Red Hat NETWORK 3.6 - Uživatelská příručka Strana 26
- Strana / 61
- Tabulka s obsahem
- KNIHY
Hodnocené. / 5. Na základě hodnocení zákazníků
Copyright © 2002-2012 Tenable Network Security, Inc.
26
By default, these settings are disabled and must be manually edited in the
pvs.conf file.
The PVS detects many applications through plugin and protocol analysis. At a lower level,
the PVS also detects open ports and outbound ports in use on the monitored networks. By
default, the PVS will detect any TCP server on the protected network if it sees a TCP “SYN-
ACK” packet.
In combination, the detection of server ports and client destination ports allows a network
administrator to see who on their network is serving a particular protocol and who on their
network is speaking that protocol.
DETECTING SPECIFIC SERVER AND CLIENT PORT USAGE
Another PVS configuration option provides more specific details about server and client port
usage. On Unix systems, this is the “show-connections” keyword in the pvs.conf file. This
setting keeps track of host communication within the focus network. When the “show-
connections” option is enabled, every time a host connects to another host, PVS records
the client, server, and server port, if one of the hosts is in the defined focus network. It
does not track the frequency or time stamp of the connections – just that a connection was
made.
The “show-connections” option provides a greater level of detail than the “connections-
to-services” option. For example, if your IP address is 1.1.1.1 and you use the SSH
service to connect to “some_company.com”, use of these options would record the
following:
show-connections:
1.1.1.1 some_company.com:SSH
connections-to-services
1.1.1.1 SSH
Using the “connections-to-services” option lets you know that the system at 1.1.1.1
uses the SSH protocol. This information may be useful to know regardless of where the
service is being used.
The PVS does not log a session-by-session list of communications. Instead, it logs the
relationship between the systems. For example, if system A is detected using the SSH
protocol on port 22 connecting to system B, and both systems are within the focus network,
the PVS would log:
> System A browses on port 22
> System B offers a service (listens) on port 22
> System A communicates with System B on port 22
If system B were outside of the focus network, the PVS would not record anything about the
service System B offers, and would also log that System A browses outside of the focus
network on port 22. The PVS does not log how often a connection occurs, only that it
- Linux User Guide 1
- Table of Contents 2
- Related 3 4
- INTRODUCTION 5
- PRE-INSTALLATION 6
- SOFTWARE AND LICENSING 7
- INSTALLATION AND OPERATIONS 8
- Run the Installation Script 9
- OPERATIONS 13
- The PVS Watchdog 17
- Generating a Report 17
- CONFIGURATION 18
- REMOVING PVS 24
- FOCUS NETWORK 24
- ALERTING 28
- NEW HOST ALERTING 28
- ROUTES AND HOP DISTANCE 28
- PLUGINS 30
- Plugin Keywords 31
- Plugin Libraries 34
- Case Insensitive Example 36
- Negative Matches 38
- Time Dependent Plugins 39
- Real-Time Plugin Model 40
- New Keywords 40
- FINGERPRINTS 48
- FOR FURTHER INFORMATION 49
- ARCHITECTURE 56
- MANAGING VULNERABILITIES 56
- MANAGING IDS EVENTS 56
- RELATED 3 60
Související produkty a manuály pro Servery Red Hat NETWORK 3.6 -
Servery Red Hat NETSCAPE ENTERPRISE SERVER 6.0 - PROGRAMMER GUIDE TO SERVLETS Uživatelská příručka
(328 stránky)
(328 stránky)
Servery Red Hat NETSCAPE DIRECTORY SERVER 6.2 - GATEWAY CUSTOMIZATION Instalační příručka
(142 stránky)
(142 stránky)
(32 stránky)
Servery Red Hat ENTERPRISE LINUX 5 Technické informace
(102 stránky)
(102 stránky)
Servery Red Hat NETSCAPE ENTERPRISE SERVER 6.0 - NSAPI PROGRAMMER GUIDE Uživatelská příručka
(332 stránky)
(332 stránky)
Servery Red Hat NETSCAPE ENTERPRISE SERVER 6.1 - PROGRAMMER GUIDE TO SERVLETS Instalační příručka
(72 stránky)
(72 stránky)
Servery Red Hat NETSCAPE ENTERPRISE SERVER 6.0 - PROGRAMMER GUIDE TO SERVLETS Instalační manuál
(92 stránky)
(92 stránky)
Supermicro PDSML-LN2+ podręczniki
Instrukcje obsługi i podręczniki użytkownika dla Płyty główne do serwerów / stacji roboczych Supermicro PDSML-LN2+.
Dostarczamy 1 pdf podręczników Supermicro PDSML-LN2+ do pobrania za darmo według typów dokumentów: Instrukcja Użytkownika
Komentáře k této Příručce