Sniffers: Dziwani zonse za chida ichi Hacking

Kodi munamvapo za "Onunkhiza"? Ngati muli ndi chidwi ndi dziko la chinyengo ndi cybersecurity, ndizotheka kuti mawuwa akukopa chidwi chanu. M'nkhaniyi, tifufuza zonse zokhudza Sniffers, zomwe iwo ali, mitundu yawo, momwe amagwirira ntchito komanso zomwe zimakhudzana ndi intaneti ndi chitetezo cha deta.

Konzekerani kulowa m'dziko lochititsa chidwi la kubera ndikuphunzira momwe mungatetezere makina anu ku zovuta zomwe zingatheke.

Kodi Sniffer ndi chiyani?

Sniffer, yomwe imadziwikanso kuti "protocol analyzer" kapena "packet sniffer", ndi chida chomwe chimagwiritsidwa ntchito pachitetezo cha makompyuta kuti chigwire ndikusanthula kuchuluka kwa data komwe kumazungulira pa netiweki. Cholinga chake chachikulu ndikuyang'ana ndikuyang'ana mapaketi a data mu nthawi yeniyeni, kulola owononga kapena akatswiri achitetezo kuti amvetsetse zomwe zimafalitsidwa pakati pa zida zolumikizidwa ndi netiweki.

Momwe Sniffers Amagwirira ntchito

Sniffers amagwira ntchito m'magawo osiyanasiyana OSI (Open Systems Interconnection) chitsanzo kusanthula kuchuluka kwa ma network. Zida izi zikhoza kukhala amitundu yosiyanasiyana, onse a hardware ndi mapulogalamu ndipo nthawi zambiri amagwiritsidwa ntchito ndi akatswiri achitetezo kuti azindikire zovuta zomwe zingachitike pamanetiweki kapena pakuwunika.

Mitundu ya Onunkhiza

Wonunkhiza, monga tanenera kale, akhoza kukhala mapulogalamu kapena hardware. Mitundu yonse iwiriyi idapangidwa kuti igwire ndikusanthula kuchuluka kwa data yomwe ikuyenda pamanetiweki, koma imasiyana momwe imagwiritsidwira ntchito komanso kugwiritsidwa ntchito.

Tiyeni tiwone kusiyana pakati pa Software Sniffer ndi Hardware Sniffer:

Pulogalamu Sniffer

Software sniffer ndi pulogalamu yapakompyuta yomwe imayikidwa pa chipangizo, monga kompyuta kapena seva, kuti igwire ndikuwunika kuchuluka kwa magalimoto pamanetiweki. Mtundu uwu wa sniffer umagwira ntchito pamlingo wa mapulogalamu ndipo umagwira ntchito pa chipangizochi.

Mkati mwa Ubwino wa Software Sniffer Adzapeza mosavuta kukhazikitsa ndikukonzekera pazida zomwe zilipo. Itha kupereka kusinthasintha kochulukira potengera makonda ndi kusanthula ndipo nthawi zambiri imasinthidwa ndikuwonjezeredwa ndi magwiridwe antchito atsopano.

Hardware Sniffer

Ndi chipangizo chakuthupi chomwe chimapangidwa kuti chizitha kujambula ndikuwunika kuchuluka kwa magalimoto pamaneti. Zidazi zimalumikizana ndi netiweki ndipo zimatha kuyang'anira kuchuluka kwa magalimoto munthawi yeniyeni. Zowombera pa Hardware zitha kukhala zida zodziyimira zokha kapena kukhala gawo la zida zovuta kwambiri, monga ma routers kapena ma switch, kuti athe kuyang'anira ndi kusanthula mosalekeza.

ndi zabwino kwambiri za chipangizo ichi ndikuti imapereka kusanthula kokwanira komanso mwatsatanetsatane kwa magalimoto apaintaneti popanda kukhudza magwiridwe antchito a chipangizocho. Ikhoza kujambula deta mu nthawi yeniyeni popanda kudalira makina ogwiritsira ntchito kapena zipangizo zamakono ndipo ndi njira yabwino kwa maukonde akuluakulu, ovuta kumene kuyang'anitsitsa kumafunika.

Kodi fungo lodziwika bwino komanso logwiritsidwa ntchito kwambiri ndi liti?

ARP (Address Resolution Protocol) Sniffer

Mtundu uwu wa sniffer umayang'ana pa kujambula ndi kusanthula mapaketi a data okhudzana ndi protocol resolution (ARP). ARP ili ndi udindo wopanga ma adilesi a IP ku ma adilesi a MAC pa netiweki yakomweko.

