{"id":37189,"date":"2019-10-31T22:16:15","date_gmt":"2019-10-31T19:16:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks\/"},"modified":"2019-10-31T22:16:15","modified_gmt":"2019-10-31T19:16:15","slug":"setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks","title":{"rendered":"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/8509341060b74259e9383af1b28c1e59.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb koh\u00ebt e fundit, n\u00eb internet mund t\u00eb gjejm\u00eb nj\u00eb sasi t\u00eb madhe materialesh mbi tem\u00ebn <b>e analiz\u00ebs s\u00eb trafikimit n\u00eb periferi t\u00eb rrjetit<\/b>. Megjithat\u00eb, t\u00eb gjith\u00eb p\u00ebrndryshe tamam harrojn\u00eb p\u00ebr <b>analiz\u00ebn e trafikut lokal<\/b>, e cila \u00ebsht\u00eb po aq e r\u00ebnd\u00ebsishme. Ky artikull trajton k\u00ebt\u00eb tem\u00eb. N\u00eb shembullin e <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/katalog\/flowmon\">Flowmon Networks<\/a><\/noindex> ne do t\u00eb kujtojm\u00eb Netflow-in e vjet\u00ebr (dhe alternativat e tij), do t\u00eb shqyrtojm\u00eb raste interesante, anomali t\u00eb mundshme n\u00eb rrjet dhe do t\u00eb m\u00ebsojm\u00eb p\u00ebravantazhet e zgjidhjes, kur <b>i gjith\u00eb rrjeti funksionon si nj\u00eb sensor i vet\u00ebm<\/b>. Dhe e r\u00ebnd\u00ebsishmja \u2014 nj\u00eb analiz\u00eb t\u00eb till\u00eb t\u00eb trafikut lokal mund ta b\u00ebni plot\u00ebsisht falas, brenda nj\u00eb licence provuese (<b>45 dit\u00eb<\/b>). N\u00ebse kjo tem\u00eb ju intereson, ju ftojm\u00eb t\u00eb vazhdoni m\u00eb posht\u00eb. N\u00ebse nuk keni d\u00ebshir\u00eb t\u00eb lexoni, p\u00ebr t\u00eb p\u00ebrshpejtuar, mund t\u00eb regjistroheni n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/events\/vebinari_flowmon\">webinarin e ardhsh\u00ebm<\/a><\/noindex>, ku do t\u00eb tregojm\u00eb dhe shpjegojm\u00eb gjith\u00e7ka (aty do t\u00eb mund t\u00eb m\u00ebsoni edhe p\u00ebr formimin e ardhsh\u00ebm n\u00eb produkt).<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>\u00c7far\u00eb \u00ebsht\u00eb Flowmon Networks?<\/h3>\n<p>\nPara s\u00eb gjithash, Flowmon \u00ebsht\u00eb nj\u00eb furnizues IT evropian. Kompania \u00ebsht\u00eb \u00e7eke, me seli n\u00eb qytetin Brno (\u00e7\u00ebshtja e sanksioneve nuk \u00ebsht\u00eb tem\u00eb). N\u00eb form\u00ebn e saj aktuale, kompania \u00ebsht\u00eb e pranishme n\u00eb treg q\u00eb nga viti 2007. Para k\u00ebsaj, ishte e njohur me mark\u00ebn Invea-Tech. Pra, n\u00eb total, p\u00ebr zhvillimin e produkteve dhe zgjidhjeve jan\u00eb shpenzuar pothuajse 20 vjet.<\/p>\n<p>Flowmon pozicionohet si nj\u00eb mark\u00eb e klas\u00ebs A. Zhvillon zgjidhje premium p\u00ebr klient\u00eb korporativ\u00eb dhe \u00ebsht\u00eb e sh\u00ebnuar n\u00eb katror\u00ebt Gartner n\u00eb drejtimin e Monitorimit dhe Diagnostik\u00ebs s\u00eb Performanc\u00ebs Rrjet (NPMD). \u00cbsht\u00eb interesante se nga t\u00eb gjitha kompanit\u00eb n\u00eb raport, Flowmon \u00ebsht\u00eb e vetmja mark\u00eb e sh\u00ebnuar nga Gartner si prodhues zgjidhjesh si p\u00ebr monitorimin e rrjetit ashtu edhe p\u00ebr mbrojtjen e informacionit (Analiza e Sjelljes n\u00eb Rrjet). Nuk z\u00eb vendin e par\u00eb, por p\u00ebr shkak t\u00eb k\u00ebsaj, nuk p\u00ebrmendet si krah i nj\u00eb Boeing-u.<\/p>\n<h3>Cilat probleme mund t\u00eb zgjidh\u00eb produkti?