Userandlinux Morethanuser v14.03(7)

5/25/2018 Userandlinux Morethanuser v14.03(7)

1/75


2/75


3/75

User

AndLINUX

:

, !

.

,

RAID-

. , c -

MDAdm. RAID Ubuntu. , IPv4 . -

IPv6. ,

IPv6 Linux

,

. , 5 -

,

.

CYBERCRIME.

.

.

.

,


4/75

SERVERSMDAdm RAID Ubuntu............................................................. 5

IPv6 Linux........................................................................ 7

5 ................................ 11 SOHO- Zentyal.................................................... 15

IP-....................................................... 28

WORKSTATION ................................................................. 33

Canon............................................ 35

CONSOLE Linux..........36

Linux. ................................ 38

PROGRAMMING ..................................... 42

SECURITY RSA- ........................................ 48

OTHERS OpenSource ................................................................................. 51

...................................................................................................... 57

WiFi-........................................................................61

CYBERCRIMELinux-, ................................................................64

............................................65

: ....................................67


5/75

USER v14.03(7)ualinux.com 5

User

AndLINUX s e rvers

MDAdm

RAID Ubuntu

RAID

RAID1.

sdb sdc

#fdisk /dev/sdbcommand (m for help):nPartition type:p primary (0 primary, 0 extended,4 free)e extendedSelect (default p): pPartition number (1-4, default1): 1First sector (2048-16777215,default 2048):Using default value 2048

Last sector, +sectors or+size{K,M,G} (2048-16777215,default 16777215): +5GCommand (m for help): tHex code (type L to list codes):83Changed system type of partition1 to 83Command (m for help): wThe partition table has beenaltered!Calling ioctl() to re-readpartition table.Syncing disks.

sdc

RAID# apt-get install mdadm

RAID 1# mdadm --create --verbose /dev/md0 --level=1 --raid-devices=2 /

dev/sdb1 /dev/sdc1

RAID

# cat /proc/mdstat

-

- personalities : [raid1]

md0 : active raid1 sdc1[1]sdb1[0]5238720 blocks super 1.2 [2/2][UU]unused devices:

RAID-

.

# mkfs.ext4 /dev/md0# mkdir /mnt/raid# mount /dev/md0 /mnt/raid

RAID.

,

.


6/75


User

AndLINUX s e rvers

-

RAID- :# touch /mnt/raid/test.txt

RAID

, RAID

/dev/

md0,

,

/dev/md127. -

, , -

, ,

RAID- /dev/md0

. :# mdadm -Db /dev/md0 > /etc/mdadm/mdadm.conf

- /etc/mdadm/mdadm.conf

:ARRAY /dev/md0 metadata=1.2name=ub-4:0 UUID=7da67e34:3d29e3a1:bdf36edd:6be26e60

initramfs:

# update-initramfs -u

RAID-

/dev/md0.

RAID

-

. , -

-

, -

mdadm

RAID /dev/sdb1 .

# mdadm /dev/md0 --fail /dev/sdb1

RAID# cat /proc/mdstat

, /dev/sdb1

:Personalities : [linear][multipath] [raid0] [raid1][raid6] [raid5] [raid4] [raid10]

md0 : active raid1 sdb1[2](F)sdc1[1]5238720 blocks super 1.2 [2/1][_U]unused devices:

fdisk

/dev/sdd -

, /dev/sd1.

/dev/sdb1 RAID# mdadm /dev/md0 --remove /dev/sdb1

/dev/sdd1# mdadm /dev/md0 --add /dev/sdd1

-

RAID

# cat /proc/mdstat

, RAID -

-

:Personalities : [linear][multipath] [raid0] [raid1][raid6] [raid5] [raid4] [raid10]md0 : active raid1 sdd1[2]sdc1[1]

5238720 blocks super 1.2 [2/1][_U][=>...................] recovery= 6.2% (329984/5238720)


7/75


User

AndLINUX s e rvers

nish=1.2min speed=65996K/secunused devices:

RAID# mount /dev/md0 /mnt/raid/

, ,

.# ls /mnt/raid/lost+found test.txt

:

yakim.org.ua

IPv6 Linux

IPv4, -

,

IP . ,

2.1, -

IPv6, . ,

ping6, ip ifconfig. -

: IP,

IP-. IP Internet Protocol,

IP-.

