StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

ื”ืขืœื ื—ื‘ืจื™ื! ื•ื•ื™ื™ืœ ื‘ืืฉืœืืกืŸ ื“ื™ ืžื™ื ื™ืžื•ื ืจืขืงื•ื•ื™ืจืขืžืขื ืฅ ืคึฟืึทืจ ื“ื™ืคึผืœื•ื™ื™ื ื’ StealthWatch ืื™ืŸ ืœืขืฆื˜ืข ื˜ื™ื™ืœ, ืžื™ืจ ืงืขื ืขืŸ ืึธื ื”ื™ื™ื‘ืŸ ื“ื™ืคึผืœื•ื™ื™ื ื’ ื“ื™ ืคึผืจืึธื“ื•ืงื˜.

1. ืžืขื˜ื”ืึธื“ืก ืคึฟืึทืจ ื“ื™ืคึผืœื•ื™ื™ื ื’ ืกื˜ืขืœื˜ื•ื•ืึทื˜ื˜ืฉ

ืขืก ื–ืขื ืขืŸ ืขื˜ืœืขื›ืข ื•ื•ืขื’ืŸ ืฆื• "ืจื™ืจืŸ" ื“ื™ StealthWatch:

  • ื“cloud - ื•ื•ืึธืœืงืŸ ื“ื™ื ืกื˜ ืคึฟืึทืจ ืœืึทื‘ืึธืจืึทื˜ืึธืจื™ืข ืึทืจื‘ืขื˜;
  • ื•ื•ืึธืœืงืŸ ื‘ืื–ื™ืจื˜: ืกื˜ืขืœื˜ื•ื•ืึทื˜ื˜ืฉ ืงืœืึธื•ื“ ืคืจื™ื™ ืคึผืจืึธืฆืขืก - ื“ืึธ ื ืขื˜ืคืœืึธื•ื• ืคึฟื•ืŸ ื“ื™ื™ืŸ ืžื™ื˜ืœ ื•ื•ืขื˜ ืœื•ื™ืคืŸ ืื™ืŸ ื“ื™ ื•ื•ืึธืœืงืŸ ืื•ืŸ ื•ื•ืขื˜ ื–ื™ื™ืŸ ืึทื ืึทืœื™ื™ื–ื“ ื“ื•ืจืš StealthWatch ื•ื•ื™ื™ื›ื•ื•ืืจื’;
  • ืื•ื™ืฃ-ื”ืึทื ืึธื›ืข ืคึผืึธื•ื• (GVE ื‘ืขื˜ืŸ) - ื“ืขืจ ืื•ืคึฟืŸ ืื™ืš ื ืื›ื’ืขื’ืื ื’ืขืŸ, ื–ื™ื™ ื•ื•ืขืœืŸ ืฉื™ืงืŸ ืื™ืจ 4 OVF ื˜ืขืงืขืก ืคื•ืŸ ื•ื•ื™ืจื˜ื•ืึทืœ ืžืืฉื™ื ืขืŸ ืžื™ื˜ ื’ืขื‘ื•ื™ื˜-ืื™ืŸ ืœื™ื™ืกืึทื ืกื™ื– ืคึฟืึทืจ 90 ื˜ืขื’, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื“ื™ืคึผืœื•ื™ื“ ืื•ื™ืฃ ืึท ื“ืขื“ืึทืงื™ื™ื˜ืึทื“ ืกืขืจื•ื•ืขืจ ืื•ื™ืฃ ื“ื™ ืคึฟื™ืจืžืข ื ืขืฅ.


ื˜ืจืึธืฅ ื“ืขื ืฉืขืคืข ืคื•ืŸ โ€‹โ€‹ื“ืึทื•ื ืœืึธื•ื“ื™ื“ ื•ื•ื™ืจื˜ื•ืึทืœ ืžืืฉื™ื ืขืŸ, ืคึฟืึทืจ ืึท ืžื™ื ื™ืžืึทืœ ืืจื‘ืขื˜ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื‘ืœื•ื™ื– 2 ื–ืขื ืขืŸ ื’ืขื ื•ื’: StealthWatch Management Console ืื•ืŸ FlowCollector. ืึธื‘ืขืจ, ืื•ื™ื‘ ืขืก ืื™ื– ืงื™ื™ืŸ ื ืขืฅ ืžื™ื˜ืœ ื•ื•ืึธืก ืงืขื ืขืŸ ืึทืจื•ื™ืกืคื™ืจืŸ ื ืขื˜ืคืœืึธื•ื• ืฆื• FlowCollector, ืขืก ืื™ื– ืื•ื™ืš ื ื™ื™ื˜ื™ืง ืฆื• ืฆืขื•ื•ื™ืงืœืขืŸ FlowSensor, ื•ื•ื™ื™ึทืœ ื“ื™ ื™ืขื ืขืจ ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื–ืึทืžืœืขืŸ ื ืขื˜ืคืœืึธื•ื• ื ื™ืฆืŸ SPAN / RSPAN ื˜ืขืงื ืึทืœืึทื“ื–ืฉื™ื–.

ื•ื•ื™ ืื™ืš ื’ืขื–ืื’ื˜ ืคืจื™ืขืจ, ื“ื™ื™ืŸ ืคืึทืงื˜ื™ืฉ ื ืขืฅ ืงืขื ืขืŸ ืฉืคึผื™ืœืŸ ื•ื•ื™ ืึท ืœืึทื‘ืึธืจืึทื˜ืึธืจื™ืข ื‘ืึทื ืง, ื•ื•ื™ื™ึทืœ StealthWatch ื“ืึทืจืฃ ื‘ืœื•ื™ื– ืึท ืงืึธืคึผื™ืข, ืึธื“ืขืจ, ืžืขืจ ืจื™ื›ื˜ื™ืง, ืึท ืงืึธืคึผื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹ืคืึทืจืงืขืจ. ื“ื™ ื‘ื™ืœื“ ืื•ื ื˜ืŸ ื•ื•ื™ื™ื–ื˜ ืžื™ื™ืŸ ื ืขืฅ, ื•ื•ื• ืื•ื™ืฃ ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ื’ื™ื™ื˜ื•ื•ื™ื™ ืื™ืš ื•ื•ืขืœ ืงืึทื ืคื™ื’ื™ืขืจ ื“ื™ Netflow ืขืงืกืคึผืึธืจื˜ืขืจ ืื•ืŸ, ื•ื•ื™ ืึท ืจืขื–ื•ืœื˜ืึทื˜, ื•ื•ืขื˜ ืฉื™ืงืŸ Netflow ืฆื• ื“ื™ ืงืึทืœืขืงื˜ืขืจ.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

ืฆื• ืึทืงืกืขืก ืฆื•ืงื•ื ืคึฟื˜ VMs, ื“ื™ ืคืืœื’ืขื ื“ืข ืคึผืึธืจืฅ ื–ืึธืœ ื–ื™ื™ืŸ ืขืจืœื•ื™ื‘ื˜ ืื•ื™ืฃ ื“ื™ื™ืŸ ืคื™ื™ืจื•ื•ืึทืœ ืื•ื™ื‘ ืื™ืจ ื”ืึธื˜ ืื™ื™ืŸ:

ื˜ืงืคึผ 22 ืœ ื˜ืงืคึผ 25 ืœ ื˜ืงืคึผ 389 ืœ ื˜ืงืคึผ 443 ืœ ื˜ืงืคึผ 2393 ืœ ื˜ืงืคึผ 5222 ืœ ื•ื“ืคึผ 53 ืœ ื•ื“ืคึผ 123 ืœ ื•ื“ืคึผ 161 ืœ ื•ื“ืคึผ 162 ืœ ื•ื“ืคึผ 389 ืœ ื•ื“ืคึผ 514 ืœ ื•ื“ืคึผ 2055 ืœ ื•ื“ืคึผ 6343

ืขื˜ืœืขื›ืข ืคื•ืŸ โ€‹โ€‹ื–ื™ื™ ื–ืขื ืขืŸ ื‘ืึทื•ื•ื•ืกื˜ ื‘ืึทื“ื™ื ื•ื ื’ืก, ืขื˜ืœืขื›ืข ื–ืขื ืขืŸ ืจืขื–ืขืจื•ื•ื™ืจื˜ ืคึฟืึทืจ ืกื™ืกืงืึธ ื‘ืึทื“ื™ื ื•ื ื’ืก.
ืื™ืŸ ืžื™ื™ืŸ ืคืึทืœ, ืื™ืš ืคืฉื•ื˜ ื“ื™ืคึผืœื•ื™ื“ StelathWatch ืื•ื™ืฃ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ื ืขืฅ ื•ื•ื™ ื˜ืฉืขืง ืคึผื•ื™ื ื˜, ืื•ืŸ ื”ืื˜ ื ื™ืฉื˜ ื”ืึธื‘ืŸ ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ ืงื™ื™ืŸ ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ ื›ึผืœืœื™ื.

