{"id":37189,"date":"2019-10-31T22:16:15","date_gmt":"2019-10-31T19:16:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks\/"},"modified":"2019-10-31T22:16:15","modified_gmt":"2019-10-31T19:16:15","slug":"setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks","title":{"rendered":"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/8509341060b74259e9383af1b28c1e59.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKoh\u00ebt e fundit, n\u00eb internet mund t\u00eb gjeni nj\u00eb sasi t\u00eb madhe materialesh mbi tem\u00ebn <b>analiz\u00ebs s\u00eb trafikut n\u00eb perimetrin e rrjetit<\/b>. Megjithat\u00eb, t\u00eb gjith\u00eb ndonj\u00ebher\u00eb thjesht harrojn\u00eb p\u00ebr <b>analiz\u00ebn e trafikut lokal<\/b>, t\u00eb cilat jan\u00eb po aq t\u00eb r\u00ebnd\u00ebsishme. Ky artikull \u00ebsht\u00eb pik\u00ebrisht p\u00ebr k\u00ebt\u00eb tem\u00eb. N\u00ebp\u00ebrmjet <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/katalog\/flowmon\">Flowmon Networks<\/a><\/noindex> do t\u00eb kujtojm\u00eb Netflow-in e vjet\u00ebr (dhe alternativat e tij), do t\u00eb shqyrtojm\u00eb raste interesant\u00eb, anomali t\u00eb mundshme n\u00eb rrjet dhe do t\u00eb m\u00ebsojm\u00eb p\u00ebrfitimet e zgjidhjes, kur <b>i gjith\u00eb rrjeti funksionon si nj\u00eb sensor i vet\u00ebm<\/b>. Dhe m\u00eb e r\u00ebnd\u00ebsishmja \u2014 t\u00eb kryesh nj\u00eb analiz\u00eb t\u00eb till\u00eb t\u00eb trafikut lokal mund t\u00eb b\u00ebhet plot\u00ebsisht falas, brenda kuadrit t\u00eb licenc\u00ebs provuese (<b>45 dit\u00eb<\/b>). N\u00ebse tema ju intereson, mir\u00ebseerdh\u00ebt n\u00ebn k\u00ebt\u00eb seksion. N\u00ebse megjithat\u00eb jeni dembel p\u00ebr t\u00eb lexuar, mund t\u00eb regjistroheni p\u00ebr <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/events\/vebinari_flowmon\">webinarin e ardhsh\u00ebm<\/a><\/noindex>, ku do t\u00eb tregojm\u00eb dhe shpjegojm\u00eb gjith\u00e7ka (aty do t\u00eb mund t\u00eb m\u00ebsoni gjithashtu p\u00ebr trajnimin e ardhsh\u00ebm n\u00eb produkt).<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>\u00c7far\u00eb \u00ebsht\u00eb Flowmon Networks?<\/h3>\n<p>\nS\u00eb pari, Flowmon \u00ebsht\u00eb nj\u00eb ofrues IT evropian. Kompania \u00ebsht\u00eb \u00e7eke, me seli n\u00eb qytetin Brno (\u00e7\u00ebshtja e sanksioneve nuk \u00ebsht\u00eb tematike). N\u00eb form\u00ebn e saj aktuale, kompania \u00ebsht\u00eb e pranishme n\u00eb treg q\u00eb nga viti 2007. Para k\u00ebsaj, ishte e njohur me mark\u00ebn Invea-Tech. Pra, n\u00eb total, p\u00ebr zhvillimin e produkteve dhe zgjidhjeve jan\u00eb shpenzuar gati 20 vjet.<\/p>\n<p>Flowmon pozicionohet si nj\u00eb mark\u00eb e klasit A. Zhvillon zgjidhje premium p\u00ebr klient\u00ebt korporat\u00eb dhe \u00ebsht\u00eb e sh\u00ebnuar n\u00eb katror\u00ebt e Gartner p\u00ebr drejtimin Network Performance Monitoring and Diagnostics (NPMD). Dhe, ajo q\u00eb \u00ebsht\u00eb interesante, nga t\u00eb gjitha kompanit\u00eb n\u00eb raport, Flowmon \u00ebsht\u00eb ofruesi i vet\u00ebm i sh\u00ebnuar nga Gartner si prodhues i zgjidhjeve p\u00ebr monitorimin e rrjetit dhe p\u00ebr mbrojtjen e informacionit (Network Behavior Analysis). Nuk mban vendin e par\u00eb, por p\u00ebr k\u00ebt\u00eb arsye nuk ka \u00e7mim si krah nga nj\u00eb Boeing.<\/p>\n<h3>Cilat jan\u00eb detyrat q\u00eb produkti lejon t\u00eb zgjidhen?