,

.

IPv6

, IPv6 -

? , -

IPv4-,

:

;

NAT -

, ;

;

DHCP.

IPv6 -

-

. IPv4,

, -

, - .

IPv6?

, IPv6

Linux?

:$ cat /proc/net/if_inet6000000000000000000000000000000 01

01 80 10 80 lofe80000000000000020b6afffeef7e 8d02 40 20 80 eth0

-

, -

, IPv6

. ,

Linux-

IPv6 . IPv6

IPv6-

,
http://yakim.org.ua/http://yakim.org.ua/


8/75


User

AndLINUX s e rvers

ping6.

localhost:$ ping6 -c2 ::1PING ::1(::1) 56 data bytes64 bytes from ::1: icmp_seq=1ttl=64 time=0.043 ms64 bytes from ::1: icmp_seq=2ttl=64 time=0.054 ms--- ::1 ping statistics ---2 packets transmitted, 2received, 0% packet loss, time999msrtt min/avg/max/mdev =0.043/0.048/0.054/0.008 ms

::1 0000:0000:0000

:0000:0000:0000:0000:0001. -

, -

, ,

.

0.0.0.0.0.0.0.1.

, -

, IPv6? !

$ ping6 -c4 -I eth0 ff02::1PING FF02:0:0:0:0:0:0:1(ff02::1)from fe80::20d:b9ff:fe05:25b4

eth0: 56 data bytes64 bytes fromfe80::20d:b9ff:fe05:25b4: icmp_seq=1 ttl=64 time=0.301 ms64 bytes fromfe80::20b:6aff:feef:7e8d: icmp_seq=1 ttl=64 time=3.69 ms (DUP!)[snip duplicate lines]-- FF02:0:0:0:0:0:0:1 pingstatistics ---4 packets transmitted, 4received, +6 duplicates, 0%packet loss, time 3000msrtt min/avg/max/mdev =0.254/1.698/8.911/2.593 ms

ping6 , : fe80::20b:6aff:feef:7e8d

fe80::221:97ff:feed:ef01. -

,

ping6,

-.

ff02::1 -

ff02:0:0:0:0:0:0:1, -

-, -

link-local .

link-local -

fe80::/10, -

169.254.0.0/16 IPv4.

-

,

, -

. IPv6

,

link-local ,

.

,

IPv6, -

- (neighbor table) IPv6 ( -

ARP-). neighbor table

ip:

$ ip -6 neigh showfe80::221:97ff:feed:ef01 deveth0 lladdr 00:21:97:ed:ef:01 nud

reachablefe80::20b:6aff:feef:7e8d deveth0 lladdr 00:0b:6a:ef:7e:8d nudreachable


9/75


User

AndLINUX s e rvers

nud reachable -

network unreachability detection - reachable,

.

neighbor table -

.

-

IP-, -

/etc/hosts.

,

, -

fatfreddy, phineas, franklin.

/etc/hosts:fe80::20b:6aff:feef:7e8dfatfreddy

fe80::221:97ff:feed:ef01 phineasfe80::3f1:4baf:a7dd:ba4ffranklin

:$ ping6 -I eth0 phineasPING phineas(phineas) fromfe80::221:97ff:feed:ef01 eth0: 56data bytes64 bytes from phineas: icmp_seq=1

ttl=64 time=17.3 ms

SSH SCP

SSH SCP c IPv6. -

,

,

-

, !

IPv6-, . -

:

$ ssh user@remotehost

:$ scp lename user@remotehost:/home/username/directory/

IPv6-

.

SSH-:$ ssh phineas@fe80::221:97ff:feed:ef01%eth0

, link-

local , -

. , -

. scp

:$ scp test.txt phineas@\fe80::221:97ff:feed:ef01%eth0\]:phineas@fe80::221:97ff:feed:ef01%eth0'spassword:test.txt 100% 19 0.0KB/s00:00

IPv6- -

, -

, .