2. ื™ื ืกื˜ืึธืœื™ื ื’ ืคืœืึธื•ื•ืงืึธืœืœืขืงื˜ืึธืจ ื ื™ืฆืŸ VMware vSphere ื•ื•ื™ ืึท ื‘ื™ื™ึทืฉืคึผื™ืœ

2.1. ื“ืจื™ืงื˜ ืึธืคึผืคืœื™ืงืŸ ืื•ืŸ ืกืขืœืขืงื˜ื™ืจืŸ OVF file1. ื ืึธืš ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ืึทื•ื•ื™ื™ืœืึทื‘ื™ืœืึทื˜ื™ ืคื•ืŸ ืจืขืกื•ืจืกืŸ, ื’ื™ื™ืŸ ืฆื• ื“ื™ ืžืขื ื™ื• View, ื™ื ื•ื•ืึทื ื˜ืึธืจื™ โ†’ ื ืขื˜ื•ื•ืึธืจืงื™ื ื’ (Ctrl + Shift + N).

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

2.2. ืื™ืŸ ื“ื™ ื ืขื˜ื•ื•ืึธืจืงื™ื ื’ ืงื•ื•ื™ื˜ืœ, ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ New Distributed ืคึผืึธืจื˜ ื’ืจื•ืคึผืข ืื™ืŸ ื“ื™ ื•ื•ื™ืจื˜ื•ืึทืœ ื‘ืึทืฉื˜ื™ืžืขืŸ ืกืขื˜ื˜ื™ื ื’ืก.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

2.3. ืฉื˜ืขืœืŸ ื“ืขื ื ืึธืžืขืŸ, ืœืึธื–ืŸ ืขืก ื–ื™ื™ืŸ StealthWatchPortGroup, ื“ื™ ืจืขืฉื˜ ืคื•ืŸ ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขืžืื›ื˜ ื•ื•ื™ ืื™ืŸ ื“ื™ ืกืงืจืขืขื ืฉืึธื˜ ืื•ืŸ ื’ื™ื˜ ื•ื•ื™ื™ึทื˜ืขืจ.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

2.4. ืžื™ืจ ืคืึทืจืขื ื“ื™ืงืŸ ื“ื™ ืฉืึทืคื•ื ื’ ืคื•ืŸ ื“ื™ ืคึผืึธืจื˜ ื’ืจื•ืคืข ืžื™ื˜ ื“ื™ ืขื ื“ื™ืงืŸ ืงื ืขืคึผืœ.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

2.5. ืœืึธืžื™ืจ ืจืขื“ืึทื’ื™ืจืŸ ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก ืคื•ืŸ ื“ื™ ื‘ืืฉืืคืŸ ืคึผืึธืจื˜ ื’ืจื•ืคืข ื“ื•ืจืš ืจืขื›ื˜-ืงืœื™ืงื™ื ื’ ืื•ื™ืฃ ื“ื™ ืคึผืึธืจื˜ ื’ืจื•ืคึผืข ืื•ืŸ ืกืขืœืขืงื˜ื™ืจืŸ ืจืขื“ืึทื’ื™ืจืŸ ืกืขื˜ื˜ื™ื ื’ืก. ืื™ืŸ ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืงื•ื•ื™ื˜ืœ, ื–ื™ื™ืŸ ื–ื™ื›ืขืจ ืฆื• ื’ืขื‘ืŸ "ืคึผืจืึทืžื™ืกืงื™ื•ืึทืก ืžืึธื“ืข", ืคึผืจืึธืžื™ืกืงื•ืึธื•ืก ืžืึธื“ืข โ†’ ืึธื ื ืขืžืขืŸ โ†’ OK.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

2.6. ื•ื•ื™ ืึท ื‘ื™ื™ืฉืคึผื™ืœ, ืœืึธื–ืŸ ืื•ื ื“ื– ืึทืจื™ื™ึทื ืคื™ืจ OVF FlowCollector, ื“ื™ ืืจืืคืงืืคื™ืข ืœื™ื ืง ืคึฟืึทืจ ื•ื•ืึธืก ืื™ื– ื’ืขืฉื™ืงื˜ ื“ื•ืจืš ืึท ืกื™ืกืงืึธ ื™ื ื–ืฉืขื ื™ืจ ื ืึธืš ืึท GVE ื‘ืขื˜ืŸ. ืจืขื›ื˜ ื’ื™ื˜ ืื•ื™ืฃ ื“ืขืจ ื‘ืึทืœืขื‘ืึธืก ืื•ื™ืฃ ื•ื•ืึธืก ืื™ืจ ืคึผืœืึทืŸ ืฆื• ืฆืขื•ื•ื™ืงืœืขืŸ ื“ื™ VM ืื•ืŸ ืกืขืœืขืงื˜ื™ืจืŸ ื“ื™ืคึผืœื•ื™ OVF ืžื•ืกื˜ืขืจ. ื•ื•ืขื’ืŸ ื“ื™ ืึทืœืึทืงื™ื™ื˜ื™ื“ ืคึผืœืึทืฅ, ืขืก ื•ื•ืขื˜ "ืึธื ื”ื™ื™ื‘ ืึทืจื•ื™ืฃ" ื‘ื™ื™ 50 ื’ื™ื’ืื‘ื™ื™ื˜, ืึธื‘ืขืจ ืคึฟืึทืจ ืงืึทืžื‘ืึทื˜ ื˜ื ืึธื™ื ืขืก ืื™ื– ืจืขืงืึทืžืขื ื“ื™ื“ ืฆื• ืึทืœืึทืงื™ื™ื˜ 200 ื’ื™ื’ืื‘ื™ื™ื˜.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

2.7. ืกืขืœืขืงื˜ื™ืจืŸ ื“ืขื ื˜ืขืงืข ื•ื•ื• ื“ื™ OVF ื˜ืขืงืข ืื™ื– ืœื™ื’ืŸ.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

2.8. ื“ืจื™ืงื˜ "ื•ื•ื™ื™ึทื˜ืขืจ".

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

2.9. ืžื™ืจ ืึธื ื•ื•ื™ื™ึทื–ืŸ ื“ื™ ื ืึธืžืขืŸ ืื•ืŸ ืกืขืจื•ื•ืขืจ ื•ื•ื• ืžื™ืจ ืฆืขื•ื•ื™ืงืœืขืŸ ืขืก.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

2.10. ื•ื•ื™ ืึท ืจืขื–ื•ืœื˜ืึทื˜, ืžื™ืจ ื‘ืึทืงื•ืžืขืŸ ื“ื™ ืคืืœื’ืขื ื“ืข ื‘ื™ืœื“ ืื•ืŸ ื’ื™ื˜ "ืขื ื“ื™ืงืŸ".

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

2.11. ืžื™ืจ ื ืึธื›ื’ื™ื™ืŸ ื“ื™ ื–ืขืœื‘ืข ืกื˜ืขืคึผืก ืฆื• ืฆืขื•ื•ื™ืงืœืขืŸ ื“ื™ StealthWatch ืžืึทื ืึทื’ืขืžืขื ื˜ ืงืึทื ืกืึธื•ืœ.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

2.12. ืื™ืฆื˜ ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ื“ื™ ื ื™ื™ื˜ื™ืง ื ืขื˜ื•ื•ืึธืจืงืก ืื™ืŸ ื“ื™ ื™ื ื˜ืขืจืคื™ื™ืกื™ื– ืึทื–ื•ื™ ืึทื– FlowCollector ื–ืขื˜ ื‘ื™ื™ื“ืข ื“ื™ SMC ืื•ืŸ ื“ื™ ื“ืขื•ื•ื™ืกืขืก ืคึฟื•ืŸ ื•ื•ืึธืก Netflow ื•ื•ืขื˜ ื–ื™ื™ืŸ ื™ืงืกืคึผืึธืจื˜ืึทื“.

3. ื™ื ื™ื˜ื™ืึทืœื™ื–ื™ื ื’ ืกื˜ืขืœื˜ื•ื•ืึทื˜ื˜ืฉ ืžืึทื ืึทื’ืขืžืขื ื˜ ืงืึทื ืกืึธื•ืœ

3.1. ื“ื•ืจืš ื’ื™ื™ืŸ ืฆื• ื“ื™ ืงืึทื ืกืึธื•ืœ ืคื•ืŸ ื“ื™ ืื™ื ืกื˜ืึทืœื™ืจืŸ SMCVE ืžืึทืฉื™ืŸ, ืื™ืจ ื•ื•ืขื˜ ื–ืขืŸ ืึท ืึธืจื˜ ืฆื• ืึทืจื™ื™ึทืŸ ื“ื™ื™ืŸ ืœืึธื’ื™ืŸ ืื•ืŸ ืคึผืึทืจืึธืœ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ sysadmin/lan1cope.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

3.2. ืžื™ืจ ื’ื™ื™ืŸ ืฆื• ื“ื™ ืžืึทื ืึทื’ืขืžืขื ื˜ ื ื•ืžืขืจ, ืฉื˜ืขืœืŸ ื“ื™ IP ืึทื“ืจืขืก ืื•ืŸ ืื ื“ืขืจืข ื ืขืฅ ืคึผืึทืจืึทืžืขื˜ืขืจืก ืื•ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื–ื™ื™ืขืจ ืขื ื“ืขืจื•ื ื’ืขืŸ. ื“ืขืจ ืžื™ื˜ืœ ื•ื•ืขื˜ ืจืขื‘ืึธืึธื˜.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

3.3. ื’ื™ื™ืŸ ืฆื• ื“ื™ ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“ (ื“ื•ืจืš https ืฆื• ื“ื™ ืึทื“ืจืขืก ื•ื•ืึธืก ืื™ืจ ื”ืึธื˜ ืกืคึผืขืกื™ืคื™ืขื“ ืื™ืŸ SMC) ืื•ืŸ ื™ื ื™ืฉืึทืœื™ื™ื– ื“ื™ ืงืึทื ืกืึธื•ืœ, ืคืขืœื™ืงื™ื™ึทื˜ ืœืึธื’ื™ืŸ / ืคึผืึทืจืึธืœ - admin/lan411cope.

