{"id":113528,"date":"2024-02-11T16:02:43","date_gmt":"2024-02-11T14:02:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-sistemy-indeksaczii-setevogo-trafika-arkime-5-0"},"modified":"2024-02-11T16:02:43","modified_gmt":"2024-02-11T14:02:46","slug":"vypusk-sistemy-indeksaczii-setevogo-trafika-arkime-5-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-indeksaczii-setevogo-trafika-arkime-5-0","title":{"rendered":"Lansarea sistemului de indexare a traficului de re\u021bea Arkime 5.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A fost publicat un nou versiune a sistemului pentru captarea, stocarea \u0219i indexarea pachetelor de re\u021bea Arkime 5.0, care ofer\u0103 instrumente pentru evaluarea vizual\u0103 a fluxurilor de trafic \u0219i c\u0103utarea informa\u021biilor legate de activitatea de re\u021bea. Proiectul a fost ini\u021bial dezvoltat de compania AOL cu scopul de a crea o alternativ\u0103 open-source la platformele comerciale de procesare a pachetelor de re\u021bea, sus\u021bin\u00e2nd desf\u0103\u0219urarea pe serverele proprii \u0219i capabil\u0103 s\u0103 se scaleze pentru a gestiona traficul la viteze de zeci de gigabi\u021bi pe secund\u0103. Codul componentelor pentru captarea traficului este scris \u00een limbajul C, iar interfa\u021ba este implementat\u0103 pe Node.js\/JavaScript. Codurile surs\u0103 sunt distribuite sub licen\u021ba Apache 2.0. Se suport\u0103 func\u021bionarea \u00een Linux \u0219i FreeBSD. Pachetele gata preparate sunt disponibile pentru Arch Linux, RHEL\/CentOS \u0219i Ubuntu.      <\/p>\n<p>Arkime include instrumente pentru captarea \u0219i indexarea traficului \u00een format PCAP \u0219i ofer\u0103, de asemenea, resurse pentru acces rapid la datele indexate. Utilizarea formatului standard PCAP simplific\u0103 semnificativ integrarea cu analizatorii de trafic existen\u021bi, cum ar fi Wireshark. Volumul de date stocate este limitat doar de dimensiunea stoc\u0103rii disponibile. Metadatele despre sesiuni sunt indexate \u00eentr-un cluster bazat pe motorul Elasticsearch sau OpenSearch. Componenta pentru captarea traficului func\u021bioneaz\u0103 \u00een mod multi-thread \u0219i rezolv\u0103 sarcini precum monitorizarea, \u00eenregistrarea dump-urilor PCAP pe disc, analiza pachetelor capturate \u0219i trimiterea metadatelor despre sesiuni (SPI, Stateful Packet Inspection) \u0219i protocoale c\u0103tre clusterul Elasticsearch\/OpenSearch. Este posibil\u0103 stocarea fi\u0219ierelor PCAP \u00eentr-o form\u0103 criptat\u0103.      <\/p>\n<p>Pentru analiza informa\u021biilor acumulate, este oferit o interfa\u021b\u0103 web care permite navigarea, c\u0103utarea \u0219i exportul selec\u021biilor. Interfa\u021ba web include mai multe moduri de vizualizare \u2014 de la statistici generale, h\u0103r\u021bi de conexiuni \u0219i grafice vizuale cu date despre schimb\u0103rile activit\u0103\u021bii de re\u021bea, p\u00e2n\u0103 la instrumente pentru studierea sesiunilor individuale, analiza activit\u0103\u021bii pe baza protocoalelor utilizate \u0219i analiza datelor din dump-uri PCAP. De asemenea, este disponibil un API, care permite transmiterea c\u0103tre aplica\u021bii externe a datelor despre pachetele capturate \u00een format PCAP \u0219i sesiunile analiza\u021bi \u00een format JSON.   <center><img decoding=\"async\" alt=\"Lansarea sistemului de indexare a traficului de re\u021bea Arkime 5.0\" src=\"\/wp-content\/uploads\/2024\/02\/772edc1942bf2ff782934413ae765304.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>    <\/p>\n<p>\u00cen noua versiune:  <\/p>\n<ul>\n<li class=\"l\"> A fost ad\u0103ugat\u0103 op\u021biunea de a trimite interog\u0103ri combinate de informa\u021bii prin serviciul Cont3xt pentru a colecta informa\u021bii disponibile din diverse surse deschise (OSINT) despre mai multe obiecte simultan.      <center><img decoding=\"async\" alt=\"Lansarea sistemului de indexare a traficului de re\u021bea Arkime 5.0\" src=\"\/wp-content\/uploads\/2024\/02\/b0c6cd0c154c34abf70194383f78431b.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>\n<li class=\"l\"> A fost ad\u0103ugat\u0103 suportul pentru metodele de generare a amprentelor de trafic JA4 \u0219i JA4+ pentru identificarea protocoalelor de re\u021bea \u0219i aplica\u021biilor.  <center><img decoding=\"async\" alt=\"Lansarea sistemului de indexare a traficului de re\u021bea Arkime 5.0\" src=\"\/wp-content\/uploads\/2024\/02\/e9965e150382b79e267e825c32bab3b9.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>\n<li class=\"l\"> A fost modificat designul blocului cu informa\u021bii detaliate despre sesiune, minimiz\u00e2nd spa\u021biul neutilizat \u0219i implement\u00e2nd un aranjament pe dou\u0103 coloane pentru ecrane mari.    <center><img decoding=\"async\" alt=\"Lansarea sistemului de indexare a traficului de re\u021bea Arkime 5.0\" src=\"\/wp-content\/uploads\/2024\/02\/5f0f3d129459a0285e825292f94af909.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>\n<li class=\"l\"> Au fost ad\u0103ugate meniuri derulante \u00een tab-urile Files, History \u0219i Stats pentru a permite c\u0103utarea simultan\u0103 \u00een mai multe instan\u021be ale interfe\u021bei pentru vizualizarea statisticilor (Viewer).    <center><img decoding=\"async\" alt=\"Lansarea sistemului de indexare a traficului de re\u021bea Arkime 5.0\" src=\"\/wp-content\/uploads\/2024\/02\/d7a26c48caa6d7b47fafd2f4172a451c.png\" style=\"display:block;margin: 0 auto;\" \/><\/center>\n<li class=\"l\"> Sistemul de autorizare a fost unificat \u0219i separat \u00eentr-un modul dedicat, folosit acum \u00een toate aplica\u021biile Arkime. \u00cen loc de modul anonim de autorizare implicit, este folosit\u0103 metoda digest. Au fost ad\u0103ugate noi moduri de autorizare: basic, form, basic+form, basic+oidc, headerOnly, header+digest \u0219i header+basic.\n<li class=\"l\"> Toate aplica\u021biile au fost migrate la un subsistem de configurare unificat, care suport\u0103 procesarea set\u0103rilor \u00een diferite formate (ini, json, yaml) \u0219i poate \u00eenc\u0103rca set\u0103rile din diverse surse, de exemplu, de pe disc, prin re\u021bea prin HTTPS sau din OpenSearch\/Elasticsearch.\n<li class=\"l\"> A fost ad\u0103ugat\u0103 suportul pentru importul de PCAP-uri salvate (offline) cu \u00eenc\u0103rcarea acestora prin URL prin HTTPS sau din stocarea Amazon S3, f\u0103r\u0103 a necesita salvarea prealabil\u0103 pe sistemul local.    <\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60586\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430, \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Arkime 5.0, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e\u0439 \u043e\u0446\u0435\u043d\u043a\u0438 \u043f\u043e\u0442\u043e\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u043f\u043e\u0438\u0441\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0435\u043a\u0442 \u0431\u044b\u043b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 AOL \u0441 \u0446\u0435\u043b\u044c\u044e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0437\u0430\u043c\u0435\u043d\u044b \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u0441\u0432\u043e\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0439 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044f\u0445 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":113529,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113528","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430, \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Arkime 5.0, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e\u0439 \u043e\u0446\u0435\u043d\u043a\u0438 \u043f\u043e\u0442\u043e\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u043f\u043e\u0438\u0441\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-indeksaczii-setevogo-trafika-arkime-5-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 Arkime 5.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430, \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Arkime 5.0, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e\u0439 \u043e\u0446\u0435\u043d\u043a\u0438 \u043f\u043e\u0442\u043e\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u043f\u043e\u0438\u0441\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-indeksaczii-setevogo-trafika-arkime-5-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-02-11T14:02:46+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-02-11T14:02:46+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansarea sistemului de indexare a traficului de re\u021bea Arkime 5.0 | ProHoster","description":"A fost lansat\u0103 versiunea sistemului pentru captarea, stocarea \u0219i indexarea pachetelor de re\u021bea Arkime 5.0, care ofer\u0103 instrumente pentru evaluarea vizual\u0103 a fluxurilor de trafic \u0219i c\u0103utarea informa\u021biilor legate de activitatea de re\u021bea.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-indeksaczii-setevogo-trafika-arkime-5-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 Arkime 5.0 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043b\u044f \u0437\u0430\u0445\u0432\u0430\u0442\u0430, \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Arkime 5.0, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u043e\u0439 \u043e\u0446\u0435\u043d\u043a\u0438 \u043f\u043e\u0442\u043e\u043a\u043e\u0432 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u043f\u043e\u0438\u0441\u043a\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c\u044e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-sistemy-indeksaczii-setevogo-trafika-arkime-5-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-02-11T14:02:46+00:00","article:modified_time":"2024-02-11T14:02:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/113528","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=113528"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/113528\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/113529"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=113528"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=113528"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=113528"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}