IPv6-?

ifconfig -a -

,

: -

, . -

grep,

IPv6-

:


10/75


User

AndLINUX s e rvers

$ ifcong eth0 | grep 'inet6

addr:'inet6 addr:fe80::20d:b9ff:fe05:25b4/64Scope:Link

,

, ,

IPv6 ? ,

IPv6 ,

- IPv6-. -

. IPv6-

2004

,

IPv6 ,

. , 2012-

- 2004-. -

, IPv6-

over-IPv4 tunnel broker- (, ,

2004-!),

SixXS Hurricane Electric.

8 2011

IPv6

Google, Comcast, Facebook,

Yahoo!, Akamai Limelight Networks, -

IPv6 24 .

,

test-ipv6.com. ,

IPv4,

IPv6.

,

2000::/3. - -

-

:# ip -6 addr add 2001::1/64 deveth0

, :$ ifcong eth0 |grep "inet6addr:"inet6 addr: 2001::1/64Scope:Globalinet6 addr:fe80::20b:6aff:feef:7e8d/64Scope:Link

ip:# ip -6 addr del 2001::1/64 dev

eth0

, 256

, -

-

.

, -

. , -

IPv6.

:

gnu.su
http://gnu.su/news.php?extend.1511http://gnu.su/news.php?extend.1511


11/75


User

AndLINUX s e rvers

-? Munin, Zabbix, Nagios, New Relic

.

() -

? Loggly, Airbrake, Graylog -

-

,

: , -

-

. , ,

, .

?$ w

$ last

, -

,

. .

?

$ history

, . -

: , -

,

.

- HISTTIMEFORMAT,

, -

.

5

,

,

-

-, (

CNN the World Bank). ,

-

.

-

; -

,

. ,

, -

.

.

, -

:

-

? ? ?

?

?

(,

)?

(, , )?

-

(-

, , )?

-

( )?


12/75


User

AndLINUX s e rvers

,

,

?$ pstree -a$ ps aux

ps aux e, ,

-

, pstree -a

-, .

$ netstat -ntlp$ netstat -nulp$ netstat -nxlp

, -

-. , netstat -nalp -

-n (IP-,

, ).

-

. -

-

. PID

ps

aux. -, -

Java

Erlang .

, ,

-

,

. -

,

, -

.

$ free -m$ uptime$ top$ htop

-

:

?

?

? ? -

- ?

?

-

(load average)?

$ lspci

$ dmidecode$ ethtool

, -

-

, :

RAID- (

?),

-

. -

.

-

?

? 10MBps?

-?

-$ iostat -kx 2

$ vmstat 2 10$ mpstat 2 10$ dstat --top-io --top-bio


13/75


User

AndLINUX s e rvers

.

:

?

(si/so)?

: -

? -

?

(VM)? dstat.

-

-?

MySQL ?

- PHP-?

$ mount$ cat /etc/fstab$ vgs$ pvs$ lvs$ df -h$ lsof +D / /* , */

-

? , -

? (MySQL

?)

:

noatime? default? - -

?

?

, - -

?

-

, ?

, $ sysctl -a | grep ...$ cat /proc/interrupts$ cat /proc/net/ip_conntrack /* */$ netstat$ ss -s

-

? -

- ,

RAID-, ?

swappinness

? 60

, . -, -

, /

,

.

conntrack_max ?

TCP-

(TIME_WAIT, )? netstat -

-

, ss -s,

.

$ dmesg

$ less /var/log/messages$ less /var/log/secure$ less /var/log/auth


14/75


User

AndLINUX s e rvers

. -

conntrack?

?

-

-

?

cron$ ls /etc/cron* + cat$ for user in $(cat /etc/passwd| cut -f1 -d:); do crontab -l -u$user; done

,

?

-

cron, - ?

- -

, -

?

,

,

. , - ,

LAMP-:

Apache & Nginx;

, 5xx, -

limit_zone.

MySQL;

mysql.log, ,

innodb.