<\/h3>\n<p>\nGjer\u00ebsisht, mund t\u00eb ve\u00e7ojm\u00eb grupin e m\u00ebposht\u00ebm t\u00eb problemeve q\u00eb p\u00ebrprodukten e kompanis\u00eb:<\/p>\n<ol>\n<li>rritja e stabilitetit t\u00eb funksionimit t\u00eb rrjetit dhe burimeve rrjetore duke minimizuar koh\u00ebn e pushimit dhe t\u00eb pap\u00ebrfshirjes s\u00eb tyre;<\/li>\n<li>rritja e nivelit t\u00eb p\u00ebrgjithsh\u00ebm t\u00eb performanc\u00ebs s\u00eb rrjetit;<\/li>\n<li>rritja e efikasitetit t\u00eb pun\u00ebs s\u00eb personelit administrativ, duke p\u00ebrfshir\u00eb:\n<ul>\n<li>p\u00ebrdorimin e mjeteve moderne t\u00eb monitorimit inovativ t\u00eb rrjetit, t\u00eb bazuara n\u00eb informacionin rreth flukseve IP;<\/li>\n<li> ofrimit analiz\u00ebs s\u00eb detajuar t\u00eb funksionimit dhe gjendjes s\u00eb rrjetit \u2013 p\u00ebrdoruesve dhe aplikacioneve q\u00eb punojn\u00eb n\u00eb rrjet, t\u00eb dh\u00ebnave q\u00eb transmetohen, burimeve, sh\u00ebrbimeve dhe nyjeve n\u00eb nd\u00ebrveprim;<\/li>\n<li> p\u00ebr reagimin ndaj incidenteve para se ato t\u00eb ndodhin, e jo pas humbjes s\u00eb sh\u00ebrbimeve nga p\u00ebrdoruesit dhe klient\u00ebt;<\/li>\n<li> p\u00ebr t\u00eb shkurtuar koh\u00ebn dhe burimet e nevojshme p\u00ebr administrimin e rrjetit dhe infrastruktur\u00ebs IT;<\/li>\n<li> p\u00ebr t\u00eb leht\u00ebsuar detyrat e k\u00ebrkimit t\u00eb defekteve.<\/li>\n<\/ul>\n<\/li>\n<li>p\u00ebr t\u00eb rritur nivelin e mbrojtjes s\u00eb rrjetit dhe burimeve informative t\u00eb kompanis\u00eb, fal\u00eb p\u00ebrdorimit t\u00eb teknologjive jo-n\u00ebnshkruese p\u00ebr identifikimin e aktiviteteve anormale dhe t\u00eb d\u00ebmshme n\u00eb rrjet, si dhe \"sulmet e dit\u00ebs zero\";<\/li>\n<li>p\u00ebr t\u00eb siguruar nivelin e k\u00ebrkuar t\u00eb SLA p\u00ebr aplikacionet e rrjetit dhe bazat e t\u00eb dh\u00ebnave.<\/li>\n<\/ol>\n<p><\/p>\n<h3>Portofoli i produkteve t\u00eb Flowmon Networks<\/h3>\n<p>\nTani le t\u00eb shqyrtojm\u00eb drejtp\u00ebrdrejt portofolin e produkteve t\u00eb Flowmon Networks dhe t\u00eb zbulojm\u00eb se \u00e7far\u00eb b\u00ebn konkretisht kompania. Ashtu si\u00e7 kan\u00eb kuptuar shum\u00eb nga emri, specializimi kryesor \u00ebsht\u00eb n\u00eb zgjidhjet p\u00ebr monitorimin e trafikut n\u00eb rrjedh\u00eb, plus nj\u00eb s\u00ebr\u00eb modulesh shtes\u00eb q\u00eb zgjasin funksionalitetin baz\u00eb.<\/p>\n<p>N\u00eb fakt, Flowmon mund t\u00eb quhet nj\u00eb kompani me nj\u00eb produkt, ose m\u00eb sakt\u00ebsisht \u2013 nj\u00eb zgjidhje. Le t\u00eb zbulojm\u00eb n\u00ebse kjo \u00ebsht\u00eb mir\u00eb apo keq.<\/p>\n<p>Nuk ka asnj\u00eb dyshim se n\u00eb thelb t\u00eb sistemit \u00ebsht\u00eb kolektori, i cili \u00ebsht\u00eb p\u00ebrgjegj\u00ebs p\u00ebr mbledhjen e t\u00eb dh\u00ebnave nga protokollet e ndryshme t\u00eb rrjedh\u00ebs, si <b>NetFlow v5\/v9, jFlow, sFlow, NetStream, IPFIX<\/b>\u2026 Nj\u00eb gj\u00eb \u00ebsht\u00eb t\u00ebr\u00ebsisht e kuptueshme se p\u00ebr nj\u00eb kompani q\u00eb nuk \u00ebsht\u00eb e lidhur me asnj\u00eb nga prodhuesit e pajisjeve rrjet\u00ebrore \u2013 \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb ofroj\u00eb tregut nj\u00eb produkt universale, t\u00eb pa lidhur me ndonj\u00eb standard ose protokoll t\u00eb vet\u00ebm.<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/d8dddeaa90c8bc03b78282b7ca00ea86.