<\/h3>\n<p>\nGlobalisht, mund t\u00eb p\u00ebrmenden grupi i m\u00ebposht\u00ebm i detyrave q\u00eb zgjidhen nga produktet e kompanis\u00eb:<\/p>\n<ol>\n<li>p\u00ebrmir\u00ebsimi i stabilitetit t\u00eb funksionimit t\u00eb rrjetit, si dhe t\u00eb burimeve rrjetore duke minimizuar koh\u00ebn e pezullimit dhe pap\u00ebrdorshm\u00ebris\u00eb;<\/li>\n<li>p\u00ebrmir\u00ebsimi i nivelit t\u00eb p\u00ebrgjithsh\u00ebm t\u00eb performanc\u00ebs s\u00eb rrjetit;<\/li>\n<li>rritja e efikasitetit t\u00eb pun\u00ebs s\u00eb personelit administrator, p\u00ebrmes:\n<ul>\n<li>p\u00ebrdorimit t\u00eb mjeteve moderne t\u00eb monitorimit inovativ t\u00eb rrjetit, t\u00eb bazuara n\u00eb informacionin mbi IP-t\u00eb e rrjedhjeve;<\/li>\n<li> ofrimit t\u00eb analizave t\u00eb detajuara mbi funksionimin dhe gjendjen e rrjetit - p\u00ebrdoruesit dhe aplikacionet q\u00eb operojn\u00eb n\u00eb rrjet, t\u00eb dh\u00ebnat q\u00eb transmetohen, burimet q\u00eb bashk\u00ebpunojn\u00eb, sh\u00ebrbimet dhe nyjet;<\/li>\n<li> reagimit ndaj incidenteve para se ato t\u00eb ndodhin, e jo pas humbjes s\u00eb sh\u00ebrbimit nga p\u00ebrdoruesit dhe klient\u00ebt;<\/li>\n<li> shkurtimit t\u00eb koh\u00ebs dhe burimeve t\u00eb nevojshme p\u00ebr administrimin e rrjetit dhe infrastruktur\u00ebs IT;<\/li>\n<li> thjeshtimit t\u00eb detyrave p\u00ebr gjetjen e defekteve.<\/li>\n<\/ul>\n<\/li>\n<li>rritja e nivelit t\u00eb mbrojtjes s\u00eb rrjetit dhe burimeve informative t\u00eb kompanis\u00eb, p\u00ebrmes p\u00ebrdorimit t\u00eb teknologjive jo-signature p\u00ebr identifikimin e aktiviteteve anomale dhe t\u00eb d\u00ebmshme n\u00eb rrjet, si dhe \"sulmeve t\u00eb dit\u00ebs zero\" (zero-day);<\/li>\n<li>sigurimi i nivelit t\u00eb k\u00ebrkuar t\u00eb SLA p\u00ebr aplikacionet dhe bazat e t\u00eb dh\u00ebnave n\u00eb rrjet.<\/li>\n<\/ol>\n<p><\/p>\n<h3>Portofoli i produkteve t\u00eb Flowmon Networks<\/h3>\n<p>\nTani do t\u2019i hedhim nj\u00eb v\u00ebshtrim portofolit t\u00eb produkteve t\u00eb Flowmon Networks dhe t\u00eb m\u00ebsojm\u00eb se \u00e7far\u00eb b\u00ebn konkretisht kompania. Si\u00e7 e kuptuan shum\u00eb nga emri, specializimi kryesor \u00ebsht\u00eb n\u00eb zgjidhjet p\u00ebr monitorimin e rrjedhave t\u00eb trafikut, plus nj\u00eb s\u00ebr\u00eb modulash shtes\u00eb q\u00eb zgjasin funksionalitetin baz\u00eb.<\/p>\n<p>N\u00eb fakt, Flowmon mund t\u00eb quhet si nj\u00eb kompani me nj\u00eb produkt, ose m\u00eb sakt\u00eb \u2013 me nj\u00eb zgjidhje. Le t\u00eb kuptojm\u00eb n\u00ebse kjo \u00ebsht\u00eb nj\u00eb gj\u00eb e mir\u00eb apo e keqe.<\/p>\n<p>Nuk ka asnj\u00eb dyshim se thelbi i sistemit \u00ebsht\u00eb koleksionisti, i cili \u00ebsht\u00eb p\u00ebrgjegj\u00ebs p\u00ebr mbledhjen e t\u00eb dh\u00ebnave nga t\u00eb gjitha protokollet e mundshme t\u00eb rrjedhave si <b>NetFlow v5\/v9, jFlow, sFlow, NetStream, IPFIX<\/b>\u2026 Mjafton logjike q\u00eb p\u00ebr nj\u00eb kompani q\u00eb nuk \u00ebsht\u00eb e lidhur me asnj\u00eb nga prodhuesit e pajisjeve rrjetore \u2013 \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb ofroj\u00eb nj\u00eb produkt universalisht t\u00eb pranuar, t\u00eb pakufizuar nga ndonj\u00eb standard ose protokoll t\u00eb ve\u00e7ant\u00eb.<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/d8dddeaa90c8bc03b78282b7ca00ea86.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Flowmon Collector<\/i><\/p>\n<p>Kolektori ofrohet si n\u00eb form\u00eb serveri harduerik ashtu edhe si nj\u00eb makin\u00eb virtuale (VMware, Hyper-V, KVM). P\u00ebr m\u00eb tep\u00ebr, platforma harduerike \u00ebsht\u00eb realizuar n\u00eb server\u00eb t\u00eb personalizuar DELL, t\u00eb cilat automatikisht zgjidhin shumic\u00ebn e pyetjeve n\u00eb lidhje me garancin\u00eb dhe RMA-n\u00eb. Komponent\u00ebt e saj harduerik\u00eb jan\u00eb vet\u00ebm kartat FPGA p\u00ebr kapjen e trafikut, t\u00eb zhvilluara nga nj\u00eb n\u00ebnkompani e Flowmon, dhe t\u00eb cilat lejojn\u00eb monitorimin n\u00eb shpejt\u00ebsi deri n\u00eb 100 Gbps.<\/p>\n<p>Por \u00e7far\u00eb duhet t\u00eb b\u00ebni n\u00ebse pajisjet ekzistuese t\u00eb rrjetit nuk kan\u00eb mund\u00ebsi p\u00ebr t\u00eb gjeneruar flow cil\u00ebsor? Ose ndryshe, ngarkesa ndaj pajisjeve \u00ebsht\u00eb shum\u00eb e lart\u00eb? Nuk ka problem:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/53dda0e4f42ddbf7a8add1064e0ab913.