Umehluko omkhulu phakathi kokuthwebula amaphakethe kusetshenziswa amachweba e-Network TAP kanye ne-SPAN.
Ukulingisa Ngembobo(eyaziwa nangokuthi i-SPAN)
Ukuthepha Kwenethiwekhi(eyaziwa nangokuthi i-Replication Tap, i-Aggregation Tap, i-Active Tap, i-Copper Tap, i-Ethernet Tap, njll.)I-TAP (Indawo Yokufinyelela Yesiphetho)iyidivayisi yehadiwe engasebenzi ngokuphelele, engakwazi ukubamba ithrafikhi kunethiwekhi ngokungasebenzisi i-inthanethi. Ivame ukusetshenziswa ukuqapha ithrafikhi phakathi kwamaphuzu amabili kunethiwekhi. Uma inethiwekhi ephakathi kwala maphuzu amabili iqukethe ikhebula elingokoqobo, i-TAP yenethiwekhi ingaba yindlela engcono kakhulu yokubamba ithrafikhi.
Ngaphambi kokuchaza umehluko phakathi kwezixazululo ezimbili (i-Port Mirror kanye ne-Network Tap), kubalulekile ukuqonda ukuthi i-Ethernet isebenza kanjani. Ku-100Mbit nangaphezulu, ama-host avame ukukhuluma nge-duplex ephelele, okusho ukuthi i-host eyodwa ingathumela (i-Tx) futhi ithole (i-Rx) ngasikhathi sinye. Lokhu kusho ukuthi kukhebula le-100 Mbit elixhunywe ku-host eyodwa, inani eliphelele lethrafikhi yenethiwekhi i-host eyodwa engathumela/iyamukela (i-Tx/Rx)) lingu-2 × 100 Mbit = 200 Mbit.
I-Port mirroring iwukukopisha kwephakethe okusebenzayo, okusho ukuthi idivayisi yenethiwekhi inesibopho sangempela sokukopisha iphakethe ku-port enesibuko.
Ukuthwebula Ithrafikhi: I-TAP vs I-SPAN
Uma uqapha ithrafikhi yenethiwekhi, uma ungafuni ukusebenzisa ukwesekwa ngqo ngenkathi umsebenzisi ecubungula ukuthengiselana, unezinketho ezimbili eziyinhloko. Esihlokweni esilandelayo, sizokunikeza umbono jikelele we-TAP (Test Access Point) kanye ne-SPAN (Switch Port Analyzer). Ukuze uthole ukuhlaziywa okujulile, uchwepheshe wokuhlola amaphakethe uTimo'Neill unezihloko eziningana ku-lovemytool.com ezichaza kabanzi, kodwa lapha, sizosebenzisa indlela ejwayelekile.
I-SPAN
Ukulinganisa i-port kuyindlela yokuqapha ithrafikhi yenethiwekhi ngokudlulisela ikhophi yephakethe ngalinye elingenayo neliphumayo kusuka kwelinye noma ngaphezulu le-port (noma ama-VLan) leswishi eliya kwelinye ichweba elixhunywe ku-analyzer yethrafikhi yenethiwekhi. Ama-spans avame ukusetshenziswa ezinhlelweni ezilula ukuqapha amasayithi amaningi ngasikhathi sinye. Inani eliqondile lokudluliswa kwenethiwekhi elikwazi ukukuqapha lincike ekutheni i-SPAN ifakiwe kuphi uma kuqhathaniswa nemishini yesikhungo sedatha. Cishe uzothola lokho okufunayo, kodwa kulula ukuzithola unedatha eningi kakhulu. Isibonelo, kungenzeka ukuthola amakhophi amaningi edatha efanayo kuyo yonke i-VLAN. Lokhu kwenza ukuxazulula izinkinga ze-LAN kube nzima kakhulu, futhi kuthinta nesivinini se-switch cpus noma kuthinta i-Ethernet ngokutholwa kokubekwa. Ngokuyisisekelo, lapho ama-spans amaningi, kulapho kungenzeka khona ukuthi ulahlekelwe amaphakethe. Uma kuqhathaniswa nama-taps, ama-spans angaphathwa kude, okusho ukuthi isikhathi esincane sichithwa kushintshwa ukucushwa, kodwa onjiniyela benethiwekhi basadingeka.