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Flowmon Collector<\/i><\/p>\n<p>Kolektori ofrohet si n\u00eb form\u00ebn e nj\u00eb serveri harduerik, ashtu edhe si nj\u00eb makin\u00eb virtuale (VMware, Hyper-V, KVM). P\u00ebr m\u00eb tep\u00ebr, platforma harduerike \u00ebsht\u00eb realizuar n\u00eb server\u00eb t\u00eb personalizuar DELL, q\u00eb automatikisht zgjidh shum\u00eb \u00e7\u00ebshtje n\u00eb lidhje me garancin\u00eb dhe RMA-n\u00eb. Komponenti i tij harduerik p\u00ebrfshin vet\u00ebm pllakat FPGA t\u00eb kapjes s\u00eb trafikut, t\u00eb dizajnuara nga nj\u00eb filial i Flowmon, duke lejuar monitorimin me shpejt\u00ebsi deri n\u00eb 100 Gbps.<\/p>\n<p>Por \u00e7far\u00eb t\u00eb b\u00ebni n\u00ebse pajisja e existing rrjetit nuk ka mund\u00ebsi p\u00ebr t\u00eb gjeneruar rrjedh\u00eb cil\u00ebsore? Apo n\u00ebse ngarkesa mbi pajisje \u00ebsht\u00eb shum\u00eb e lart\u00eb? Asnj\u00eb problem:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/53dda0e4f42ddbf7a8add1064e0ab913.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Flowmon Prob<\/i><\/p>\n<p>P\u00ebr k\u00ebt\u00eb rast, Flowmon Networks ofron p\u00ebrdorimin e sondave t\u00eb veta (Flowmon Probe), t\u00eb cilat lidhen me rrjetin p\u00ebrmes portit SPAN t\u00eb switch-it ose duke p\u00ebrdorur ndar\u00ebsit pasiv\u00eb TAP.<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/298507c4bcb3d562f9621ff59ee6018f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Opsionet e implementimit SPAN (port i pasqyr\u00ebs) dhe TAP<\/i><\/p>\n<p>N\u00eb k\u00ebt\u00eb rast, trafiku \"t\u00eb pap\u00ebrpunuar\" q\u00eb arrin n\u00eb Flowmon Probe transformohet n\u00eb IPFIX t\u00eb zgjeruar, q\u00eb p\u00ebrmban m\u00eb shum\u00eb se <b>240 metrika me informacion<\/b>. Nd\u00ebrsa n\u00eb protokollin standard NetFlow, i gjeneruar nga pajisjet rrjet\u00ebsore, p\u00ebrmbahen jo m\u00eb shum\u00eb se 80 metrika. Kjo lejon t\u00eb sigurohet dukshm\u00ebria e protokolleve jo vet\u00ebm n\u00eb nivelet 3 dhe 4, por edhe n\u00eb nivelin 7 sipas modelit ISO OSI. Si pasoj\u00eb, administrator\u00ebt e rrjetit mund t\u00eb monitorojn\u00eb funksionimin e aplikacioneve dhe protokolleve t\u00eb tilla si e-mail, HTTP, DNS, SMB\u2026<\/p>\n<p>Koncepcionalisht, arkitektura logjike e sistemit duket si n\u00eb vijim:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/273517a6aa47726fe51c498114908c14.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPjesa qendrore e gjith\u00eb \"ekosistemit\" Flowmon Networks \u00ebsht\u00eb Collector, q\u00eb merr trafikun nga pajisjet ekzistuese t\u00eb rrjetit ose sondat e veta (Probe). Por p\u00ebr zgjidhjen Enterprise, t\u00eb ofronte funksionalitet ekskluzivisht p\u00ebr monitorimin e trafikut t\u00eb rrjetit do t\u00eb ishte shum\u00eb e thjesht\u00eb. Kjo e din\u00eb edhe zgjidhjet Open Source, ndon\u00ebse jo me nj\u00eb performanc\u00eb t\u00eb till\u00eb. Vlera e Flowmon jan\u00eb modul\u00ebt shtes\u00eb q\u00eb zgjasin funksionalitetin baz\u00eb:<\/p>\n<ul>\n<li>moduli <b>Detekimi i Anomalis\u00eb t\u00eb Siguris\u00eb<\/b> \u2013 identifikimi i aktiviteteve anomale t\u00eb rrjetit, duke p\u00ebrfshir\u00eb sulmet e \u2018dit\u00ebs zero\u2019, mbi baz\u00ebn e analiz\u00ebs heuristike t\u00eb trafikut dhe profilit tipik t\u00eb rrjetit;<\/li>\n<li>moduli <b>Monitorimi i Performanc\u00ebs s\u00eb Aplikacioneve<\/b> \u2013 mbik\u00ebqyrja e performanc\u00ebs s\u00eb aplikacioneve rrjet\u00ebsore pa instaluar \"agjent\u00eb\" dhe pa