ืคึผืก: ืขืก ื›ืึทืคึผืึทื ื– ืึทื– ืขืก ืงืขืŸ ื ื™ืฉื˜ ืขืคืขื ืขืŸ ืื™ืŸ Google ืงืจืึธื•ื, Explorer ื•ื•ืขื˜ ืฉื˜ืขื ื“ื™ืง ื”ืขืœืคืŸ.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

3.4. ื–ื™ื™ื˜ ื–ื™ื›ืขืจ ืฆื• ื˜ื•ื™ืฉืŸ ืคึผืึทืกื•ื•ืขืจื“ื–, ืฉื˜ืขืœืŸ DNS, NTP ืกืขืจื•ื•ืขืจืก, ืคืขืœื“, ืขื˜ืง. ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก ื–ืขื ืขืŸ ื™ื ื˜ื•ืึทื˜ื™ื•ื•.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

3.5. ื ืึธืš ื’ืขื‘ืŸ ืึท ืงืœื™ืง ื“ืขื "ืฆื•ืœื™ื™ื’ืŸ" ืงื ืขืคึผืœ, ื“ื™ ืžื™ื˜ืœ ื•ื•ืขื˜ ืจืขื‘ืึธืึธื˜ ื•ื•ื™ื“ืขืจ. ื ืึธืš 5-7 ืžื™ื ื•ื˜ ืื™ืจ ืงืขื ืขืŸ ืคืึทืจื‘ื™ื ื“ืŸ ื•ื•ื™ื“ืขืจ ืฆื• ื“ืขื ืึทื“ืจืขืก; StealthWatch ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขืจืื˜ืŸ ื“ื•ืจืš ืึท ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

4. ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ FlowCollector

4.1. ื“ืึธืก ื–ืขืœื‘ืข ืื™ื– ืžื™ื˜ ื“ืขื ื–ืึทืžืœืขืจ. ืขืจืฉื˜ืขืจ, ืื™ืŸ ื“ื™ CLI ืžื™ืจ ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ื“ื™ IP ืึทื“ืจืขืก, ืžืึทืกืงืข, ืคืขืœื“, ืื•ืŸ ื“ื™ FC ืจืขื‘ืึธืึธืฅ. ื“ืขืจื ืึธืš ืื™ืจ ืงืขื ืขืŸ ืคืึทืจื‘ื™ื ื“ืŸ ืฆื• ื“ื™ ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“ ืื™ืŸ ื“ื™ ืกืคึผืขืกื™ืคื™ืขื“ ืึทื“ืจืขืก ืื•ืŸ ื“ื•ืจื›ืคื™ืจืŸ ื“ื™ ื–ืขืœื‘ืข ื™ืงืขืจื“ื™ืง ืกืขื˜ืึทืคึผ. ืจืขื›ื˜ ืฆื• ื“ืขื ืคืึทืงื˜ ืึทื– ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก ื–ืขื ืขืŸ ืขื ืœืขืš, ื“ื™ื˜ื™ื™ืœื“ ืกืงืจืขืขื ืฉืึธืฅ ื–ืขื ืขืŸ ืื™ื‘ืขืจื’ืขื”ื™ืคึผืขืจื˜. ืงืจืึทื“ืขื ื˜ืฉืึทืœื– ืืจื™ื™ื ืฆื•ื’ื™ื™ืŸ ื“ื™ ื–ืขืœื‘ืข.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

4.2. ืื™ืŸ ื“ื™ ืคึผืขื ืึทืœื˜ืึทืžืึทื˜ ืคื•ื ื˜, ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืฉื˜ืขืœืŸ ื“ื™ IP ืึทื“ืจืขืก ืคื•ืŸ ื“ื™ SMC, ืื™ืŸ ื“ืขื ืคืึทืœ, ื“ื™ ืงืึทื ืกืึธื•ืœ ื•ื•ืขื˜ ื–ืขืŸ ื“ื™ ืžื™ื˜ืœ, ืื™ืจ ืžื•ื–ืŸ ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ืขื ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ื•ืจืš ืึทืจื™ื™ึทืŸ ื“ื™ื™ืŸ ืงืจืึทื“ืขื ื˜ืฉืึทืœื–.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