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Flowmon Prob<\/i><\/p>\n<p>N\u00eb k\u00ebt\u00eb rast, Flowmon Networks ofron p\u00ebrdorimin e sondave t\u00eb veta (Flowmon Probe), t\u00eb cilat lidhen me rrjetin p\u00ebrmes port\u00ebs SPAN t\u00eb switch-it ose duke p\u00ebrdorur ndar\u00ebs pasiv\u00eb TAP.<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/298507c4bcb3d562f9621ff59ee6018f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>SPANA (mirror port) dhe TAP p\u00ebr muajt e implementimit<\/i><\/p>\n<p>N\u00eb k\u00ebt\u00eb rast, trafiku 'i pap\u00ebrpunuar' q\u00eb arrin n\u00eb Flowmon Probe, shnd\u00ebrrohet n\u00eb IPFIX t\u00eb zgjeruar, i cili p\u00ebrmban m\u00eb shum\u00eb se <b>240 metrika me informacion<\/b>. Nd\u00ebrkoh\u00eb q\u00eb n\u00eb protokollin standard NetFlow, i gjeneruar nga pajisjet rrjet, nuk p\u00ebrmbahen m\u00eb shum\u00eb se 80 metrika. Kjo siguron dukshm\u00ebri t\u00eb protokolleve jo vet\u00ebm n\u00eb nivelet 3 dhe 4, por edhe n\u00eb nivelin 7 sipas modelit ISO OSI. Si rezultat, administrator\u00ebt e rrjetit mund t\u00eb monitorojn\u00eb funksionimin e aplikacioneve dhe protokolleve t\u00eb tilla si e-mail, HTTP, DNS, SMB\u2026<\/p>\n<p>Koncepcionalisht, arkitektura logjike e sistemit duket si m\u00eb posht\u00eb:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/273517a6aa47726fe51c498114908c14.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPjesa qendrore e t\u00eb gjith\u00eb \u00abekosistemit\u00bb Flowmon Networks \u00ebsht\u00eb Collector, i cili merr trafik nga pajisjet rrjet ekzistuese ose sondat e tij (Probe). Por p\u00ebr zgjidhjet Enterprise, t\u00eb ofrosh funksionalitetin vet\u00ebm p\u00ebr monitorimin e trafikut rrjet do t\u00eb ishte shum\u00eb e leht\u00eb. K\u00ebt\u00eb e b\u00ebjn\u00eb edhe zgjidhjet Open Source, megjith\u00ebse jo me t\u00eb nj\u00ebjtin performanc\u00eb. Vlera e Flowmon jan\u00eb modulet shtes\u00eb q\u00eb zgjerojn\u00eb funksionalitetin baz\u00eb:<\/p>\n<ul>\n<li>moduli <b>Anomaly Detection Security<\/b> \u2013 identifikimi i aktivitetit rrjetor anomalesh, p\u00ebrfshir\u00eb sulmet e \u00abdit\u00ebs zero\u00bb, mbi baz\u00ebn e analiz\u00ebs heurstike t\u00eb trafikut dhe profilit tipik rrjetor;<\/li>\n<li>moduli <b>Monitorimi i Performanc\u00ebs s\u00eb Aplikacioneve<\/b> \u2013 monitorimi i performanc\u00ebs s\u00eb aplikacioneve rrjet\u00ebsore pa instaluar \"agjent\u00eb\" dhe pa ndikuar n\u00eb sistemet e targetuara;<\/li>\n<li>moduli <b>Regjistruesi i Trafikut<\/b> \u2013 regjistrimi i fragmenteve t\u00eb trafikut rrjet\u00ebsor sipas nj\u00eb grumbulli rregullash t\u00eb paracaktuara ose sipas nj\u00eb triggeri nga moduli ADS, p\u00ebr troubleshooting dhe\/apo hetimin e incidenteve t\u00eb siguris\u00eb;<\/li>\n<li>moduli <b>Mbrojtja DDoS<\/b> \u2013 mbrojtja e perimetrit t\u00eb rrjetit nga sulmet volumetrike t\u00eb refuzimit t\u00eb sh\u00ebrbimit DoS\/DDoS, p\u00ebrfshir\u00eb sulmet n\u00eb aplikacione (OSI L3\/L4\/L7).<\/li>\n<\/ul>\n<p>\nN\u00eb k\u00ebt\u00eb artikull, do t\u00eb shikojm\u00eb se si funksionon gjith\u00e7ka n\u00eb koh\u00eb reale duke marr\u00eb si shembull dy modulet \u2013 <b>Monitorimi dhe Diagnostikimi i Performanc\u00ebs s\u00eb Rrjetit<\/b> dhe <b>Anomaly Detection Security<\/b>.<br \/>\nT\u00eb dh\u00ebnat fillestare:<\/p>\n<ul>\n<li>serveri Lenovo RS 140 me hipervizorin VMware 6.0;<\/li>\n<li>imazhi i makin\u00eb virtuale Flowmon Collector, i cili mund t\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/www.flowmon.com\/en\/download-free-trial\">shkarkohet k\u00ebtu<\/a><\/noindex>;<\/li>\n<li>n\u00eb \u00e7ift switch-e q\u00eb mb\u00ebshtesin protokollet flow.