ndikuar n\u00eb sistemet e synuara;<\/li>\n<li>moduli <b>Regjistruesi i Trafikut<\/b> \u2013 regjistrimi i fragmenteve t\u00eb trafikut rrjet\u00ebsor sipas nj\u00eb seti rregullash t\u00eb paracaktuara ose sipas nj\u00eb trigger nga moduli ADS, p\u00ebr troubleshooting dhe\/ose hetimin e incidenteve t\u00eb siguris\u00eb;<\/li>\n<li>moduli <b>Mbrojtje DDoS<\/b> \u2013 mbrojtja e perimetrit t\u00eb rrjetit nga sulmet volumetrike t\u00eb refuzimit t\u00eb sh\u00ebrbimit DoS\/DDoS, p\u00ebrfshir\u00eb sulmet n\u00eb aplikacione (OSI L3\/L4\/L7).<\/li>\n<\/ul>\n<p>\nN\u00eb k\u00ebt\u00eb artikull ne do t\u00eb shqyrtojm\u00eb se si funksionon gjith\u00e7ka n\u00eb koh\u00eb reale p\u00ebrmes shembujve t\u00eb 2 moduleve \u2013 <b>Monitorimi dhe Diagnostikimi i Performanc\u00ebs s\u00eb Rrjetit<\/b> dhe <b>Detekimi i Anomalis\u00eb t\u00eb Siguris\u00eb<\/b>.<br \/>\nT\u00eb dh\u00ebnat e origjin\u00ebs:<\/p>\n<ul>\n<li>serveri Lenovo RS 140 me hypervisor VMware 6.0;<\/li>\n<li>image e makin\u00ebs virtuale Flowmon Collector, q\u00eb mund t\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/www.flowmon.com\/en\/download-free-trial\">shkarkohet k\u00ebtu<\/a><\/noindex>;<\/li>\n<li>nj\u00eb \u00e7ift switch-esh me mb\u00ebshtetje p\u00ebr protokollet e rrjedh\u00ebs.<\/li>\n<\/ul>\n<p><\/p>\n<h3>Hapi 1. Instalimi i Flowmon Collector<\/h3>\n<p>\nZhvillimi i makin\u00ebs virtuale n\u00eb VMware ndodh n\u00eb nj\u00eb m\u00ebnyr\u00eb krejt standart nga modeli OVF. Si p\u00ebrfundim, marrim nj\u00eb makin\u00eb virtuale n\u00ebn menaxhimin e CentOS dhe me softuer t\u00eb gatsh\u00ebm p\u00ebr t'u punuar. K\u00ebrkesat p\u00ebr burime jan\u00eb t\u00eb arsyeshme:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/9ae1559b01c639763e0053ee1de120ca.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKalon vet\u00ebm t\u00eb kryejm\u00eb inicializimin baz\u00eb me komand\u00ebn <b>sysconfig<\/b>:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/c65a47dfd025595f7256b1e30b941e42.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKonfigurojm\u00eb IP-n\u00eb n\u00eb portin e menaxhimit, DNS, koh\u00ebn, Hostname dhe mund t\u00eb lidhemi me nd\u00ebrfaqen WEB.<\/p>\n<h3>Hapi 2. Instalimi i licenc\u00ebs<\/h3>\n<p>\nLicenca provuese p\u00ebr nj\u00eb muaj e gjysm\u00eb krijohet dhe shkarkohet s\u00eb bashku me imazhin e makin\u00ebs virtuale. Ngarkohet p\u00ebrmes <b>Qendra e Konfigurimit -&gt; Licenca<\/b>. Si p\u00ebrfundim shohim:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/a5c1c99ad14cf4ca5dfb560d55fa369d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nGjith\u00e7ka \u00ebsht\u00eb gati. Mund t\u00eb fillojm\u00eb t\u00eb punojm\u00eb.<\/p>\n<h3>Hapi 3. Konfigurimi i marr\u00ebsit n\u00eb kolektor<\/h3>\n<p>\nN\u00eb k\u00ebt\u00eb faz\u00eb duhet t\u00eb p\u00ebrcaktojm\u00eb m\u00ebnyr\u00ebn si do t\u00eb hyjn\u00eb t\u00eb dh\u00ebnat n\u00eb sistem nga burimet. Si\u00e7 kemi th\u00ebn\u00eb m\u00eb par\u00eb, kjo mund t\u00eb jet\u00eb nj\u00eb nga protokollet flow ose porti SPAN n\u00eb switch.<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/3ff1c77a58c152314a1615dd98ca92ca.