{"id":81199,"date":"2020-05-11T19:42:01","date_gmt":"2020-05-11T17:42:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/aol-opublikoval-sistemu-indeksaczii-setevogo-trafika-moloch-2-3"},"modified":"2020-05-11T19:42:01","modified_gmt":"2020-05-11T17:42:01","slug":"aol-opublikoval-sistemu-indeksaczii-setevogo-trafika-moloch-2-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/aol-opublikoval-sistemu-indeksaczii-setevogo-trafika-moloch-2-3","title":{"rendered":"AOL har offentliggjort netv\u00e6rkstrafikindekseringssystemet Moloch 2.3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

AOL Company udgivet<\/a><\/noindex> system release for capturing, storing, and indexing network packets Moloch 2.3<\/a><\/noindex>, providing tools for visual assessment of traffic flows and searching for information related to network activity. The code is written in C (interface in Node.js\/JavaScript) and distribueres<\/a><\/noindex> is licensed under Apache 2.0. It supports operation in Linux and FreeBSD. Ready-made pakker<\/a><\/noindex> are prepared for different versions of CentOS and Ubuntu.<\/p>\n

Projektet blev oprettet i 2012 med det form\u00e5l at skabe et \u00e5bent alternativ til kommercielle platforme til behandling af netv\u00e6rkstrafik, der kan skalere til det niveau, som AOL's trafikm\u00e6ngder kr\u00e6ver. Implementeringen af det nye system i AOL gav mulighed for fuld kontrol over infrastrukturen ved at implementere det p\u00e5 sine egne servere og reducere omkostningerne betydeligt \u2014 brugen af Moloch til fuld trafikoptagelse i alle AOL-netv\u00e6rk kostede det samme som ved anvendelse af on a commercial solution<\/a><\/noindex> which was only used for traffic capture in one network. The system can scale to handle traffic speeds of tens of gigabits per second. The volume of stored data is limited only by the size of the available disk array.
\nSession metadata is indexed in a cluster based on the engine Elasticsearch<\/a><\/noindex>.<\/p>\n

Moloch includes tools for capturing and indexing traffic in standard PCAP format, as well as for quick access to indexed data. A web interface is offered for analyzing the accumulated information, allowing navigation, searching, and exporting samples. It also provides API<\/a><\/noindex>, enabling the transfer of captured packet data to external applications in PCAP format and analyzed sessions in JSON format. The use of PCAP format significantly simplifies integration with existing traffic analyzers such as Wireshark.<\/p>\n

Moloch consists of three basic components:<\/p>\n