Build a powerful internal network supervision tool by yourself (1)

BKJIA exclusive statement] this economic crisis has caused great harm to large enterprises. In addition to some domestic demand types in China, many companies have begun to make decisions in the cold winter. During this period, in order to successfully launch the award and reduce corporate compensation, we have used some of the methods we do not usually use. Everything is done for employees who make mistakes and for all employees who make mistakes. Although this article describes the monitoring solution, we hope that readers can use the following story to introduce some solutions.

As the saying goes, the sky is unpredictable. Two days ago, I played the swordsman world with Leng Yang leisurely. Over the past two days, our boss talked to me about the harmonious population. There were too many people in the company. Taking into account that the company wants me to roll it back, we should take advantage of the resources that can be used.

Although the company does not pay much attention to the network, the equipment is still very willing to invest: The network built by the three-tier H3C switch. In order to be a good person for the last time, I decided to help the boss catch a few guys who go to work and see the website in disorder, so that he could open it all in one breath and save money.

Sniffing

Next Sniffer Pro, the installation process is simple, remember to restart, do not restart can not catch packets note ①.

There must be a JAVA, do not show the dashboard information, open the http://www.java.com/zh_CN/, Red JAVA + waiting for you to come. 1.

Figure 1

After installing everything, you can work. However, this stuff can be sniffed directly in the LAN, so we have to set port image note ②.

This time I started the switch with my most expensive one. Generally, a vro has two interfaces: an external interface and an internal interface. The normal connection method is an optical cat with an external interface and a vswitch with an internal interface. But I don't need this low-level method. Why? Because the company has money and the bandwidth is MB, this is a waste. Alas, such a rich company still wants to open me.

The final method is to connect the optical cat to the vswitch, and then the two ports of the vro are also connected to the vswitch. There are two advantages: 1. You can set an Internet IP address for other hosts on the vswitch; 2. You can use the vswitch to directly limit the speed and VLAN of each port, or isolate the network.

Insert a vswitch to the Intranet entry, at port 23. Find a PC, access the vswitch, and at Port 11.

Start to configure the H3C switch. You can do it all with the mouse. No command line is required, as shown in figure 2.

Figure 2

Click port> image to set the monitoring port and Image Port.

Figure

In fact, if there is no web interface, it is easy to write with statements. Telnet to the IP address of the vswitch and start the following operations: