlowTracker
152(4)
FlowTracker Processes
152(1)
FlowTracker Settings
152(1)
Viewing Trackers
153(1)
Group Trackers
154(2)
Interface Names and FlowViewer
156(1)
8 Ad Hoc Flow Visualization
157(20)
gnuplot 101
158(2)
Starting gnuplot
158(1)
gnuplot Configuration Files
159(1)
Time-Series Example: Bandwidth
160(13)
Total Bandwidth Report
160(8)
Unidirectional Bandwidth Reports
168(2)
Combined Inbound/Outbound Traffic
170(3)
Automating Graph Production
173(2)
Comparison Graphs
175(2)
Data Normalizing
175(1)
Time Scale
175(2)
9 Edges and Analysis
177(14)
NetFlow v9
177(3)
Installing flowd
178(1)
Configuring flowd
178(1)
Converting flowd Data to Flow-tools
179(1)
sFlow
180(2)
Configuring sFlow Export with sflowenable
181(1)
Convert sFlow to NetFlow
181(1)
Problem Solving with Flow Data
182(7)
Finding Busted Software
182(4)
Identifying Worms
186(1)
Traffic to Illegal Addresses
187(1)
Traffic to Nonexistent Hosts
188(1)
Afterword
189(2)
Index 191