4.3. ืกืขืœืขืงื˜ื™ืจืŸ ื“ืขื ืคืขืœื“ ืคึฟืึทืจ StealthWatch, ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ื‘ืึทืฉื˜ื™ืžื˜ ืคืจื™ืขืจ, ืื•ืŸ ื“ื™ ืคึผืึธืจื˜ 2055 - ืจืขื’ื•ืœืขืจ ื ืขื˜ืคืœืึธื•ื•, ืื•ื™ื‘ ืื™ืจ ืึทืจื‘ืขื˜ ืžื™ื˜ sFlow, ืคึผืึธืจื˜ 6343.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

5. ื ืขื˜ืคืœืึธื•ื• ืขืงืกืคึผืึธืจื˜ืขืจ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ

5.1. ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ ื“ื™ Netflow ืขืงืกืคึผืึธืจื˜ืขืจ, ืื™ืš ืจืขืงืึธืžืขื ื“ื™ืจืŸ ืฆื• ื•ื•ืขื ื“ืŸ ืฆื• ื“ืขื ืžื™ื˜ืœ , ื“ืึธ ื–ืขื ืขืŸ ื“ื™ ื”ื•ื™ืคึผื˜ ืคื™ืจืขืจ ืคึฟืึทืจ ืงืึทื ืคื™ื’ื™ืขืจื™ื ื’ ื“ื™ ื ืขื˜ืคืœืึธื•ื• ืขืงืกืคึผืึธืจื˜ืขืจ ืคึฟืึทืจ ืคื™ืœืข ื“ืขื•ื•ื™ืกืขืก: ืกื™ืกืงืึธ, ื˜ืฉืขืง ืคึผื•ื™ื ื˜, ืคืึธืจื˜ื™ื ืขื˜.

5.2. ืื™ืŸ ืื•ื ื“ื–ืขืจ ืคืึทืœ, ืื™ืš ืื™ื‘ืขืจื—ื–ืจืŸ, ืžื™ืจ ืขืงืกืคึผืึธืจื˜ื™ืจืŸ Netflow ืคึฟื•ืŸ ื“ื™ ื˜ืฉืขืง ืคึผื•ื™ื ื˜ ื’ื™ื™ื˜ื•ื•ื™ื™. ื ืขื˜ืคืœืึธื•ื• ืขืงืกืคึผืึธืจื˜ืขืจ ืื™ื– ืงืึทื ืคื™ื’ื™ืขืจื“ ืื™ืŸ ืึท ืงื•ื•ื™ื˜ืœ ืžื™ื˜ ื“ื™ ื–ืขืœื‘ืข ื ืึธืžืขืŸ ืื™ืŸ ื“ื™ ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“ (ื’ืึทื™ืึท ื˜ื•ื™ืขืจ). ืฆื• ื˜ืึธืŸ ื“ืึธืก, ื’ื™ื˜ "ืœื™ื™ื’", ืกืคึผืขืฆื™ืคื™ืฆื™ืจืŸ ื“ื™ ื ืขื˜ืคืœืึธื•ื• ื•ื•ืขืจืกื™ืข ืื•ืŸ ื“ื™ ืคืืจืœืื ื’ื˜ ืคึผืึธืจื˜.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

6. ืึทื ืึทืœื™ืกื™ืก ืคื•ืŸ ืกื˜ืขืœื˜ื•ื•ืึทื˜ื˜ืฉ ืึธืคึผืขืจืึทืฆื™ืข

6.1. ื’ื™ื™ืŸ ืฆื• ื“ื™ SMC ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“, ืื•ื™ืฃ ื“ืขืจ ืขืจืฉื˜ืขืจ ื‘ืœืึทื˜ ืคื•ืŸ ื“ืึทืฉื‘ืึธืึทืจื“ืก> ื ืขื˜ื•ื•ืึธืจืง ื–ื™ื›ืขืจื”ื™ื™ึทื˜ ืื™ืจ ืงืขื ืขืŸ ื–ืขืŸ ืึทื– ื“ืขืจ ืคืึทืจืงืขืจ ืื™ื– ืกื˜ืึทืจื˜ืขื“!

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

6.2. ืขื˜ืœืขื›ืข ืกืขื˜ื˜ื™ื ื’ืก, ืœืžืฉืœ, ื“ื™ื•ื•ื™ื™ื“ื™ื ื’ ืžื—ื ื•ืช ืื™ืŸ ื’ืจื•ืคึผืขืก, ืžืึธื ื™ื˜ืึธืจื™ื ื’ ื™ื—ื™ื“ ื™ื ื˜ืขืจืคื™ื™ืกื™ื–, ื–ื™ื™ืขืจ ืžืึทืกืข, ืึธื ืคื™ืจื•ื ื’ ืงืึทืœืขืงื˜ืขืจื–, ืื•ืŸ ืžืขืจ, ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขืคึฟื•ื ืขืŸ ื‘ืœื•ื™ื– ืื™ืŸ ื“ื™ StealthWatch Java ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ. ืคื•ืŸ ืงื•ืจืก, Cisco ืื™ื– ืกืœืึธื•ืœื™ ื˜ืจืึทื ืกืคืขืจื™ื ื’ ืึทืœืข ื“ื™ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืฆื• ื“ื™ ื‘ืœืขื˜ืขืจืขืจ ื•ื•ืขืจืกื™ืข ืื•ืŸ ืžื™ืจ ื•ื•ืขืœืŸ ื‘ืึทืœื“ ืคืึทืจืœืึธื–ืŸ ืึทื–ืึท ืึท ื“ืขืกืงื˜ืึทืคึผ ืงืœื™ืขื ื˜.

