Momwe Mungagwiritsire Ntchito Wireshark pa Windows: Kalozera Wathunthu, Wothandiza, komanso Watsopano

Kodi mudayamba mwadabwapo Kodi kwenikweni chimachitika ndi chiyani pamanetiweki yanu mukasakatula, kusewera pa intaneti, kapena kukonza zida zolumikizidwa? Ngati mumangofuna kudziwa zachinsinsi zomwe zikuzungulira pa WiFi yanu, kapena ngati mukungofunika chida chaukadaulo kuti Yang'anani kuchuluka kwa magalimoto pamanetiweki ndikuwona zovuta ndi kulumikizana kwanu, ndithu dzina la Wireshark wagwira kale chidwi chanu.

Chabwino, m'nkhaniyi mupeza popanda zopotoka tsatanetsatane wa Wireshark: Zomwe zili, zomwe zimagwiritsidwa ntchito pa Windows, momwe mungayikitsire, ndi malangizo abwino musanayambe kujambula deta. Tiyeni tifike kwa izo.

Kodi Wireshark ndi chiyani? Kuphwanya titan of network analysis

Wireshark ndiye wowunikira kwambiri padziko lonse lapansi komanso wodziwika bwino pa intaneti.. Chida ichi chaulere, chotseguka komanso champhamvu chimakulolani kutero jambulani ndikuwunika kuchuluka kwa magalimoto pamanetiweki zomwe zimadutsa pakompyuta yanu, kaya ndi Windows, Linux, macOS makina, kapena machitidwe ngati FreeBSD ndi Solaris. Ndi Wireshark, mutha kuwona, munthawi yeniyeni kapena mutatha kujambula, ndendende mapaketi omwe akulowa ndikusiya kompyuta yanu, gwero lawo, komwe akupita, ma protocol, komanso kuwaphwanya kuti mupeze tsatanetsatane wagawo lililonse molingana ndi mtundu wa OSI.

Mosiyana ndi ma analyzer ambiri, Wireshark imadziwika chifukwa cha mawonekedwe ake owoneka bwino, komanso imapereka mtundu wamphamvu wa console wotchedwa TShark kwa iwo omwe amakonda mzere wamalamulo kapena omwe amafunikira kuchita ntchito zongopanga zokha. Kusinthasintha kwa Wireshark Ndichifukwa chake zimakupatsani mwayi wosanthula kulumikizana kwanu mukamayang'ana, kuyang'ana zachitetezo cha akatswiri, kuthetsa zopinga zapaintaneti, kapena kuphunzira momwe ma protocol a intaneti amagwirira ntchito, zonse kuchokera pa PC yanu!

Tsitsani ndikuyika Wireshark pa Windows

Kuyika Wireshark pa Windows ndi njira yosavuta., koma m'pofunika kuti muzichita pang'onopang'ono kuti musachoke, makamaka zokhudzana ndi zilolezo ndi madalaivala owonjezera kuti mugwire.

• Kutsitsa kovomerezeka: Kufikira kwa tsamba lovomerezeka la Wireshark ndikusankha mtundu wa Windows (32 kapena 64 bits kutengera dongosolo lanu).
• Yambitsani installer: Dinani kawiri wapamwamba dawunilodi ndi kutsatira mfiti. Landirani zosankha zosasinthika ngati muli ndi mafunso.
• Ma driver ofunikira: Pa unsembe, okhazikitsa adzakufunsani kukhazikitsa Npcap. Chigawochi ndi chofunikira, chifukwa chimalola khadi yanu ya netiweki kuti igwire mapaketi mu "zachiwerewere". Landirani kukhazikitsidwa kwake.
• Tsitsani ndikuyambitsanso: Ntchito ikatha, yambitsaninso kompyuta yanu kuti muwonetsetse kuti zida zonse zakonzeka.

Okonzeka! Tsopano mutha kuyamba kugwiritsa ntchito Wireshark kuchokera pa Windows Start menyu. Chonde dziwani kuti pulogalamuyi imasinthidwa pafupipafupi, choncho ndi bwino kuyang'ana matembenuzidwe atsopano nthawi ndi nthawi.

Momwe Wireshark Imagwirira Ntchito: Kujambula Paketi ndi Kuwonetsa

Mukatsegula Wireshark, Chinthu choyamba chimene mudzawona ndi mndandanda wa ma intaneti onse omwe alipo pa dongosolo lanu.: Makhadi ochezera a mawaya, WiFi, ngakhale ma adapter enieni ngati mugwiritsa ntchito makina enieni monga VMware kapena VirtualBox. Iliyonse mwamawonekedwewa ikuyimira polowera kapena potuluka pazambiri za digito.

Kuti muyambe kujambula data, Muyenera kudina kawiri pa mawonekedwe omwe mukufuna. Kuyambira pamenepo, Wireshark iwonetsa munthawi yeniyeni mapaketi onse omwe amazungulira ndi khadilo, kusanja ndi mizati monga nambala ya paketi, nthawi yojambula, gwero, kopita, protocol, kukula, ndi zina.

Mukafuna kusiya kujambula, dinani batani red Imani batani. Mutha kusunga zojambula zanu mumtundu wa .pcap kuti muwunikenso pambuyo pake, kugawana nawo, kapenanso kuzitumiza kunja mumitundu yosiyanasiyana (CSV, zolemba, zoponderezedwa, ndi zina). Kusinthasintha uku ndi komwe kumapanga Wireshark ndi chida chofunikira kwambiri pakuwunikira komanso kufufuza kwathunthu..

Chiyambi: Malangizo Musanajambule Screenshot mu Windows

Kuwonetsetsa kuti zojambula zanu zoyamba za Wireshark ndizothandiza ndipo sizimadzadza ndi phokoso losafunikira kapena zosokoneza, pali malingaliro angapo ofunika kutsatira:

• Tsekani mapulogalamu osafunikira: Musanayambe kujambula, tulukani mapulogalamu omwe amatulutsa magalimoto akumbuyo (zosintha, macheza, makasitomala a imelo, masewera, ndi zina). Mwanjira iyi mudzapewa kusakaniza magalimoto osafunikira.
• Yang'anirani firewall: Zozimitsa moto zimatha kuletsa kapena kusintha kuchuluka kwa magalimoto. Lingalirani kuyimitsa kwakanthawi ngati mukufuna kujambula kwathunthu.
• Jambulani zomwe zili zoyeneraNgati mukufuna kusanthula pulogalamu inayake, dikirani mphindi imodzi kapena ziwiri mutayamba kujambula kuti mutsegule pulogalamuyo, ndipo chitani zomwezo potseka musanayimitse kujambula.
• Dziwani mawonekedwe anu omwe akugwira ntchito: Onetsetsani kuti mwasankha netiweki khadi yolondola, makamaka ngati muli ndi ma adapter angapo kapena muli pa netiweki yeniyeni.

Potsatira malangizowa, zowonera zanu zidzakhala zoyera komanso zothandiza pakuwunika kwina kulikonse..

Zosefera mu Wireshark: Momwe Mungakhazikitsire Zomwe Zili Zofunikira

Chimodzi mwazinthu zamphamvu kwambiri za Wireshark ndi zosefera. Pali mitundu iwiri yofunikira:

• Jambulani zosefera: Amagwiritsidwa ntchito asanayambe kugwira, kukulolani kuti mutengere magalimoto omwe amakukondani kuyambira pachiyambi.
• Onetsani zosefera: Izi zikugwira ntchito pamndandanda wamapaketi omwe adagwidwa kale, kukulolani kuti muwonetse okhawo omwe akwaniritsa zomwe mukufuna.

Mwa zosefera zofala ndi:

• Pa protocol: Zosefera za HTTP, TCP, DNS, ndi zina.
• Pa IP adilesi: Mwachitsanzo, onetsani mapaketi okha kuchokera kapena kupita ku IP yeniyeni pogwiritsa ntchito ip.src == 192.168.1.1 o ip.dst == 8.8.8.8.
• Padoko: Malire zotsatira ku doko linalake (tcp.port == 80).
• Ndi chingwe cha mawu: Imapeza mapaketi omwe ali ndi mawu osakira mkati mwa zomwe zili.
• Ndi adilesi ya MAC, kutalika kwa paketi kapena mtundu wa IP.

