资源描述：
《常用的网路管理工具》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。
1、常用的網路管理工具:以桃園區網中心為例中央大學電算中心楊素秋Email:center7@cc.ncu.edu.tw報告大綱1.動機2.自動寄信(Sendmail.pm)3.IP管理資訊查詢(Rwhoisd)4.Abusecomplain的自動通告5.區網異常訊務的偵測與通告6.結語與展望1.動機持續的網路異常抱怨CopyrightInfringement(違反智慧財產權)***Spam(廣告/色情信)PortScan(弱點port掃描)Virus,mailvirus(445/TCP,139/TCP,
2、135/TCP,…)DoS攻擊(80/TCP,554/TCP)Passwordcracking22/TCP,4899/TCP1433/TCP,3306/TCPPhishing/Fraud1.動機(cont.)網路安全現況IDS/Firewall/Anti-virus逐漸普及worm(malicious)codes仍存在頻繁的updates仍無法完全保護endsystem不被virus感染Windows弱點警告仍頻繁MicroSoft約半各月後才有UpdatesVirusmail(.doc,.ppta
3、ttachfiles)非常依賴firewall&anti-virus保護userInfectPCthroughsocialengineeringVirusmail(Bagle,NetSky,…)AttachexecutionfileLureuserclickthefiletocompromiseendsystemToxicspywareP2P,IRC,…1.動機(cont.)SecurityEducationEducateusersAnomalyDetection(Technique)Basedon
4、servicelogmaillog,httplog,syslog,…BasedontrafficlogNetflowdata(router/sitchrouter)layer2packetcontent(snoopedbysnort/tcpdump)AutomaticAbuseNotification2.自動寄信(Sendmailperlmodule)Sendmail.pm的安裝安裝cd/usr/ports/mail/p5-Mail-Sendmailmakemakeinstallyang#pwd/u
5、sr/ports/mail/p5-Mail-Sendmailyang#makeftp://ftp.funet.fi/pub/languages/perl/CPAN/modules/by-module/Mail/.Mail-Sendmail-0.79.tar.gz100%of15kB21kBps===>Extractingforp5-Mail-Sendmail-0.79===>Patchingforp5-Mail-Sendmail-0.79===>p5-Mail-Sendmail-0.79depend
6、sonfile:/usr/local/bin/perl5.8.7-found===>Configuringforp5-Mail-Sendmail-0.79Checkingifyourkitiscomplete...Readthedocs,andhavefun...**********************************************************************===>Buildingforp5-Mail-Sendmail-0.79cpSendmail.pmb
7、lib/lib/Mail/Sendmail.pmManifyingblib/man3/Mail::Sendmail.3yang#makeinstall===>Installingforp5-Mail-Sendmail-0.79===>p5-Mail-Sendmail-0.79dependsonfile:/usr/local/bin/perl5.8.7-found===>Generatingtemporarypackinglist===>Checkingifmail/p5-Mail-Sendmaila
8、lreadyinstalledInstalling/usr/local/lib/perl5/site_perl/5.8.7/Mail/Sendmail.pmInstalling/usr/local/lib/perl5/5.8.7/man/man3/Mail::Sendmail.3Writing/usr/local/lib/perl5/site_perl/5.8.7/mach/auto/Mail/Sendmail/.packlist===>Compressingmanu