Amachweba e-SPAN awawona ubuchwepheshe obungenamsebenzi, njengoba abanye besho, ngoba angaba neminye imiphumela elinganisekayo kuthrafikhi yenethiwekhi, okuhlanganisa:
- Isikhathi sokushintsha ukusebenzisana kohlaka
- Ukulahla amaphakethe ngenxa yokusesha ngokweqile
- Amaphakethe onakele ayawa ngaphandle kwesaziso, okuphazamisa ukuhlaziywa
Ngakho-ke, amachweba e-SPAN afaneleka kakhulu ezimweni lapho ukulahla amaphakethe kungaphazamisi ukuhlaziywa, noma lapho kucatshangelwa khona izindleko.
THEPHA
Ngokuphambene nalokho, ama-tap kudingeka achithe imali ku-hardware kusengaphambili, kodwa awadingi ukusethwa okuningi. Ngempela, njengoba engenzi lutho, angaxhunywa futhi anqanyulwe kunethiwekhi ngaphandle kokuyithinta. Ama-tap amadivayisi e-hardware ahlinzeka ngendlela yokufinyelela idatha egeleza ngenethiwekhi yekhompyutha futhi avame ukusetshenziselwa ukuphepha kwenethiwekhi kanye nezinjongo zokuqapha ukusebenza. Ithrafikhi eqashwe ibizwa ngokuthi ithrafikhi "edlulayo" kanti i-port esetshenziselwa ukuqapha ibizwa ngokuthi "i-monitoring port". Ukuze kuhlolwe inethiwekhi ngokucacile, ama-tap angabekwa phakathi kwama-router nama-switch.
Ngenxa yokuthi i-TAP ayithinti amaphakethe, ingabhekwa njengendlela engenzi lutho ngempela yokubuka ithrafikhi yenethiwekhi.
Kunezinhlobo ezintathu eziyisisekelo zezixazululo ze-TAP:
- Isihlukanisi senethiwekhi (1: 1)
- I-Aggregate TAP (okuningi: 1)
- I-TAP Yokuvuselela (1: okuningi)
I-TAP iphinda ithrafikhi iye kuthuluzi elilodwa lokuqapha elingasebenzi, noma kudivayisi yokudlulisa amaphakethe enethiwekhi enabantu abaningi, futhi ikhonza amathuluzi okuhlola e-QOS amaningi (ngokuvamile amaningi), amathuluzi okuqapha inethiwekhi, kanye namathuluzi okusniffer enethiwekhi njenge-wireshark.
Ngaphezu kwalokho, izinhlobo ze-TAP ziyahlukahluka kuye ngohlobo lwekhebula, okuhlanganisa i-fiber TAP kanye ne-gigabit copper TAP, zombili zisebenza ngendlela efanayo ngokulayisha ingxenye yesignali ku-network traffic analyzer, kuyilapho imodeli eyinhloko iqhubeka nokudlulisa ngaphandle kokuphazamiseka. Kwi-fiber TAP, iwukuhlukanisa ugongolo lube yizicucu ezimbili, kanti ohlelweni lwekhebula lethusi, iwukuphinda isignali kagesi.
Ukuqhathanisa i-TAP ne-SPAN
Okokuqala, i-SPAN port ayifanele isixhumanisi se-full-duplex 1G, futhi noma ingaphansi komthamo wayo omkhulu, ilahla ngokushesha amaphakethe ngoba inzima kakhulu, noma ngoba nje iswishi ibeka phambili izinsuku ezijwayelekile ze-port-to-port kunedatha ye-SPAN port. Ngokungafani nokuthinta inethiwekhi, ama-SPAN port ahlunga amaphutha wezendlalelo ezibonakalayo, okwenza ezinye izinhlobo zokuhlaziya zibe nzima kakhulu, futhi njengoba sibonile, izikhathi zokwenyuka ezingalungile kanye nozimele abashintshiwe kungabangela ezinye izinkinga. Ngakolunye uhlangothi, i-TAP ingasebenzisa isixhumanisi se-full-duplex 1G.
I-TAP ingenza futhi ukubamba amaphakethe okuphelele futhi yenze ukuhlolwa okujulile kwamaphakethe ukuze kutholakale amaphrothokholi, ukwephulwa komthetho, ukungena, njll. Ngakho-ke, idatha ye-TAP ingasetshenziswa njengobufakazi enkantolo, kanti idatha ye-SPAN port ayikwazi.