<\/li>\n<\/ul>\n<p><\/p>\n<h3>Hapi 1. Instalimi i Flowmon Collector<\/h3>\n<p>\nZhvillimi i makin\u00ebs virtuale n\u00eb VMware kryhet n\u00eb m\u00ebnyr\u00eb standarde nga shablloni OVF. Si rezultat, marrim nj\u00eb makin\u00eb virtuale t\u00eb drejtuar nga CentOS dhe me nj\u00eb softuer gati p\u00ebr t'u p\u00ebrdorur. K\u00ebrkesat p\u00ebr burime \u2013 jan\u00eb t\u00eb arsyeshme:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/9ae1559b01c639763e0053ee1de120ca.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKalon vet\u00ebm t\u00eb kryejm\u00eb inicializimin bazik me komand\u00ebn <b>sysconfig<\/b>:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/c65a47dfd025595f7256b1e30b941e42.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKonfigurojm\u00eb IP-n\u00eb n\u00eb portin e menaxhimit, DNS, koh\u00ebn, emrin e hostit dhe mund t\u00eb lidhemi me nd\u00ebrfaqen WEB.<\/p>\n<h3>Hapi 2. Instalimi i licenc\u00ebs<\/h3>\n<p>\nLicenca provuese p\u00ebr nj\u00eb muaj dhe gjysm\u00eb gjenerohet dhe shkarkohet bashk\u00eb me imazhin e makin\u00ebs virtuale. Ngarkohet p\u00ebrmes <b>Qend\u00ebs konfigurimi -&gt; Licenc\u00eb<\/b>. N\u00eb p\u00ebrfundim shohim:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/a5c1c99ad14cf4ca5dfb560d55fa369d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nE gjitha \u00ebsht\u00eb gati. Tani mund t\u00eb fillojm\u00eb pun\u00ebn.<\/p>\n<h3>Hapi 3. Konfigurimi i marr\u00ebsit n\u00eb kolektor<\/h3>\n<p>\nN\u00eb k\u00ebt\u00eb faz\u00eb, duhet t\u00eb p\u00ebrcaktojm\u00eb se si do t\u00eb hyjn\u00eb t\u00eb dh\u00ebnat nga burimet n\u00eb sistem. Si\u00e7 tham\u00eb m\u00eb par\u00eb, kjo mund t\u00eb jet\u00eb nj\u00eb nga protokollet flow ose nj\u00eb port SPAN n\u00eb switch.<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/3ff1c77a58c152314a1615dd98ca92ca.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb shembullin ton\u00eb do t\u00eb p\u00ebrdorim marrjen e t\u00eb dh\u00ebnave p\u00ebrmes protokolleve <b>NetFlow v9 dhe IPFIX<\/b>. N\u00eb k\u00ebt\u00eb rast, si target ne caktojm\u00eb IP adres\u00ebn e nd\u00ebrfaqes s\u00eb menaxhimit \u2013 <b>192.168.78.198<\/b>. Nd\u00ebrfaqet eth2 dhe eth3 (me tipin Nd\u00ebrfaqe monitorimi) p\u00ebrdoren p\u00ebr t\u00eb pranuar nj\u00eb kopje t\u00eb trafikut \"t\u00eb pap\u00ebrpunuar\" nga porta SPAN e switch-it. I anashkalojm\u00eb ato, nuk \u00ebsht\u00eb rasti yn\u00eb.<br \/>\nM\u00eb pas kontrollojm\u00eb portin e kolektorit, ku duhet t\u00eb vie trafiku.<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/31fff2f3bfef52b001edb39bdb3293f9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb rastin ton\u00eb, kolektori pret trafik n\u00eb portin UDP\/2055.<\/p>\n<h3>Hapi 4. Konfigurimi i pajisjeve rrjetore p\u00ebr eksportimin e flow<\/h3>\n<p>\nKonfigurimi i NetFlow n\u00eb pajisjet Cisco Systems mund t\u00eb quhet ndoshta nj\u00eb gj\u00eb krejt\u00ebsisht normale p\u00ebr \u00e7do administrator rrjeti. P\u00ebr shembullin ton\u00eb, do t\u00eb marrim di\u00e7ka m\u00eb t\u00eb pazakont\u00eb. P\u00ebr shembull, router-in MikroTik RB2011UiAS-2HnD. Po, si\u00e7 duket e \u00e7uditshme, nj\u00eb zgjidhje buxhetore p\u00ebr zyra t\u00eb vogla dhe sht\u00ebpiake mb\u00ebshtet gjithashtu protokollet NetFlow v5\/v9 dhe IPFIX. N\u00eb konfigurime, vendosim targetin (adres\u00ebn e kolektorit 192.168.78.198 dhe portin 2055):<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/3604b4c1c0b013a3822e99d97ab9e9cb.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDhe shtojm\u00eb t\u00eb gjitha metrikat e disponueshme p\u00ebr eksport:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/f22fa921b4195b184e82c12a2b852f3c.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMe k\u00ebt\u00eb mund t\u00eb themi se konfigurimi baz\u00eb \u00ebsht\u00eb p\u00ebrfunduar. Kontrollojm\u00eb n\u00ebse trafiku po futet n\u00eb sistem.