, . PHP-FPM; php-

slow,

(php, mysql, memcache, ).

, .

Varnish; hit/miss

varnishlog varnishstat.

,

, varnish? HA-Proxy; ?

-

? -

-

?

(-

), -

-

:

.

--

/ / -

( ,

, ).

: - , -

apache, ..

-

. ,

, , -

.

:linux.profiua.com
http://www.linux.profiua.com/2014/02/04/%D0%BF%D0%B5%D1%80%D0%B2%D1%8B%D0%B5-5-%D0%BC%D0%B8%D0%BD%D1%83%D1%82-%D1%83%D1%81%D1%82%D1%80%D0%B0%D0%BD%D0%B5%D0%BD%D0%B8%D1%8F-%D0%BD%D0%B5%D0%BF%D0%BE%D0%BB%D0%B0%D0%B4%D0%BE%D0%BA-%D0%BD%D0%B0/http://www.linux.profiua.com/2014/02/04/%D0%BF%D0%B5%D1%80%D0%B2%D1%8B%D0%B5-5-%D0%BC%D0%B8%D0%BD%D1%83%D1%82-%D1%83%D1%81%D1%82%D1%80%D0%B0%D0%BD%D0%B5%D0%BD%D0%B8%D1%8F-%D0%BD%D0%B5%D0%BF%D0%BE%D0%BB%D0%B0%D0%B4%D0%BE%D0%BA-%D0%BD%D0%B0/


15/75


User

AndLINUX s e rvers

SOHO- Zentyal

1

- . Linux

( )

, -

, .

,

,

-

. , -

, -

.

? -

-

. - .

, ,

,

- -

Linux ( -

, ),

, Webmin

- .

- -

Zentyal. -

.

-,

- -

(-

, , DHCP, ).

-, Ubuntu, -

,

. - -

Zentyal Ubuntu PPA-.

, ClearOS.

, -

.

-

-

, -

, .

Zentyal -

, -

, :

Pentium 4, RAM, -

80

( ). -

.

,


16/75


User

AndLINUX s e rvers

-

. , , ,

, , - -

. , - Wi-Fi, ,

-

()

,

-

, -

.

. -

RAID,

, , .

-

, , ,

. , - -

(, torrent

) USB-

.

.

Zentyal

, - ISO- - . ISO

. -

Zentyal

-

,

Subscribe .

BIOS

CD-, .

,

.

(delete all disk) Enter.


17/75


User

AndLINUX s e rvers

. -

.

,

. -

, . eth0

-

, eth1 .


18/75


User

AndLINUX s e rvers

-

,

.

, -

.

-

.

-

,

. BIOS

.

Zentyal

-,

.

https://ip_/.


19/75


User

AndLINUX s e rvers

-

, . -

-

( Gateway)

.

> Zentyal.

-, .

,

SAMBA ( )

-

. -

. ,

-

, -

.

-

()

-

, .

, - .

-

. ,

.

-

DHCP VLAN


20/75


User

AndLINUX s e rvers

(802.1q) ADSL (PPPOE). , -

PPTP/

L2TP ,

,

.

-

( 500 ),

-

, IP

DMZ .

-

IP- .

> .

NTP, DNS,

DDNS DHCP. , ,

. -

DNS-,

.

-

NTP- -

> /. ,

-

.


21/75


User

AndLINUX s e rvers

-

Zentyal. -

(,

, NAS ).

(),

IP-

. -

MAC-.

Zentyal -

.

-

, (-

, 21 FTP- Zentyal).

/

. -

,

.


22/75


User

AndLINUX s e rvers

DHCP

-

, . -

IP-,

, -

. DHCP

.

wire,

IP- MAC-. , -

, -

IP- -

MAC-.

Firewall

. , ,

,

Zentyal.

() .


23/75


User

AndLINUX s e rvers

- Zentyal ,

Zentyal.

-

Gateway > Trac Shaping.,

.

-

-

. -

L7. Application Protocols

.

-

, -

. , ,

-

. - QoS

.


24/75


User

AndLINUX s e rvers

-

(, ADSL-, -

),

.

