صفحه 1:
۱۰۹۱04 4۱/۱۱/۱ و
14۱2۹ rac DN can
صفحه 2:
Pat 1: Overview
Core vowepe preseded:
— Okt is cetwork woritoriagy
— Oho is cetwork woernewet
— Bertin started
— Ohv vetwork woongeweut
— Bttack detertion
— Oowsviicatery the dott
— De big picture
صفحه 3:
77 باه < 0۵
۱
عحطوو له ها وله وز ورس و29 رت 00 Ovuiortag
عون problews oad yater statistics Por ockvicistrotiva ord
WIKIPEDIA ork woctertay thoorbes the vse of 0 syste trot
poustody woutors 0 oowpuier aeivork Por stow or Pottery
powpoueds نوی سل چا بل ون ockricistraor ia cose
DF putayes vic eval, payer or otser darws. It is 0 subset of
the Puortious fouled tt وج مج بصن
صفحه 4:
0 بای ط Oket
5 ee
(Webonedia)
Refers to the brood subject of لو و زو موی artworks.
here exists 0 wide variety oF spPiwore od kardvore
products thot help aetwork systew و ول wacdye o
uetwork. Detwuork woroygewed covers 0 wide aren, tached:
= Genie! Comune trot he oetuork ts protected Prow
ی وی
- اه بط و اساسا مهاب( نطو
0
هه اجه سل و ولو are
هط
صفحه 5:
Okt & vetwork و
* Gpstew & Gervice woutoricy
- Reuchbiliy, ad
* Qesowse wees e wed woutortay
* PerPorwawe wouloriay (RTT, troughpy)
* Grtsics & Croovatcy/Oerteriay
۰ Pout Occngewed (Tairsivd Ortevton)
~ Pad دهت لمن لته موس
- مب “eb desk
* Change woongewed ood p7oPiquraioa
۲7۷۲۲
صفحه 6:
Getic, started
QOuke sure that the cetwork is up ord noccicgy.
Dus, we oeed to wouitor if:
> Oelver proevied OLOs (Gervice Level
Ouprrewruts)
- Depends oo policy
> Oka does pour wxxnnpwed expert?
* Ohat do pour were expert?
> Oka اوه سای سر سل
> Dhol does the rest oP the letercet expert?
- Is CPX? youd ewuh?
2 Dhere's ww suck thir a 100% upto (a we'l see) >
صفحه 7:
Getic started: “Opie”
Obet does tt take to deler 99.9 % upto?
9060. x OP = POC hows « woul
(POC - (POE x .BO9)) x OO = FS wicutes
pay PS wicutes oP مشب oa wots!
Qed to shutdowe 7 hour | week?
(P90 - €)/ POC x dOO = 99.F %
Qewevber to take plocced worcteccane faz
ood i your له رای ceo pour
wers/oustowers رهما لا ure twhided/exchided
to the GLO
حیحص لاله ۰ how
athe wore? Cerctto-eod? Proc the هه
صفحه 8:
2() :لو رمزو۳)
Okot te gored Por pour وه
4P pow ve wever weasuned pr woditored pour
راهم pou aged to kao thicres like:
— bowed va take
liter betwero eadpvicts
— Perce usage oP resvurves
— Bwourdt of “owise”:
* Detwork sco
* Dropped dott
* Reported errors or Pohures
صفحه 9:
CQheow whe to upyrcrde
> 45 pour boodwidhs usage tom high?
> Okere ts pour troPPic ypc?
- Op pou weed to yet a Poster hee, or wore providers?
> 45 the esuipsect too okt?
QGeep wo cod trae oP choos
> Revord of chops
~ Quakes it eosier to Pred couse oP problews due ti
مه مه له هر
جص و00 وه history oP pour د بو
ticket syste tet you keep o history oP evects. جه Osieg —
lows pou to dePeod pourseP ood verPy what hoppeced -
صفحه 10:
@ovourticry
- Drack usage oP resvurves
— Oi costowers ucordiay to use
ترجه whe pou hwe problews
Gray امه oP pour users! Dukes you look yoo.
* Oveitorteg soPtiwvere coo yeurrote ichets ood cuto-
wotrdly avihy stoPP oP issues.
Treads
— Ol oF this icPorcotice coo be used to view trode
ores pour ان
— Dis is port oP boselciog, capacity له رام
uutack ال
صفحه 11:
tack Orteviioa
٠. Dress ued cutoeative ule pou to keow
تور مار ore under attack.