ืฆื• ื™ื ืกื˜ืึทืœื™ืจืŸ ื“ื™ ืึทืคึผืœืึทืงื™ื™ืฉืึทืŸ, ืื™ืจ ืžื•ื–ืŸ ืขืจืฉื˜ืขืจ ื™ื ืกื˜ืึทืœื™ืจืŸ JRE (ืื™ืš ืื™ื ืกื˜ืึทืœื™ืจืŸ ื•ื•ืขืจืกื™ืข 8, ื›ืึธื˜ืฉ ืขืก ืื™ื– ื’ืขื–ืึธื’ื˜ ืึทื– ืขืก ืื™ื– ื’ืขืฉื˜ื™ืฆื˜ ืึทืจื•ื™ืฃ ืฆื• 10) ืคึฟื•ืŸ ื“ืขืจ ื‘ืึทืึทืžื˜ืขืจ ืึธืจืึทืงืœืข ื•ื•ืขื‘ื–ื™ื™ื˜ืœ.

ืื™ืŸ ื“ืขืจ ืื•ื™ื‘ืขืจืฉื˜ืขืจ ืจืขื›ื˜ ื•ื•ื™ื ืงืœ ืคื•ืŸ ื“ื™ ื•ื•ืขื‘ ืฆื•ื‘ื™ื ื“ ืคื•ืŸ ื“ื™ ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืงืึทื ืกืึธื•ืœ, ืฆื• ืึธืคึผืœืึธื“ื™ืจืŸ, ืื™ืจ ืžื•ื–ืŸ ื’ื™ื˜ ื“ื™ "ื“ืขืกืงื˜ืึทืคึผ ืงืœื™ืขื ื˜" ืงื ืขืคึผืœ.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

ืื™ืจ ืจืึทื˜ืขื•ื•ืขืŸ ืื•ืŸ ื™ื ืกื˜ืึทืœื™ืจืŸ ื“ืขื ืงืœื™ืขื ื˜ ื’ืขืฆื•ื•ื•ื ื’ืขืŸ, ื“ื–ืฉืึทื•ื•ืึท ื•ื•ืขื˜ ืจื•ื‘ึฟ ืžืกืชึผืžื ืฉื•ื•ืขืจืŸ ืขืก, ืื™ืจ ืงืขืŸ ื“ืึทืจืคึฟืŸ ืฆื• ืœื™ื™ื’ืŸ ื“ืขื ื‘ืึทืœืขื‘ืึธืก ืฆื• ื“ื–ืฉืึทื•ื•ืึท ืื•ื™ืกื ืขืžืขืŸ.

ื•ื•ื™ ืึท ืจืขื–ื•ืœื˜ืึทื˜, ืึท ืคืขืจืœื™ ืงืœืึธืจ ืงืœื™ืขื ื˜ ืื™ื– ื’ื™ืœื•ื™, ืื™ืŸ ื•ื•ืึธืก ืขืก ืื™ื– ื’ืจื™ื ื’ ืฆื• ื–ืขืŸ ื“ื™ ืœืึธื•ื“ื™ื ื’ ืคื•ืŸ ื™ืงืกืคึผืึธืจื˜ืขืจื–, ื™ื ื˜ืขืจืคื™ื™ืกื™ื–, ืื ืคืืœืŸ ืื•ืŸ ื–ื™ื™ืขืจ ืคืœืึธื•ื–.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