Pogwiritsa ntchito sniffer ya ARP, akatswiri amatha kuyang'anira tebulo la ARP ndikupeza zambiri zokhudza IP ndi maadiresi a MAC okhudzana ndi zipangizo zolumikizidwa ndi netiweki. Izi zitha kukhala zothandiza pakuzindikiritsa zovuta zomwe zingalumikizike kapena kuzindikira zoyeserera kupha poizoni wa ARP, kuwukira koyipa komwe kungayambitse kuwongolera magalimoto mosaloledwa.

IP (Internet Protocol) Sniffer

Osuta a IP amayang'ana kwambiri kujambula ndi kusanthula mapaketi a data okhudzana ndi protocol ya IP. Onunkhiza awa atha kupereka chidziwitso chofunikira chokhudza kuchuluka kwa magalimoto pakati pa zida zosiyanasiyana ndi maukonde, kuphatikiza zambiri za ma IP adilesi akuchokera ndi komwe akupita, mtundu wa protocol yomwe imagwiritsidwa ntchito, komanso zomwe zili m'mapaketi.

Pogwiritsa ntchito IP sniffer, akatswiri achitetezo amatha kuzindikira njira zokayikitsa zamagalimoto kapena kuzindikira ziwopsezo zomwe zingachitike pamanetiweki.

MAC Sniffer (Media Access Control)

Mtundu uwu wa sniffer umayang'ana pa kujambula ndi kusanthula mapaketi a data okhudzana ndi ma adilesi a MAC a zida pa netiweki yakomweko.

Maadiresi a MAC ndi zozindikiritsa zapadera zomwe zimaperekedwa pa chipangizo chilichonse cha netiweki, ndipo zonunkhiza za MAC zitha kuthandiza kudziwa kuti ndi zida ziti zomwe zimagwira pa netiweki, momwe amalankhulirana wina ndi mnzake, komanso ngati zida zosaloleka zilipo.

Izi zitha kukhala zothandiza makamaka pakuwunika ndi chitetezo pamanetiweki a Wi-Fi, pomwe zida zimalumikizana mwachindunji.

Momwe Sniffers amagawidwa

Monga tanenera kale, pali mitundu yosiyanasiyana ya Sniffers yomwe imayikidwa molingana ndi momwe amagwirira ntchito komanso zigawo za OSI zomwe zimagwira ntchito:

1. Layer 2 Sniffers: Ma analyzer awa amayang'ana kwambiri pa data link layer. Amajambula mafelemu ndi ma adilesi a MAC. Nthawi zambiri amagwiritsidwa ntchito kusanthula maukonde amderali (LAN).
2. Layer 3 Sniffers: Izi zimagwira ntchito pa network layer. Kujambula mapaketi a IP ndikuwunika magwero ndi ma adilesi a IP. Atha kugwiritsidwa ntchito kusanthula kuchuluka kwa magalimoto pamanetiweki akuluakulu monga intaneti.
3. Layer 4 Sniffers: Amayang'ana kwambiri gawo la mayendedwe. Amasanthula ndi kugawa mapaketi a TCP ndi UDP. Zimathandiza kumvetsetsa momwe maulumikizi amakhazikitsidwa komanso momwe magalimoto amayendera pakati pa mapulogalamu.

Kuteteza ndi chitetezo kwa Sniffers

Chitetezo kwa onunkhiza ndikofunikira kwambiri pakuteteza zinsinsi ndi chitetezo cha data pamanetiweki. Njira zina zothandiza ndi izi:

• Kubisa kwa data: Imagwiritsa ntchito ma encryption protocols monga SSL/TLS kuwonetsetsa kuti data yotumizidwa ndi yotetezedwa ndipo siyingalandidwe mosavuta.
• Kuzindikira ma firewall ndi kulowererapo: Khazikitsani ma firewall and intrusion monitoring systems (IDS) kuti muwunikire kuchuluka kwa ma network ndikuwona zochitika zokayikitsa.
• Zosintha ndi zigamba: Sungani zida zanu ndi mapulogalamu asinthidwa ndi mitundu yaposachedwa komanso zigamba zachitetezo kuti mupewe zovuta zomwe zingachitike.

Onunkhiza ndi cybersecurity

Ngakhale Sniffers ndi zida zovomerezeka komanso zothandiza pakuwunika kuchuluka kwa anthu pamanetiweki, atha kugwiritsidwanso ntchito pazinthu zoyipa, monga kuba kwa data yanu kapena mawu achinsinsi. Obera achinyengo amatha kugwiritsa ntchito zofooka pamanetiweki kuti agwiritse ntchito Sniffers kuti apeze zinsinsi kuchokera kwa ogwiritsa ntchito osazindikira.