<\/p>\n<h3>Hapi 5. Kontrollimi dhe shfryt\u00ebzimi i modulit t\u00eb Monitorimit dhe Diagnostik\u00ebs s\u00eb Performanc\u00ebs s\u00eb Rrjetit<\/h3>\n<p>\nKontrolloni pranin\u00eb e trafikut nga burimi n\u00eb seksionin <b>Qendra e Monitorimit Flowmon \u2013&gt; Burimet<\/b>:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/b167ac4ba70c07d9d0fb521a1cf1a7ea.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nShikojm\u00eb se t\u00eb dh\u00ebnat po futen n\u00eb sistem. Pas nj\u00eb kohe, pas mbledhjes s\u00eb trafik, widget-at do t\u00eb fillojn\u00eb t\u00eb shfaqin informacionin:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/8cee4912c371366ff30ff7597f87cabc.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00cbsht\u00eb nd\u00ebrtuar nj\u00eb sistem sipas parimit drill down. K\u00ebshtu, p\u00ebrdoruesi, duke zgjedhur segmentin q\u00eb e intereson n\u00eb diagram apo grafik, \"shkon\" deri n\u00eb nivelin e thell\u00ebsis\u00eb s\u00eb t\u00eb dh\u00ebnave q\u00eb i nevojiten:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/1caa3b3c59dcd77210f690606a16740f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDeri n\u00eb informacionin p\u00ebr \u00e7do lidhje rrjeti dhe lidhje:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/ef8c8f4d2df0ae65b94fcc3be058099b.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Hapi 6. Moduli i Siguris\u00eb p\u00ebr Zbulimin e Anomalis\u00eb<\/h3>\n<p>\nKy modul mund t\u00eb quhet, pa dyshim, nj\u00eb nga m\u00eb interesant\u00ebt, fal\u00eb p\u00ebrdorimit t\u00eb metodave pa nishan p\u00ebr zbulimin e anomalis\u00eb n\u00eb trafikun n\u00eb internet dhe aktivitetin e d\u00ebmsh\u00ebm n\u00eb rrjet. Por ky nuk \u00ebsht\u00eb nj\u00eb ekuivalent i sistemit IDS\/IPD. Puna me modul fillon me 'm\u00ebsimin' e tij. P\u00ebr k\u00ebt\u00eb, n\u00eb nj\u00eb wizard t\u00eb ve\u00e7ant\u00eb, p\u00ebrmenden t\u00eb gjitha komponent\u00ebt dhe sh\u00ebrbimet ky\u00e7e t\u00eb rrjetit, duke p\u00ebrfshir\u00eb:<\/p>\n<ul>\n<li>adresat e port\u00ebs, server\u00ebve DNS, DHCP dhe NTP,<\/li>\n<li>adresat n\u00eb segmente t\u00eb p\u00ebrdoruesve dhe server\u00ebve.<\/li>\n<\/ul>\n<p>\nPas k\u00ebsaj, sistemi kalon n\u00eb m\u00ebnyr\u00ebn e m\u00ebsimit, e cila mesatarisht zgjat nga 2 jav\u00eb deri n\u00eb 1 muaj. Gjat\u00eb k\u00ebsaj kohe, sistemi krijon nj\u00eb baz\u00eb t\u00eb trafikut q\u00eb \u00ebsht\u00eb karakteristike p\u00ebr rrjetin ton\u00eb. N\u00eb m\u00ebnyr\u00eb t\u00eb thjesht\u00eb, sistemi studion:<\/p>\n<ul>\n<li>cila sjellje \u00ebsht\u00eb karakteristike p\u00ebr nyjet e rrjetit?<\/li>\n<li>cilat sasi t\u00eb t\u00eb dh\u00ebnave zakonisht transmetohen dhe jan\u00eb normale p\u00ebr rrjetin?<\/li>\n<li>cila \u00ebsht\u00eb koha tipike e pun\u00ebs p\u00ebr p\u00ebrdoruesit?<\/li>\n<li>cilat aplikacione funksionojn\u00eb n\u00eb rrjet?<\/li>\n<li>dhe shum\u00eb t\u00eb tjera.<\/li>\n<\/ul>\n<p>\nSi rezultat, ne marrim nj\u00eb mjet q\u00eb identifikon \u00e7do anomali n\u00eb rrjetin ton\u00eb dhe devijime nga sjellja karakteristike. Ja disa shembuj q\u00eb sistemi lejon t\u00eb zbulohet:<\/p>\n<ul>\n<li>shp\u00ebrndarja n\u00eb rrjet e nj\u00eb malware-i t\u00eb ri, q\u00eb nuk zbulohet nga n\u00ebnshkrimet e antivirus\u00ebve;<\/li>\n<li>nd\u00ebrtimi i tunel\u00ebve DNS, ICMP ose t\u00eb tjer\u00eb dhe transmetimi i t\u00eb dh\u00ebnave p\u00ebrmes nj\u00eb muri zjarri;<\/li>\n<li>shfaqja n\u00eb rrjet e nj\u00eb kompjuteri t\u00eb ri q\u00eb e prezanton veten si DHCP dhe\/ose server DNS.