Kuphatikiza apo, zosefera zitha kuphatikizidwa ndi ogwiritsa ntchito zomveka (ndi, or, osati) pakufufuza kolondola kwambiri, monga tcp.port == 80 ndi ip.src == 192.168.1.1.

Kodi mungagwire chiyani ndikusanthula ndi Wireshark pa Windows?

Wireshark ndi amatha kutanthauzira ma protocol osiyanasiyana opitilira 480, kuyambira pazoyambira monga TCP, UDP, IP, kupita ku ma protocol enieni, IoT, VoIP, ndi ena ambiri. Izi zikutanthauza kuti mutha kuyang'ana mitundu yonse ya kuchuluka kwa magalimoto pa netiweki, kuchokera ku mafunso osavuta a DNS kupita ku magawo obisika a SSH, maulumikizidwe a HTTPS, kusamutsa kwa FTP, kapena kuchuluka kwa SIP kuchokera patelefoni ya pa intaneti.

Komanso, Wireshark imathandizira mawonekedwe ojambulira wamba monga tcpdump (libpcap), pcapng ndi ena., ndipo imakupatsani mwayi wopondereza ndi kutsitsa zithunzi pa ntchentche pogwiritsa ntchito GZIP kusunga malo. Kwa magalimoto obisika (TLS/SSL, IPsec, WPA2, etc.), ngati muli ndi makiyi olondola, mutha kutsitsa deta ndikuwona zomwe zidalipo.

Kujambula mwatsatanetsatane magalimoto: zoonjezera zina

Musanayambe kujambula kofunikira, tsatirani ndondomekoyi kuti muwonjezere phindu la zomwe mwasonkhanitsa.:

• Sankhani mawonekedwe abwino: Nthawi zambiri adaputala yanu yogwira ndiyomwe imagwiritsa ntchito kulumikizana komwe mukugwiritsa ntchito. Ngati muli ndi kukayikira kulikonse, fufuzani kuti ndi iti yomwe yalumikizidwa kuchokera pazokonda pamaneti a Windows.
• Khazikitsani zochitika: Tsegulani mapulogalamu kapena mapulogalamu okha omwe angapangitse kuchuluka kwa magalimoto omwe mukufuna kuwasanthula.
• Patulani zochitikazoNgati mukufuna kusanthula kuchuluka kwa kuchuluka kwa mapulogalamu, tsatirani izi: yambitsani pulogalamuyi mutayamba kujambula, chitani zomwe mukufuna kusanthula, ndikutseka pulogalamuyo musanayimitse kujambula.
• Sungani chithunzithunzi: Siyani kujambula, pitani ku Fayilo> Sungani ndikusankha .pcap kapena mtundu womwe mukufuna.

Umu ndi momwe udzapeza zoyera komanso zosavuta kusanthula mafayilo, popanda kuchuluka kwa magalimoto osakanikirana.

Zitsanzo zowonetsera: kusanthula kwamagalimoto ndi Wireshark

Tiyerekeze kuti muli ndi makompyuta awiri pa netiweki yanu yapafupi ndipo imodzi mwa izo imasiya kugwiritsa ntchito intaneti. Mutha kugwiritsa ntchito Wireshark kujambula kuchuluka kwa anthu pamakina amenewo. ndikuwona ngati pali zolakwika pakuthetsa ma adilesi a DNS, ngati mapaketi sakufika pa rauta, kapena ngati chotchingira moto chikuletsa kulumikizana.

Chochitika china chodziwika bwino: zindikirani ngati tsamba lawebusayiti silikulembera bwino malowedwe anu. Ngati mutalowa pawebusaiti yopanda HTTPS ndikugwiritsa ntchito fyuluta ya HTTP yophatikizidwa ndi dzina lanu lolowera, mutha kuwona mawu anu achinsinsi akuyenda momveka bwino pamaneti, chiwonetsero chenicheni cha kuopsa kwa mawebusayiti osatetezeka.