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb shembullin ton\u00eb do t\u00eb p\u00ebrdorim marrjen e t\u00eb dh\u00ebnave p\u00ebrmes protokolleve <b>NetFlow v9 dhe IPFIX<\/b>. N\u00eb k\u00ebt\u00eb rast, si target e caktuam adres\u00ebn IP t\u00eb nd\u00ebrfaqes s\u00eb Menaxhimit - <b>192.168.78.198<\/b>. Nd\u00ebrfaqet eth2 dhe eth3 (me tipin Nd\u00ebrfaqe Monitorimi) p\u00ebrdoren p\u00ebr marrjen e nj\u00eb kopje t\u00eb trafikut \"t\u00eb pap\u00ebrpunuar\" nga porta SPAN e switch-it. I kalojm\u00eb, nuk \u00ebsht\u00eb rasti yn\u00eb.<br \/>\nM\u00eb pas kontrollojm\u00eb portin e kolektorit, ku duhet t\u00eb arrij\u00eb trafiku.<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/31fff2f3bfef52b001edb39bdb3293f9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb rastin ton\u00eb, kolektori pret trafik n\u00eb portin UDP\/2055.<\/p>\n<h3>Hapi 4. Konfigurimi i pajisjeve rrjet\u00eb p\u00ebr eksportimin e flow<\/h3>\n<p>\nKonfigurimi i NetFlow n\u00eb pajisjet Cisco Systems, ndoshta, mund t\u00eb quhet nj\u00eb veprim krejt normal p\u00ebr \u00e7do administrator rrjeti. P\u00ebr shembullin ton\u00eb do t\u00eb marrim di\u00e7ka m\u00eb t\u00eb pazakont\u00eb. N\u00eb ve\u00e7anti, routerin MikroTik RB2011UiAS-2HnD. Po, si\u00e7 \u00ebsht\u00eb e \u00e7uditshme, kjo zgjidhje buxhetore p\u00ebr zyra t\u00eb vogla dhe sht\u00ebpiake mb\u00ebshtet gjithashtu protokollet NetFlow v5\/v9 dhe IPFIX. N\u00eb parametrat e konfigurimit vendosim target-in (adres\u00ebn e kolektorit 192.168.78.198 dhe portin 2055):<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/3604b4c1c0b013a3822e99d97ab9e9cb.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDhe shtojm\u00eb t\u00eb gjitha metrikat e disponueshme p\u00ebr eksport:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/f22fa921b4195b184e82c12a2b852f3c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb k\u00ebt\u00eb pik\u00eb mund t\u00eb themi se konfigurimi baz\u00eb \u00ebsht\u00eb p\u00ebrfunduar. Kontrollojm\u00eb n\u00ebse trafiku po hyn n\u00eb sistem.<\/p>\n<h3>Hapi 5. Kontrolli dhe funksionimi i modulit t\u00eb Monitorimit dhe Diagnostik\u00ebs s\u00eb Performanc\u00ebs s\u00eb Rrjetit<\/h3>\n<p>\nT\u00eb kontrollojm\u00eb pranin\u00eb e trafikut nga burimi mund t\u00eb b\u00ebhet n\u00eb seksionin <b>Qendra e Monitorimit Flowmon -&gt; Burimet<\/b>:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/b167ac4ba70c07d9d0fb521a1cf1a7ea.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nShohim q\u00eb t\u00eb dh\u00ebnat po hyjn\u00eb n\u00eb sistem. Pas nj\u00eb kohe t\u00eb caktuar, pasi kolektori mbledh trafik, widget-at do t\u00eb fillojn\u00eb t\u00eb tregojn\u00eb informacion:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/8cee4912c371366ff30ff7597f87cabc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSistema \u00ebsht\u00eb e nd\u00ebrtuar sipas parimit drill down. Kjo do t\u00eb thot\u00eb, p\u00ebrdoruesi, duke zgjedhur nj\u00eb fragment t\u00eb interesit n\u00eb diagram ose grafik, \"zhytet\" n\u00eb at\u00eb nivel thell\u00ebsie t\u00eb t\u00eb dh\u00ebnave q\u00eb i nevojiten:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/1caa3b3c59dcd77210f690606a16740f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDerisa t\u00eb arrihet informacioni p\u00ebr \u00e7do lidhje rrjetesh dhe konektim:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/ef8c8f4d2df0ae65b94fcc3be058099b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Hapi 6. Moduli Anomaly Detection Security<\/h3>\n<p>\nKy modul mund t\u00eb quhet, ndoshta, nj\u00eb nga m\u00eb