° Dke tools io use coo kelp pou to wilco
اسان
- واه وه موه چبو)
— Lowd له وه موه مه services
— Datiple service Pures
صفحه 12:
Ooxeolicatay the dota
Phe Oetwork Operaives Oruer (DOC)
“Okere tt dl kuppess”
> Coordicraiva oP tasks
> Gtotus oP aetwork ued services
> Riektiog of cetvork-netoted aides ord امه
~ Okeve the tools reside ("DOO server”)
- رباص منطوعمهو)
> Derwork deyrnos
> database /Pht Pie of pack pont oa racks suid
> Detwork desorption
> Duck wore oF pov ser a bit hier.
صفحه 13:
صفحه 14:
Ost Ounnewedt
* Big Orotker
* iq Gister
Outi
° Wyperio
* Ova
Oxqios*
* لو(
* Detdot
* OpecDOG
محر
* اراه‌را
اسب() م0۲
اسجو ۰
(حصنس لنسه۳) *
* ROG
* Gubersiva
سس
صحوع() *
* 06660
* Prete
مداه 8 *
* GOORT
* Dutra
© Goovke Pion
CODE /Perlpicry
۰ بطم
* RT, Trew,
بل
صفحه 15:
Quesiow?
صفحه 16:
Pot 11: Orta
Gowe ders vo he :عامعصممه بسن
* Oetwork domveutaicc
* Oicxosiic tools
* Ovuitoricgy tole
۰ Perhorwune tools
۰ Ooive wid passive tools
٠١ GOOP
۰ Dicket spstews
* CocPiguraive cod chooge وجوج موی
صفحه 17:
دصلاد ین()
whe, “Wow ob pou keep rock جرا نم ارو(
oP ad”...
=
صفحه 18:
دصلاد ین()
pour switches... توص حول وه اسه رصیو)
Oketis euck port pooweted to? -
pe tee Pe ever: pert irs ete اب اب وج 9 =
herulh-owtch(, port, Rowen CO — Drrevior's ob Pee
hehowtch(, port ©, Rome PS — Revepiosiot +
heuthotch(, port 8, Rome (DO — Cher +
heuhowtch(, port ®, Rome (DS — ProPessere OPP er +
+ heull-owich(, port GS, whos p heuih-barhboce
- Dkis ePorwativd sight be available to pour رنه ویس kelp desk
ماو vie a wiki, soPi core جك رجح “صلم
= Rewewber ty label pour ports!
صفحه 19:
333154 31553156
Floom 370
317731783179
صفحه 20:
QOeuwork Oormrvedion
Oore wutoweiivd wight be ceeded. Ba cutoweted
راهم donuvedtaived systew is sowethiary صا
powsider.
— You ose write lod soripts to do this.
— You co cowsider sowe auto woted domuectatiod
5/۳۰
— Yow probably ect up dicey both.
صفحه 21:
Q@uowuted Gyustews
Deve ure quite 0 Pew cutoweted وه
رو حول 75. (Buck tecds to do
:سل راومه
WP phos —
Dertisov: —
ارسج محصتلكاجب// :اها
Derdot: —
ال مرح وتو
صفحه 22:
A pha
(row the IP pha web poy:
“A(Ppkrs a Pree (BOL), web booed, craithornnd, POP 11) exkbeos unnnnewedt
(AP @O) eoP vane ond rackiy tool writes fa phy @P, skoplB vie لیس of
vo IP م1۳ ,مه له oper beyord POOP ماه موی وله
DOG وان سا ومسهه) موی وه یا لت رم وله
teophies) ond storie of )موه مرو via “ساود
bots oP soreruskots:
hity:/hptrack.scurceP ory cet dohu.php ?id=sorerushots
صفحه 23:
Denice: 6
له ٩.0 ممصون .9600609 لامویه! سس( ۰
October ۰
۱ uses ve Detdisov:
— Lorde 6 wackice vo the vetwork by DOO vr IP ud show
the switch port it ives at.
— Tura OPP ¢ switch port while beovieg oc cud tral, device boy
why «0 port wes shut dow.
— Ievedory pour vetwork kardwore by wodel, vecdor, suitck-
pond, وه ونم ppercing syste.
— Report 70 IP odes ocd switch pot usage! historical ocd
اه
— Prety pictures oP .حك اوه
صفحه 24:
aches موی oF Ppt un Detdsoo ucrd
wore. Oore Puantiocaliy iochudes:
— Device discovery )ره
= bayer ® topoloy discovery ocd qropks, usec!
+ COPMLOP
موه Pree Proton
* سامف ولمم اس
وله ون و
- 1۳ مومت مرو سل 1۳ لمه )610)900(
]۱ vie wdizaiot
+ DOCIMLOE vob ry wrann ewe
+ A® cand DOO erklrese tracker
Continued >
صفحه 25:
uentiocdlity pootivued:
— Ouble pirat (sites, Piber, copper, closets, circuits...)
