桃园区网伺服主机与网路检查系统Version.pptxVIP

桃園區網:

伺服主機與網路檢查系統

(Version2.0)中央大學電算中心楊素秋2023.10

綱要1.伺服主機與網路檢查系統2.SVRCHKVer-1.0檢測系統3.SVRCHKVer-1.1檢測系統4.SVRCHKVer-2.0檢測系統5.SVRCHK程式及Datatable6.總結

1.伺服主機與網路檢查系統沿由系統與網路檢查紀錄表(ISMS認證需求)Tyrc:forISMS認證(2023)

2.SVRCHKVer-1.0檢測系統SVRCHK檢測措施檢測次數:1time/dayFileid.by$year/$month/$mday/$srv_name檢測工具Router:pingDNS:dig:wget,socket-portProxy:curlUserInterfaceJSP+Java(Tomcat)

3.SVRCHKVer-1.1檢測系統Ver-1.1檢測範圍Tyrc,Ncu_cc,Ncuad,Ncu_rdNCUComputerCenterISMS認證(2023)Ver-1.1檢測措施略同Ver-1.0伺服系統種類大幅增长Router,DNS,,MRTG流量Portal,電子表單,BlackBoard,MS-SQL,MySQLSMTP,PoP3,IMAP,Proxy,News,VMware,LDAP,DHCP,NFS帳號管理,NIS(NetworkInformationSystem)Others

3.SVRCHKVer-1.1檢測系統(cont.)檢測工具Router:pingDNS:dig:wget,Nmap(socket-port)Proxy:curl,NmapSMTP,News,pop3:expectMS_SQL,MySQL:expect,NmapDHCP:ping,NmapVMware:Nmap

3.SVRCHKVer-1.1檢測系統(cont.)檢測小撇步Servicestatuscollection時間長部分Server回應時間頗長statuscollection時間提早些檢測措施精簡(Nmap)確實(expect,wget,curl)Securityfilter(Transit繞道)問題點(transit?/target?)

#!/bin/bashRSYNC=/usr/bin/rsyncLOCALPATH=/home/yang##Susan2023-01-29::NewsTestOK!VAR=$(expect-cspawntelnet4110#send\telnet4110\r\expect+OKsend\USERcenter7\r\expect+OKsend\PASSxxxxxxxx\r\expect+OKsend\STAT\r\expect+OKsend\QUIT\r\expect-timeout1)echo$VARExample:SMTPservicedatacollectionscript

#!/bin/bashRSYNC=/usr/bin/rsyncLOCALPATH=/home/yang##Susan2023-01-29::NewsTestOK!VAR=$(expect-cexpectyes/nosend\yes\r\#expectpassword:send\“XXXXXX\r\expect\\\\\$\send\telnet140.115.X.X119\r\send\help\r\expect-timeout1)echo$VARExample:Newsservicedatacollectionscript

4.SVRCHKVer-2.0檢查系統Ver-2.0改善需求增长檢測次數早/午/晚or每小時一次統計G次數提供細部資訊查詢UserInterface伺服系統由user線上鍵入管理員認證後,自動偵測Database查詢File:$year/$month/$mday-DB

4.SVRCHKVer-2.0檢查系統(cont.)Ver-2.0檢測Tyrc,Ncu_cc,Ncuad,Ncu_rd管理自動化Dynamiccreatedbyuser/managerServerRegisteredbyuserServercon