interesant\u00ebt, fal\u00eb p\u00ebrdorimit t\u00eb metodave pa n\u00ebnshkrime p\u00ebr zbulimin e anomalive n\u00eb trafikun rrjetor dhe aktivitetin e d\u00ebmsh\u00ebm n\u00eb rrjet. Por kjo nuk \u00ebsht\u00eb nj\u00eb alternativ\u00eb p\u00ebr sistemet IDS\/IPs. Puna me modul fillon me \"trajnim\". P\u00ebr k\u00ebt\u00eb, n\u00eb nj\u00eb wizard t\u00eb ve\u00e7ant\u00eb tregohen t\u00eb gjitha komponent\u00ebt dhe sh\u00ebrbimet kryesore t\u00eb rrjetit, duke p\u00ebrfshir\u00eb:<\/p>\n<ul>\n<li>adresat e portave, DNS, DHCP dhe NTP server\u00ebt,<\/li>\n<li>adresat n\u00eb segmente t\u00eb p\u00ebrdoruesve dhe server\u00ebve.<\/li>\n<\/ul>\n<p>\nPas k\u00ebsaj, sistemi kalon n\u00eb modin e trajnimit, i cili zakonisht zgjasin nga 2 jav\u00eb deri n\u00eb 1 muaj. Gjat\u00eb k\u00ebsaj kohe, sistemi formon nj\u00eb baseline t\u00eb trafikut q\u00eb \u00ebsht\u00eb karakteristik p\u00ebr rrjetin ton\u00eb. Th\u00ebn\u00eb ndryshe, sistemi studion:<\/p>\n<ul>\n<li>\u00e7far\u00eb sjelljeje \u00ebsht\u00eb karakteristik p\u00ebr nyjat e rrjetit?<\/li>\n<li>\u00e7far\u00eb sasi t\u00eb dh\u00ebnash zakonisht transmetohen dhe jan\u00eb normale p\u00ebr rrjetin?<\/li>\n<li>\u00e7far\u00eb kohe pune \u00ebsht\u00eb tipi p\u00ebr p\u00ebrdoruesit?<\/li>\n<li>\u00e7far\u00eb aplikacionesh funksionojn\u00eb n\u00eb rrjet?<\/li>\n<li>dhe shum\u00eb t\u00eb tjera..<\/li>\n<\/ul>\n<p>\nSi rezultat, ne fitojm\u00eb nj\u00eb mjet q\u00eb identifikon \u00e7do anomali n\u00eb rrjetin ton\u00eb dhe devijime nga sjellja karakteristike. K\u00ebtu jan\u00eb disa shembuj q\u00eb sistemi mund t\u00eb identifikoj\u00eb:<\/p>\n<ul>\n<li>shp\u00ebrndarja n\u00eb rrjet e nj\u00eb softueri t\u00eb ri t\u00eb d\u00ebmsh\u00ebm, t\u00eb paidentifikuesh\u00ebm nga n\u00ebnshkrimet e antivirus\u00ebve;<\/li>\n<li>nd\u00ebrtimi i tunel\u00ebve DNS, ICMP ose t\u00eb tjer\u00eb dhe transmetimi i t\u00eb dh\u00ebnave anash nd\u00ebrmjet\u00ebsit t\u00eb zjarrit;<\/li>\n<li>shfaqja n\u00eb rrjet e nj\u00eb kompjuteri t\u00eb ri, q\u00eb paraqet veten si server DHCP dhe\/ose DNS.<\/li>\n<\/ul>\n<p>\nLe t\u00eb shohim se si duket n\u00eb jet\u00eb. Pasi sistemi juaj p\u00ebrfundoi trajnimin dhe nd\u00ebrtuan baseline t\u00eb trafikut t\u00eb rrjetit, ai fillon t\u00eb zbuloj\u00eb incidente:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/e4d7d168716fc9f703dd9f14faf5816f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nFaqja kryesore e modulit \u2013 nj\u00eb grafik temporar me shfaqjen e incidenteve t\u00eb zbuluara. N\u00eb shembullin ton\u00eb shohim nj\u00eb shp\u00ebrthim t\u00eb duksh\u00ebm, rreth or\u00ebs 9 deri n\u00eb 16. E theksojm\u00eb dhe shohim m\u00eb n\u00eb holl\u00ebsi. <\/p>\n<p>Nj\u00eb sjellje e dukshme anormale e sulmuesit n\u00eb rrjet \u00ebsht\u00eb evidentuar. Gjith\u00e7ka fillon me at\u00eb se hosti me adres\u00eb 192.168.3.225 filloi nj\u00eb skanim horizontal t\u00eb rrjetit p\u00ebr portin 3389 (sh\u00ebrbimi Microsoft RDP) dhe gjen 14 \"\u00ebndrrat\" potenciale:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/5844fab428bd7adedbc694bf7dc7f19e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\ndhe<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/566cb37c28eb803d404e06a8d61372c3.