— Costas (departeeuts, providers, vecdors, iv.)
— Expert scripts Por vorivus tools (Dexios, Spswou,
RBOOC1O, Curt, ctr)
+ 41.0., how we pod cuswate ade oreaiva i Own!
— Oultevel user access: Odeon, Opercior, Oser
= Thdeaws prety pictires DP pour اوه
CabiePart ۸۵۵ Resorts “oot We عمسي او
(ew ie)
وسح ب
search
صفحه 26:
.- Classroom layout at APRICOT 2008
صفحه 27:
GoPiwae بجوم ب0)
ستاهظ) رم 0<0) سمط(
Orsiv: >
hitp://oPPice wicrosvPt.cowlerushisiol PF XIDDPOPOOID99 .uspx
ولج -
itp ww wets Rc!
Opeu Gower Orgran GoPivae
Dist: ~
hip ive. care ore Dict
نا واه Cisco ©
Atel عزن نين |( ite / Wow. visor .coelwebhaboulac
Dayios Cackoage: >
أست. ججكاعمجوم كمه سصيسس|/ :صا
صفحه 28:
عامط 8 رو 0 وریو(ا)
Three bods oP took
0. Otegeostc tools — used to test coweeviviy, usvertaic thot a
locetive is neackuble, or a devine is up — usu) uctive tools
©. QOodtortay took — tools rocoicy io the backgroud
ول pr services), whic ovlect puecis, bul وك جوج
ioitate their pus probes (use dacametic tools), cert
revordicy the د ها ,فوفص scheduled Puskioc.
QerPorwuure tools — tell us how our cetwork io hoodicry
tric Plow.
صفحه 29:
QDetwork woutoricy systews & tools
9. PerPorwwaawe Took
(Gey is ty took ot cack router icterPuce (probably dot
werd ty book ot switch ports).
Pw vows tools:
۱۹ hip://Psecu.scuvebore.cet!
- ORV: hitp://oss.vetiver.chl corte!
13.6 4
gaan
© oon
که 16 نل ا Wo
صفحه 30:
QDetwork woutoricy systews & tools
Ovtwr tools
> Piery — test poreertiviy toa Kost
- Dracercute — show pots toa host
> OVR = vcowbicaiiva oP pray + travervute
- GOOE coleviors (policr)
Pose tov
~ bey sovsitoricey, GOODE trap reveivers, DetPlow
@utowated tools
~ Goooke Pay — record urd yroph hateusy to a set oP hosts,
vestry TOM® (Pray) or oer protovuls
- ORPE/ARRO = reverd ced qropk boedwidh usage ao
ردنا اوه و سوم رو of يچ fotervaks
صفحه 31:
QDetwork woutoricy systews & tools
Oetwork & Gervice QOvutortacy fouls
* Ougios — server und service ام
> Cau wouior prety suck اروت
FLOPR, COPP, OOO, Dirk spare, OPO une, ...
? Cosy to write cew phrjor (exteuwiow)
> @usic soriptioy shits are required to develop siople
swositortay jobs — Perl, Gkell scripts, php, ptr...
- لو بوه Oped Gource tools
> Dubbix, DecO8G, Wyperic, 0 جم ( 0008
Ose thew t wouter neuchkubiiy wad
iaieupy it pour اه
۱ depeudeary wechouisws ore very webu
صفحه 32:
QDetwork woutoricy systews & tools
Qvcitor pour pritcd Ortwork Gervices
- OOG/Deb/lEwal
- Radis/LOBP/SQL
- و رال ters
Wow wil pou be wiPed?
Qou't Porcet loy collection!
> very cetwork device (cod OO cod Dientows servers os
well) coc report syste ابو بص او
- You DOG cotert cad wositer your loys!
> Oot doi sv is vor of the wost pow wistthes wheo
oie oetwork wocitoricgy
صفحه 33:
proiools موس سوریو(
8600026 - 869 Detwork Quaoagesvedt Prowool
۱ oP tools exist to exploit it
> @resect vo coy devedt oetwork equipwet
? Detwork throughput, errors, OPO toc, tewwpercture, ...
- OO ccd Oiedows iwoplewed this os well
? Disk spur, nuceiny provesses, ...
GOW uct telvet
> tis dev possible to use svriptiagy to cutowate wouioriay oF hosts
an services
صفحه 34:
GOOF tools
Det GOOF tol set
- hip://se-sawp.scurcePorye.cet!
ون stvple to build sicople tools
- Ove thot buds scapshots oP whick IP is used by whick
Ctkercet uddress
- ما او bulls shupshots oP whick Cthercet addresses exist
دج whick port oo whick switch.