Ukuphepha kungenye isici lapho kunomehluko khona phakathi kwalezi zindlela ezimbili. Amachweba e-SPAN avame ukulungiselelwa ukuxhumana okuya ohlangothini olulodwa, kodwa angathola nokuxhumana kwezinye izimo, okubangela ubuthakathaka obukhulu. Ngokuphambene nalokho, i-TAP ayinakheli futhi ayinalo ikheli le-IP, ngakho-ke ayikwazi ukugetshengwa.
Amachweba e-SPAN ngokuvamile awadluli amathegi e-VLAN, okungenza kube nzima ukubona ukwehluleka kwe-VLAN, kodwa amachweba awakwazi ukubona yonke inethiwekhi ye-VLAN ngesikhathi esisodwa. Uma amachweba ahlanganisiwe engasetshenziswa, i-TAP ngeke inikeze umkhondo ofanayo kuzo zombili iziteshi, kodwa kufanele kuqashelwe ukutholwa kokuguga ngokweqile. Kukhona amachweba ahlanganisiwe, njenge-Booster for Profitep, ahlanganisa amachweba ayisishiyagalombili e-10/100/1G kumkhiqizo we-1G-10G.
I-Booster iyakwazi ukufaka amaphakethe ngokufaka amathegi e-VLAN. Ngale ndlela, ulwazi lwembobo yomthombo wephakethe ngalinye luzothunyelwa ku-analyzer.
Amachweba e-SPAN aseyithuluzi elizosetshenziswa abaphathi benethiwekhi, kodwa uma isivinini nokufinyelela okuthembekile kuyo yonke idatha yenethiwekhi kubalulekile, i-TAP iyona engcono kakhulu. Lapho unquma ukuthi iyiphi indlela okufanele uyithathe, amachweba e-SPAN afaneleka kakhulu kumanethiwekhi asebenzisa kancane, njengoba amaphakethe alahlekile engathinti ukuhlaziywa noma angakhethwa ezimweni lapho izindleko ziyinkinga. Kodwa-ke, kumanethiwekhi anethrafikhi ephezulu, amandla e-TAP, ukuphepha, kanye nokuthembeka kuzohlinzeka ngokubonakala okugcwele kuthrafikhi kunethiwekhi yakho ngaphandle kokwesaba ukulahleka kwephakethe noma ukuhlunga amaphutha engqimba ebonakalayo.
○ Kubonakala ngokugcwele
○ Phinda yonke ithrafikhi (wonke amaphakethe awo wonke amasayizi nezinhlobo)
○ Ayisebenzi, ayiphazamisi (ayishintshi idatha)
○ Ochungechungeni, awekho ama-switch port asetshenziswa ukuphinda ithrafikhi egcwele kabili kuma-harnesses Ukusetha okulula (xhuma bese udlala)
○ Ayisengozini yabaduni (idivayisi yokuqapha engabonakali, ehlukanisiwe kusuka kunethiwekhi, ayikho ikheli le-IP/MAC)
○ Iyakhula
○ Kufanelekela noma yisiphi isimo
○ Ukubonakala okuyingxenye
○ Ukungakopishi yonke ithrafikhi (ukwehlisa osayizi abathile nezinhlobo zamaphakethe)
○ Ukungasebenzisi isikhathi (ukushintsha isikhathi sephakethe, ukwandisa ukubambezeleka)
○ Sebenzisa i-switch port (i-SPAN port ngayinye isebenzisa i-switch port)
○ Ayikwazi ukuphatha ukuxhumana okugcwele okuphindwe kabili (amaphakethe awela phansi uma egcwele ngokweqile, angaphazamisa nokusebenza kokushintshana okuyinhloko)
○ Onjiniyela badinga ukumisa
○ Akuphephile (Uhlelo lokuqapha luyingxenye yenethiwekhi, izinkinga zokuphepha ezingaba khona)
○ Ayikwazi ukukhuliswa
○ Kungenzeka kuphela ngaphansi kwezimo ezithile
Ungase ube nesithakazelo endabeni ehlobene: Ungabamba Kanjani Ithrafikhi Yenethiwekhi? I-Network Tap vs I-Port Mirror
Isikhathi sokuthunyelwe: Juni-09-2025