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nIncident tjet\u00ebr i dokumentuar \u2013 hosti 192.168.3.225 fillon nj\u00eb sulm brutforc p\u00ebr t\u00eb provuar fjal\u00ebkalimet n\u00eb sh\u00ebrbimin RDP (porti 3389) n\u00eb adresat e identifikuara m\u00eb par\u00eb:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/18c97646b3982c5a9db86901cae9f5a7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSi pasoj\u00eb e sulmit, n\u00eb nj\u00eb nga hostet e thyer zbulohet nj\u00eb anomalie SMTP. Me fjal\u00eb t\u00eb tjera, ka filluar d\u00ebrgimi i SPAM-it:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/fd1fce3c9bb23903a3c54d270924c5fe.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKy shembull \u00ebsht\u00eb nj\u00eb demonstrim i qart\u00eb i mund\u00ebsive t\u00eb funksionimit t\u00eb sistemit dhe modulit Anomaly Detection Security, p\u00ebrkat\u00ebsisht. Gjykoni p\u00ebr efektivitetin vet\u00eb. Me k\u00ebt\u00eb e p\u00ebrfundojm\u00eb p\u00ebrmbledhjen funksionale t\u00eb zgjidhjes.<\/p>\n<h3>P\u00ebrfundim<\/h3>\n<p>\nP\u00ebrmbledhim, cilat p\u00ebrfundime lidhur me Flowmon mund t\u00eb b\u00ebjm\u00eb nga p\u00ebrmbledhja:<\/p>\n<ul>\n<li>Flowmon \u2013 nj\u00eb zgjidhje e nivelit premium p\u00ebr klient\u00ebt korporativ\u00eb;<\/li>\n<li>fal\u00eb universialitetit dhe kompatibilitetit, grumbullimi i t\u00eb dh\u00ebnave \u00ebsht\u00eb i disponuesh\u00ebm nga burime t\u00eb ndryshme: pajisje rrjetesh (Cisco, Juniper, HPE, Huawei\u2026) ose sondat tona (Flowmon Probe);<\/li>\n<li>mund\u00ebsit\u00eb p\u00ebr shkall\u00ebzimin e zgjidhjes lejojn\u00eb rritjen e funksionalitetit t\u00eb sistemit p\u00ebrmes shtimit t\u00eb moduleve t\u00eb reja, si dhe rritjen e performanc\u00ebs fal\u00eb nj\u00eb qasjeje fleksibile ndaj licencimit;<\/li>\n<li>nga p\u00ebrdorimi i teknologjive t\u00eb analiz\u00ebs pa n\u00ebnshkrim, sistemi lejon zbardhjen e sulmeve zero-day, t\u00eb panjohura p\u00ebr antivirus\u00ebt dhe sistemet IDS\/IPS;<\/li>\n<li>p\u00ebr shkak t\u00eb \"transparent\u00ebs\" s\u00eb plot\u00eb sa i p\u00ebrket instalimit dhe pranis\u00eb s\u00eb sistemit n\u00eb rrjet \u2013 zgjidhja nuk ndikon n\u00eb funksionimin e nyjeve dhe komponenteve t\u00eb tjera t\u00eb infrastruktur\u00ebs suaj IT;<\/li>\n<li>Flowmon \u2013 zgjidhja e vetme n\u00eb treg q\u00eb mb\u00ebshtet monitorimin e trafikut me shpejt\u00ebsi deri n\u00eb 100 Gbit\/s;<\/li>\n<li>Flowmon \u2013 nj\u00eb zgjidhje p\u00ebr rrjete t\u00eb \u00e7do p\u00ebrmasash;<\/li>\n<li>marr\u00ebdh\u00ebnia m\u00eb e mir\u00eb \u00e7mim \/ funksionalitet midis zgjidhjeve t\u00eb ngjashme.<\/li>\n<\/ul>\n<p>\nN\u00eb k\u00ebt\u00eb p\u00ebrmbledhje shqyrtuam m\u00eb pak se 10% t\u00eb funksionalitetit t\u00eb p\u00ebrgjithsh\u00ebm t\u00eb zgjidhjes. N\u00eb artikullin e ardhsh\u00ebm do t\u00eb flasim p\u00ebr modulet e tjera t\u00eb Flowmon Networks. Me shembullin e modulit Application Performance Monitoring do t\u00eb tregojm\u00eb si administrator\u00ebt e aplikacioneve biznesore mund t\u00eb sigurojn\u00eb disponueshm\u00ebrin\u00eb n\u00eb nivelin e caktuar SLA, si dhe t\u00eb diagnostikojn\u00eb sa m\u00eb shpejt problemet.<\/p>\n<p>Gjithashtu, d\u00ebshirojm\u00eb t'ju ftojm\u00eb n\u00eb webinarin ton\u00eb (10.09.2019), q\u00eb i kushtohet zgjidhjeve t\u00eb prodhuesit Flowmon Networks. P\u00ebr regjistrim paraprak ju lutemi <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/events\/vebinari_flowmon\">regjistrohuni k\u00ebtu<\/a><\/noindex>.