- © بوص rewote ROD anc Por state.
> Query server, switches ood routers Por tewpercdures.
- Grr...
صفحه 35:
Gratstics ord اه
Tree woouettag cad acdsee
> Oketis pour getwork used Por, od how work
- OsePul Por Qualiy oP ,موه detertioy ubuses,
لمه bilkery (sretericey)
> Ordicated protocol: Orlow
~ AdeotPy troPPic "Plows"! protocol, svurve,
desticaiva, bytes
- OiPRerect tovls exist to provess the icPor<diod
> Plowtocks, Pe
> OP Gra
> Oxny wore? hip:/wuwceiworkupikoe.cowloosloePaw!
صفحه 36:
(out ged problew wucragewect
> Overlon, texeporary resvurve shortage
> Cquipwed Pabure, fick dow
Wow ول pow detect wa error?
> Dvcitoricny!
> Oustower vowphicts
0 toket systew & pssrurd
- مه جاص صا جاع جوم ves (pomedor Raber)
> Oetice dispoich/esrdtaiva rules
> Oho huudes the problew?
> Oho yet it cent خأ ow vor is avcikibe?
صفحه 37:
عم صاص برد بحاصو اص" |4
سوه را چه ولا
Drock di evecis, Polures ocd issues -
Cord potat Por helpdesk coweunivutio
Ove to track dl poweunicdioes
extern له ه اعت 8015 -
Cvedts origeratay Proc the vubtde:
ل
the testde: صخا ومن عدج 12
Gystew vutrges (divert or tore!) >
- Phoced woidteocues or upgrides — Rewewber to
wwihy pour nsiowers!
صفحه 38:
4| بجاحواصز! spstews
كلصوا ,وجوج عاصج بنصلام”ا ما مجاصبرك أصكادة Ose *
جك هاصاحادها +جوسفعجا بصتلدساس وحصت امس
۰ Cock cose is ussiqned u pose حون
* Cock cose wes thou نو وه iPe pole:
- Oew
: Ona
- Resolved
- Closed
صفحه 39:
Woketcary 2/۳۳۶
OorkPiow:
Ticket System
Helpdesk Tech
query |
from ---->|
customer
<> ack.
+ request --->| |
| |
|<--comm--> |
| |- fix issue -> eqpt
|<- report fix -|
customer <-|<-- respond ~
صفحه 40:
امه :مرو بمنیل۱»
rt (request trucker)
Weoily used workhouide.
- © classic ticketing syste thot coo be vustowized to your location.
> Gowewhot dPPicat to tostal cod o7oP igure.
> Weerdes large-scale ppercivas.
fraz
- © hybrid systew thot foctudes a wiki ced project wacagqeweut
Prctures.
- Dicketiog syste is ot us robust us rt, but works well.
> OPRteu used Por “tras” kicgy yrmup projects.
redwice
> bike trav, but wore robust. Warder tv icstall
صفحه 41:
QDetwork Teinsion Ortevion Gystews
(0106)
Vheoe ure systews that observe of oP pour oetiords
morRic wed report whe it sees spevitic kieds oP
problews, suck us:
وه هب رم و pr لوط hosts thot ore ©
® Pew wool:
- GOORT - ocx ody wed oped svurce tool:
Rip aw.sod.orey
> Pree — Group IePorwaion Donagewent مسر
hips://dev.prekidte-techookoes oreo!
> Gawkda — Orcirdized ۵
hip: /Ikrsokera.de/sacobaral
- ویو - ore Por :ماني
ipsa cessus.ory dour!
صفحه 42:
5 ام ما سب 0
* Qevord changes to equiped ۱ص همه
* davedory worngewed (equpwed, IPs,
foterPuces
* Ose versivciay voorol
- Os sicvple us:
"cp named.conf named.conf.20070827-01”
* (Por phate میتسه Piles:
- COG, Gunersien (GOO)
- Mercurtd
* Por ters:
- 00
صفحه 43:
5 ام ما سب 0
۰ Drertiicodly, used Por source code (proucnvs)
۰ Dorks well Por oop text-based pooPicgiraive Piles
- Olso Por bicory Pies, butless eusy to see dPPereues
۰ Cor ورن equipwect:
> ROOO10 (Cuwaic Cisvw cocPiquraiva retrieval cord
archivieg, uso Por other equipwedt per)
* Bultic to Projert Oacagewed OoPiivore like:
- Tre
- ول
> Oxd, woop other ان products. Gxcelteat Por
doruveuicg pour .كاء وه
صفحه 44:
صفحه 45:
Quesiow