7. ืกื˜ืขืœื˜ื•ื•ืึทื˜ื˜ืฉ ืกืขื ื˜ืจืึทืœ ืžืึทื ืึทื’ืขืžืขื ื˜

7.1. ื“ื™ ื”ื•ื™ืคื˜ ืžืึทื ืึทื’ืขืžืขื ื˜ ืงื•ื•ื™ื˜ืœ ื›ึผื•ืœืœ ืึทืœืข ื“ื™ื•ื•ื™ื™ืกืึทื– ื•ื•ืึธืก ื–ืขื ืขืŸ ื˜ื™ื™ืœ ืคื•ืŸ ื“ื™ ื“ื™ืคึผืœื•ื™ื“ ืกื˜ืขืœื˜ื•ื•ืึทื˜ื˜ืฉ, ืึทื–ืึท ื•ื•ื™: ืคืœืึธื•ื•ืงืึธืœืœืขืงื˜ืึธืจ, ืคืœืึธื•ื•ืกืขื ืกืึธืจ, ื•ื“ืคึผ-ื“ื™ืจืขืงื˜ืึธืจ ืื•ืŸ ืขื ื“ืคึผื•ื™ื ื˜ ืงืึธื ืกืขื˜ืจืึทื˜ืึธืจ. ื“ืึธืจื˜ ืื™ืจ ืงืขื ืขืŸ ืคื™ืจืŸ ื ืขืฅ ืกืขื˜ื˜ื™ื ื’ืก ืื•ืŸ ืžื™ื˜ืœ ื‘ืึทื“ื™ื ื•ื ื’ืก, ืœื™ื™ืกืึทื ืกื™ื– ืื•ืŸ ืžืึทื ื™ื•ืึทืœื™ ืงืขืจ ืึทื•ื•ืขืง ื“ื™ ืžื™ื˜ืœ.

ืื™ืจ ืงืขื ืขืŸ ื’ื™ื™ืŸ ืฆื• ืขืก ื“ื•ืจืš ื’ืขื‘ืŸ ืึท ืงืœื™ืง ืื•ื™ืฃ ื“ื™ "ื’ืึทื ื’" ืื™ืŸ ื“ืขืจ ืื•ื™ื‘ืขืจืฉื˜ืขืจ ืจืขื›ื˜ ื•ื•ื™ื ืงืœ ืื•ืŸ ืกืขืœืขืงื˜ื™ืจืŸ ืกืขื ื˜ืจืึทืœ ืžืึทื ืึทื’ืขืžืขื ื˜.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

7.2. ื“ื•ืจืš ื’ื™ื™ืŸ ืฆื• ืจืขื“ืึทื’ื™ืจืŸ ืึทืคึผืคึผืœื™ืึทื ืกืข ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ืื™ืŸ FlowCollector, ืื™ืจ ื•ื•ืขื˜ ื–ืขืŸ SSH, NTP ืื•ืŸ ืื ื“ืขืจืข ื ืขืฅ ืกืขื˜ื˜ื™ื ื’ืก ืฉื™ื™ึทื›ื•ืช ืฆื• ื“ื™ ืึทืคึผ ื–ื™ืš. ืฆื• ื’ื™ื™ืŸ, ืกืขืœืขืงื˜ื™ืจืŸ ืึทืงื˜ื™ืึธื ืก โ†’ ืจืขื“ืึทื’ื™ืจืŸ ืึทืคึผืคึผืœื™ืึทื ืกืข ืงืึธื ืคื™ื’ื•ืจืึทื˜ื™ืึธืŸ ืคึฟืึทืจ ื“ื™ ืคืืจืœืื ื’ื˜ ืžื™ื˜ืœ.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

7.3. ืœื™ืกืขื ืกืข ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืงืขื ืขืŸ ืื•ื™ืš ื–ื™ื™ืŸ ื’ืขืคึฟื•ื ืขืŸ ืื™ืŸ ื“ื™ ื”ื•ื™ืคื˜ ืžืึทื ืึทื’ืขืžืขื ื˜ > ืคื™ืจืŸ ืœื™ืกืขื ืกืขืก ืงื•ื•ื™ื˜ืœ. ืคึผืจืึธืฆืขืก ืœื™ื™ืกืึทื ืกื™ื– ืื™ืŸ ืคืึทืœ ืคื•ืŸ GVE ื‘ืขื˜ืŸ ื–ืขื ืขืŸ ื’ืขื’ืขื‘ืŸ ืคึฟืึทืจ ืงืกื ื•ืžืงืก ื˜ืขื’.

StealthWatch: ื“ื™ืคึผืœื•ื™ืžืึทื ื˜ ืื•ืŸ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ. ื˜ื™ื™ืœ 2

ื“ืขืจ ืคึผืจืึธื“ื•ืงื˜ ืื™ื– ื’ืจื™ื™ื˜ ืคึฟืึทืจ ื ื•ืฆืŸ! ืื™ืŸ ื“ืขืจ ื•ื•ื™ื™ึทื˜ืขืจ ื˜ื™ื™ืœ, ืžื™ืจ ื•ื•ืขืœืŸ ืงื•ืงืŸ ื•ื•ื™ StealthWatch ืงืขื ืขืŸ ื“ืขืจืงืขื ืขืŸ ืื ืคืืœืŸ ืื•ืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ ืจื™ืคึผืึธืจืฅ.

ืžืงื•ืจ: www.habr.com

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’