{"id":122015,"date":"2025-02-20T14:22:14","date_gmt":"2025-02-20T12:22:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02"},"modified":"2025-02-20T14:22:14","modified_gmt":"2025-02-20T12:22:15","slug":"vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-netflow-ipfix-sflow-kollektora-xenoeye-25-02","title":{"rendered":"L\u00ebshimi i kolektorit Netflow\/IPFIX\/sFlow Xenoeye m\u00eb 25.02","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\u00cbsht\u00eb publikuar versioni i kolektorit Netflow\/IPFIX\/sFlow Xenoeye 25.02. Kolektori lejon mbledhjen e statistikave t\u00eb flukseve n\u00eb trafik nga pajisje t\u00eb ndryshme rrjetesh, t\u00eb cilat transmetohen duke p\u00ebrdorur protokollet Netflow v5, v9, IPFIX dhe sFlow, t\u00eb p\u00ebrpunoj\u00eb t\u00eb dh\u00ebnat, t\u00eb krijoj\u00eb raportet dhe t\u00eb nd\u00ebrtoj\u00eb grafik\u00ebt. Baza e projektit \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn C, kodi shp\u00ebrndahet n\u00ebn licenc\u00ebn ISC. <\/p>\n
Kolektori agregon trafik rrjeti sipas fushave t\u00eb zgjedhura dhe eksporton t\u00eb dh\u00ebnat n\u00eb PostgreSQL. Me k\u00ebto t\u00eb dh\u00ebna \u00ebsht\u00eb e mundur t\u00eb nd\u00ebrtohen raportet, grafik\u00ebt (duke p\u00ebrdorur gnuplot, skriptet n\u00eb Python + Matplotlib) ose panele n\u00eb Grafana. P\u00ebr m\u00eb tep\u00ebr, kolektori mund t\u00eb ekzekutoj\u00eb skriptet e p\u00ebrdoruesve kur tejkalohen pragjet ose kur trafiku bie n\u00ebn pragje.
<\/center> <\/p>\n
P\u00ebr llogaritjen e shpejt\u00ebsis\u00eb aktuale t\u00eb trafikut p\u00ebrdoren mesataret lundruese. Mekanizmi q\u00eb ndjek tejkalimet e pragjeve \u00ebsht\u00eb i dizajnuar p\u00ebr t\u00eb njoftuar p\u00ebr sulmet DoS\/DDoS dhe p\u00ebr t\u00eb nisur shtypjen p\u00ebrmes njoftimeve BGP (Flowspec ose Blackhole). Me kolektorin vjen nj\u00eb shembull skripti p\u00ebr robotin Telegram, i cili mund t\u00eb njoftoj\u00eb n\u00eb mesazh p\u00ebr anomalit\u00eb. Kolektori nuk k\u00ebrkon shum\u00eb burime, ai mund t\u00eb p\u00ebrpunoj\u00eb trafik t\u00eb rrjeteve t\u00eb vogla n\u00eb Raspberry\/Orange Pi ose n\u00eb nj\u00eb makin\u00eb virtuale me 2-4GB memorie t\u00eb rastit. <\/p>\n
Ndryshimet n\u00eb versionin e ri: <\/p>\n
\n
\u00cbsht\u00eb shtuar mb\u00ebshtetje p\u00ebr protokollin sFlow, p\u00ebr t\u00eb cilin \u00ebsht\u00eb realizuar mund\u00ebsia p\u00ebr t\u00eb parse p\u00ebrmbajtjen (payload) e paketeve rrjetike dhe p\u00ebr t\u00eb nxjerr\u00eb prej saj informacion p\u00ebr DNS dhe TLS (HTTPS) SNI. Hostuesit dhe pronar\u00ebt e qendrave t\u00eb t\u00eb dh\u00ebnave mund ta p\u00ebrdorin k\u00ebt\u00eb mund\u00ebsi p\u00ebr t\u00eb luftuar phishing dhe p\u00ebr t\u00eb vler\u00ebsuar se cilat domenet<\/a> dhe faqet jan\u00eb t\u00eb hostuara n\u00eb rrjet.\n
![\"L\u00ebshimi](\"\/wp-content\/uploads\/2025\/02\/14036e9ad0314171ccf650634a98353e.png\")
<\/center> <\/p>\n