Wireshark ndi Chitetezo: Zowopsa, Zowukira, ndi Njira Zoteteza

Mphamvu ya Wireshark ilinso pachiwopsezo chachikulu: M'manja olakwika, imatha kuthandizira kulanda mbiri, ukazitape, kapena kuwulula zambiri.. Nazi zina zowopseza ndi malingaliro:

• Kuyika zinthu zachinsinsi (kuukira kwa brute force): Mukajambula SSH, Telnet, kapena magalimoto ena, mutha kuwona zoyeserera zolowera. Samalani magawo aatali (nthawi zambiri amakhala opambana), kukula kwa paketi, ndi kuchuluka kwa zoyeserera kuti muzindikire zokayikitsa.
• Kuopsa kwa magalimoto akunja: Zosefera zonse za SSH zomwe sizikuchokera pa netiweki yanu yamkati: ngati muwona zolumikizira kuchokera kunja, khalani tcheru!
• Mawu achinsinsi osavuta: Ngati tsamba la webusayiti litumiza mayina olowera ndi mapasiwedi osasungidwa, mudzaziwona pazithunzi. Osagwiritsa ntchito Wireshark kupeza izi pamanetiweki akunja. Kumbukirani kuti kuchita zimenezi popanda chilolezo n’koletsedwa.
• Kuvomereza ndi kuvomerezeka: Imangowunika kuchuluka kwa magalimoto kuchokera pamanetiweki anu kapena ndi chilolezo chodziwikiratu. Lamulo liri lomveka bwino pamfundoyi, ndipo kugwiritsa ntchito molakwa kungakhale ndi zotsatira zoopsa.
• Kuwonekera ndi makhalidwe: Ngati mumagwira ntchito m'makampani, dziwitsani ogwiritsa ntchito za kusanthula ndi cholinga chake. Kulemekeza zachinsinsi ndikofunikira monga chitetezo chaukadaulo.

Wireshark Alternatives: Njira Zina za Network Analysis

Wireshark ndiye katchulidwe kosatsutsika, koma pali zida zina zomwe zimatha kuthandizira kapena, munthawi zina, m'malo mwake:

• Zamgululi: Zoyenera kumadera a Unix/Linux, zimagwira ntchito pamzere wamalamulo. Ndiwopepuka, yachangu komanso yosinthika kuti mujambule mwachangu kapena ntchito zongopanga zokha.
• Cloudshark: Tsamba lapaintaneti lotsitsa, kusanthula, ndi kugawana zojambulidwa zapaketi kuchokera pa msakatuli. Zothandiza kwambiri pazogwirizana.
• SmartSniff: Yang'anani pa Windows, yosavuta kugwiritsa ntchito kujambula malo ndikuwona zokambirana pakati pa makasitomala ndi maseva.
• ColaSoft Capsa: Graphical network analyzer yomwe imadziwika bwino chifukwa cha kuphweka kwa mawonekedwe ake komanso zosankha zinazake zowunikira madoko, kutumiza kunja, ndi kuwona pang'ono.

Kusankha njira yabwino kwambiri kumatengera zosowa zanu zenizeni.: liwiro, mawonekedwe azithunzi, mgwirizano wapaintaneti, kapena kuyanjana ndi zida zinazake.

Zokonda Zapamwamba: Makhalidwe Achiwerewere, Monitor, ndi Kusintha Kwa Dzina

Mawonekedwe achiwerewere amalola kuti netiweki khadi ijambule osati phukusi anafuna iye, koma magalimoto onse omwe amazungulira kudzera pa netiweki yomwe imalumikizidwa. Ndikofunikira kusanthula maukonde amakampani, malo omwe amagawana nawo, kapena zochitika zoyeserera.

Pa Windows, pitani ku Jambulani > Zosankha, sankhani mawonekedwe ndikuyang'ana bokosi lachiwerewere. Kumbukirani kuti pamanetiweki a Wi-Fi, kupatula zida zenizeni, mudzangowona kuchuluka kwa anthu pazida zanu.

Koma, Kusintha kwa mayina kumasintha ma adilesi a IP kukhala mayina owerengeka (mwachitsanzo, 8.8.8.8 mu google-public-dns-a.google.com). Mutha kuloleza kapena kuletsa izi kuchokera ku Sinthani> Zokonda> Kusanja Dzina. Zimathandiza kwambiri kuzindikira zida panthawi yojambula, ngakhale zimatha kuchepetsa ndondomekoyi ngati pali maadiresi ambiri omwe akuthetsedwa.