<\/li>\n<\/ul>\n<p>\nLe t\u00eb shohim se si duket n\u00eb t\u00eb v\u00ebrtet\u00eb. Pasi sistemi juaj ka kaluar trajnimin dhe ka nd\u00ebrtuar nj\u00eb baseline t\u00eb trafikut t\u00eb rrjetit, ai fillon t\u00eb zbuloj\u00eb incidente:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/e4d7d168716fc9f703dd9f14faf5816f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nFaqja kryesore e modulit \u2013 grafiku temporal me shfaqjen e incidenteve t\u00eb identifikuara. N\u00eb shembullin ton\u00eb shohim nj\u00eb shp\u00ebrthim t\u00eb qart\u00eb, diku mes or\u00ebve 9 dhe 16. E p\u00ebrzgjedhim dhe e shohim m\u00eb n\u00eb detaje. <\/p>\n<p>Qart\u00eb po ndiqet nj\u00eb sjellje anormale e sulmuesit n\u00eb rrjet. E gjitha fillon me faktin se host-i me adres\u00ebn 192.168.3.225 fillon skanimin horizontal t\u00eb rrjetit n\u00eb portin 3389 (sh\u00ebrbimi Microsoft RDP) dhe gjen 14 'viktima' t\u00eb mundshme:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/5844fab428bd7adedbc694bf7dc7f19e.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\ndhe<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/566cb37c28eb803d404e06a8d61372c3.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nIncidenti i radh\u00ebs i regjistruar \u2013 host-i 192.168.3.225 fillon nj\u00eb sulm bllokues p\u00ebrmes provave t\u00eb fjal\u00ebkalimeve n\u00eb sh\u00ebrbimin RDP (porti 3389) n\u00eb adresat eidentifikuara m\u00eb par\u00eb:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/18c97646b3982c5a9db86901cae9f5a7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSi rezultat i sulmeve n\u00eb nj\u00eb nga hostet e thyer, regjistrohet nj\u00eb anomali SMTP. Me fjal\u00eb t\u00eb tjera, filloi d\u00ebrgimi i SPAM-it:<\/p>\n<p><img decoding=\"async\" alt=\"Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks\" src=\"\/wp-content\/uploads\/2019\/08\/fd1fce3c9bb23903a3c54d270924c5fe.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nKy k\u00ebt\u00eb shembull kemi nj\u00eb demonstruese t\u00eb dukshme t\u00eb aft\u00ebsive t\u00eb sistemit dhe modulit Anomaly Detection Security, ve\u00e7an\u00ebrisht. Vler\u00ebsoni efektivitetin vet\u00eb. Me k\u00ebt\u00eb, p\u00ebrfundoi shqyrtimi funksional i zgjidhjes.<\/p>\n<h3>P\u00ebrfundimi<\/h3>\n<p>\nT\u00eb p\u00ebrmbledhim, cilat jan\u00eb konkluzionet q\u00eb mund t\u00eb nxjerrim p\u00ebr Flowmon n\u00eb p\u00ebrfundim:<\/p>\n<ul>\n<li>Flowmon \u00ebsht\u00eb nj\u00eb zgjidhje e nivelit premium p\u00ebr Porosit\u00ebsit korporat\u00eb;<\/li>\n<li>fal\u00eb universafikut dhe nd\u00ebrveprimit, grumbullimi i t\u00eb dh\u00ebnave \u00ebsht\u00eb i disponuesh\u00ebm nga \u00e7do burim: pajisjet rrjetore (Cisco, Juniper, HPE, Huawei\u2026) ose sondat tona (Flowmon Probe);<\/li>\n<li>mund\u00ebsit\u00eb p\u00ebr shkall\u00ebzim t\u00eb zgjidhjes lejojn\u00eb zgjerimin e funksionalitetit t\u00eb sistemit p\u00ebrmes shtimit t\u00eb moduleve t\u00eb reja, si dhe rritjen e performanc\u00ebs p\u00ebrmes nj\u00eb qasje fleksibile n\u00eb licencim;<\/li>\n<li>p\u00ebrmes p\u00ebrdorimit t\u00eb teknologjive t\u00eb analiz\u00ebs pa n\u00ebnshkrim, sistemi lejon zbulimin e sulmeve zero-day q\u00eb nuk njihen nga antivirus\u00ebt dhe sistemet IDS\/IPS;<\/li>\n<li>fal\u00eb 'transparenc\u00ebs' s\u00eb plot\u00eb n\u00eb aspektin e instalimit dhe pranis\u00eb s\u00eb sistemit n\u00eb rrjet \u2013 zgjidhja nuk ndikon n\u00eb funksionimin e nyjeve dhe komponenteve t\u00eb tjera t\u00eb infrastruktur\u00ebs suaj IT;<\/li>\n<li>Flowmon \u2013 zgjidhja e vetme n\u00eb treg q\u00eb mb\u00ebshtet monitorimin e trafikut deri n\u00eb 100 Gbit\/s;<\/li>\n<li>Flowmon \u2013 nj\u00eb zgjidhje p\u00ebr rrjeta t\u00eb \u00e7do shkalle;<\/li>\n<li>raporti m\u00eb i mir\u00eb \u00e7mim \/ funksionalitet n\u00eb mesin e zgjidhjeve t\u00eb ngjashme.<\/li>\n<\/ul>\n<p>\nN\u00eb k\u00ebt\u00eb shqyrtim ne shqyrtuam m\u00eb pak se 10% t\u00eb funksionalitetit total t\u00eb zgjidhjes. N\u00eb artikullin e ardhsh\u00ebm do t\u00eb flasim p\u00ebr modulet e tjera t\u00eb Flowmon Networks. Me shembullin e modulit t\u00eb Monitorimit t\u00eb Performanc\u00ebs s\u00eb Aplikacioneve, do t\u00eb tregojm\u00eb si administratoret e aplikacioneve biznesore mund t\u00eb sigurojn\u00eb disponueshm\u00ebri n\u00eb nivelin e p\u00ebrcaktuar SLA, si dhe t\u00eb diagnostikojn\u00eb shkurtimisht problemet.<\/p>\n<p>Gjithashtu, d\u00ebshirojm\u00eb t'ju ftojm\u00eb n\u00eb webinarin ton\u00eb (10.09.2019), q\u00eb \u00ebsht\u00eb dedikuar zgjidhjeve t\u00eb ofruara nga Flowmon Networks. P\u00ebr regjistrim paraprak ju lutemi <noindex><a rel=\"nofollow\" href=\"https:\/\/tssolution.ru\/events\/vebinari_flowmon\">regjistroni k\u00ebtu<\/a><\/noindex>.<br \/>\nK\u00ebtu \u00ebsht\u00eb gjith\u00e7ka p\u00ebr tani, faleminderit p\u00ebr interesin tuaj!<\/p>\n<p class=\"for_users_only_msg\">Vet\u00ebm p\u00ebrdoruesit e regjistruar mund t\u00eb marrin pjes\u00eb n\u00eb anket\u00eb. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/auth\/login\/\">Hyni<\/a><\/noindex>, ju lutemi.<\/p>\n<h2 class=\"default-block__polling-title\">A p\u00ebrdorni Netflow p\u00ebr monitorimin e rrjetit?<\/h2>\n<ul class=\"content-list content-list_polling\">\n<li class=\"content-list__item content-list__item_polling\">\n<p>                    Po<\/p>\n<\/li>\n<li class=\"content-list__item content-list__item_polling\">\n<p>                    Jo, por planifikoj<\/p>\n<\/li>\n<li class=\"content-list__item content-list__item_polling\">\n<p>                    Jo<\/p>\n<\/li>\n<\/ul>\n<p>    9 p\u00ebrdorues kan\u00eb votuar. 3 p\u00ebrdor\u00ebs abstenuan.<br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/tssolution\/blog\/463625\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u043a\u043e\u043b-\u0432\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432 \u043f\u043e \u0442\u0435\u043c\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 \u0441\u0435\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0435 \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0431 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u043c. \u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043a\u0430\u043a \u0440\u0430\u0437 \u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0430 \u044d\u0442\u043e\u0439 \u0442\u0435\u043c\u0435. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Flowmon Networks \u043c\u044b \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u043c \u0441\u0442\u0430\u0440\u044b\u0439 \u0434\u043e\u0431\u0440\u044b\u0439 Netflow (\u0438 \u0435\u0433\u043e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b), \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27883,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-37189","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u043a\u043e\u043b-\u0432\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432 \u043f\u043e \u0442\u0435\u043c\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 \u0441\u0435\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0435 \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0431 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u043c. \u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043a\u0430\u043a \u0440\u0430\u0437 \u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0430 \u044d\u0442\u043e\u0439 \u0442\u0435\u043c\u0435. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Flowmon Networks \u043c\u044b \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u043c \u0441\u0442\u0430\u0440\u044b\u0439 \u0434\u043e\u0431\u0440\u044b\u0439 Netflow (\u0438 \u0435\u0433\u043e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b), \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b,\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Flowmon Networks | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u043a\u043e\u043b-\u0432\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432 \u043f\u043e \u0442\u0435\u043c\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 \u0441\u0435\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0435 \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0431 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u043c. \u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043a\u0430\u043a \u0440\u0430\u0437 \u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0430 \u044d\u0442\u043e\u0439 \u0442\u0435\u043c\u0435. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Flowmon Networks \u043c\u044b \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u043c \u0441\u0442\u0430\u0440\u044b\u0439 \u0434\u043e\u0431\u0440\u044b\u0439 Netflow (\u0438 \u0435\u0433\u043e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b), \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b,\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:16:15+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:16:15+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Monitorimi i rrjetit dhe identifikimi i aktivitetit anormal t\u00eb rrjetit me zgjidhjet e Flowmon Networks | ProHoster","description":"Koha e fundit, n\u00eb internet mund t\u00eb gjenden nj\u00eb sasi e madhe materialesh p\u00ebr analiz\u00ebn e trafik\u00ebve n\u00eb perimeterin e rrjetit. Por, ndoshta p\u00ebr arsye t\u00eb pabesueshme, t\u00eb gjith\u00eb e kan\u00eb harruar analiz\u00ebn e trafik\u00ebve lokal, e cila \u00ebsht\u00eb po aq e r\u00ebnd\u00ebsishme. Ky artikull \u00ebsht\u00eb b\u00ebr\u00eb pik\u00ebrisht p\u00ebr k\u00ebt\u00eb tem\u00eb. N\u00ebp\u00ebrmjet Flowmon Networks, do t\u00eb kujtojm\u00eb Netflow-in e vjet\u00ebr t\u00eb mir\u00eb (dhe alternativat e tij), duke shqyrtuar raste interesante.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0435\u0442\u0435\u0432\u043e\u0439 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u043d\u043e\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0440\u0435\u0448\u0435\u043d\u0438\u0439 Flowmon Networks | ProHoster","og:description":"\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u043a\u043e\u043b-\u0432\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432 \u043f\u043e \u0442\u0435\u043c\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u043d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 \u0441\u0435\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0435 \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u043d\u043e \u0437\u0430\u0431\u044b\u043b\u0438 \u043e\u0431 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u043c. \u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043a\u0430\u043a \u0440\u0430\u0437 \u0438 \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0430 \u044d\u0442\u043e\u0439 \u0442\u0435\u043c\u0435. \u041d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 Flowmon Networks \u043c\u044b \u0432\u0441\u043f\u043e\u043c\u043d\u0438\u043c \u0441\u0442\u0430\u0440\u044b\u0439 \u0434\u043e\u0431\u0440\u044b\u0439 Netflow (\u0438 \u0435\u0433\u043e \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u044b), \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b,","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/setevoj-monitoring-i-vyyavleniya-anomalnoj-setevoj-aktivnosti-s-pomoshhyu-reshenij-flowmon-networks","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:15+00:00","article:modified_time":"2019-10-31T19:16:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37189","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 16:39:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:32:13","updated":"2026-01-23 16:39:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37189","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=37189"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37189\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/27883"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=37189"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=37189"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=37189"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}