<br \/>\nK\u00ebtu p\u00ebr momentin \u00ebsht\u00eb gjith\u00e7ka, faleminderit p\u00ebr interesin tuaj!<\/p>\n<p class=\"for_users_only_msg\">Vet\u00ebm p\u00ebrdoruesit e regjistruar mund t\u00eb marrin pjes\u00eb n\u00eb anket\u00eb. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/auth\/login\/\">Hyni<\/a><\/noindex>, ju lutem.<\/p>\n<h2 class=\"default-block__polling-title\">A p\u00ebrdorni Netflow p\u00ebr monitorimin e rrjetit?<\/h2>\n<ul class=\"content-list content-list_polling\">\n<li class=\"content-list__item content-list__item_polling\">\n<p>                    Po.<\/p>\n<\/li>\n<li class=\"content-list__item content-list__item_polling\">\n<p>                    Jo, por planifikoj<\/p>\n<\/li>\n<li class=\"content-list__item content-list__item_polling\">\n<p>                    Jo<\/p>\n<\/li>\n<\/ul>\n<p>    Kan\u00eb votuar 9 p\u00ebrdorues. Shtyh\u00ebn 3 p\u00ebrdorues.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/463625\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u043a\u043e\u043b-\u0432\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432 \u043f\u043e \u0442\u0435\u043c\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 \u0441\u0435\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0435 \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0431 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u043c. \u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043a\u0430\u043a \u0440\u0430\u0437 \u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0430 \u044d\u0442\u043e\u0439 \u0442\u0435\u043c\u0435. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Flowmon Networks \u043c\u044b \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u043c \u0441\u0442\u0430\u0440\u044b\u0439 \u0434\u043e\u0431\u0440\u044b\u0439 Netflow (\u0438 \u0435\u0433\u043e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b), \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27883,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-37189","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\".\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Flowmon Networks | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\".\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:16:15+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:16:15+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Monitoringu rrjetit dhe identifikimi i aktiviteteve anormale t\u00eb rrjetit me zgjidhjet e Flowmon Networks | ProHoster","description":".","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Flowmon Networks | ProHoster","og:description":".","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:15+00:00","article:modified_time":"2019-10-31T19:16:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37189","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 16:39:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:32:13","updated":"2026-01-23 16:39:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37189","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=37189"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37189\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/27883"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=37189"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=37189"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=37189"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}