>

, PPPOE DHCP .

, -

.

,

.

-

( 1), -

, . -

, -

, -

.

.


25/75


User

AndLINUX s e rvers

,

. -

Zentyal.

-

WAN, .

,

,

. -

-

-

RSS

Jabber.

-

,

.

, -

WAN ,

.

-

-

, -

, HTTP- DNS.

.

,

-

, -

()().


26/75


User

AndLINUX s e rvers

-

Zentyal,

.

, -

( )

. -

VPN- . - -

. > ServerSubscription - . , , - ,

( , , - ).

> Import/Export

Configuration -

. -

.

-

Zentyal. , ,

, -, , -

,

.


27/75


User

AndLINUX s e rvers

, ,

, -

, -

,

.

, -.

(User Console)

:sudo apt-get update && sudo apt-get upgrade

-

.

, , . -

, -

, -

.

3dnews.ru
http://www.3dnews.ru/614703http://www.3dnews.ru/614703


28/75


User

AndLINUX s e rvers

IP-

-

.

.

.

:

IP- hikvision 2CD7133E, -

RTSP -

, h264, mpeg, mjpeg;

Ubuntu.

-

Wowza Stream Server.

, --. java, java-

.

:sudo dpkg -i ~/WowzaMediaServer-2.2.4.deb

:sudo mkdir -p /usr/local/

WowzaMediaServer/conf/live

cp -v /usr/local/WowzaMediaServer/conf/Application.xml /usr/local/WowzaMediaServer/conf/live/

:

Streams/StreamType

: live

HTTPStreamers

: cupertinostreaming,

smoothstreaming, sanjosestreaming

Streams/

LiveStreamPacketizers :

cupertinostreamingpacketizer,

smoothstreamingpacketizer,

sanjosestreamingpacketizer

RTP/Authentication/

PlayMethod : none

-

MediaCaster/Properties:

forceInterleaved

true

Boolean

, - /usr/local/WowzaMediaServer/

content/camera.stream

RTSP/RTP URL , -

camera1.stream, camera2.

stream . .

-

, /usr/local/WowzaMediaServer/conf/admin.password

username ( )

password (), -

-

.

Wowza Media Server 2

-

: http://ip.ad.re.ss:8086/

streammanager admin

username password, -

admin.password


29/75


User

AndLINUX s e rvers

[start-receiving-

stream] live applicationfolder

MediaCaster Type: rtp

camera.stream Stream

Name

OK

.

.

DocumentRoot -

flowplayer owplayer.

start.html, index.html, index1.html, flash.

html, flash1.html, html5.html, html51.html.

start.html:

index.html:

var br = navigator.userAgent.toLowerCase().indexOf("safari");var br1 = navigator.userAgent.toLowerCase().indexOf("chrome");if (br != -1 && br1 == -1){location='html5.html';}else{location='ash.html';}

flash.html:


30/75


User

AndLINUX s e rvers

var output = '';document.write(output);owplayer("player", "owplayer-3.2.7.swf",{clip: {url: 'camera.stream',

live: true,provider: 'rtmp'},plugins: {rtmp: {url: '../owplayer.rtmp-3.2.3.swf',netConnectionUrl: 'rtmp://ip.ad.re.ss:1935/live'}

}});

html5.html:var output = '';output += '';output += '';

document.write(output);

index1.html, flash1.html, html51.html index.html, flash.html,

html5.html : -

camera.stream,

- camera1.stream.

, -

-

flash

html5. -

7%.

-

iPad. Safari -

flash, html5 -

.

motion,

-

, -

. -

Jpeg.

motion:apt-get install motion

. -

/etc/motion/motion.conf

:daemon onquiet onwidth 640height 480framerate 10quality 20auto_brightness offthreshold 4500noise_level 64brightness 0contrast 0


31/75


User

AndLINUX s e rvers

saturation 0hue 0ffmpeg_cap_new offtarget_dir /var/lib/motion/snapshotswebcam_localhost off# - webcam_quality 20webcam_maxrate 10output_all offoutput_motion off

output_normal offthread /etc/motion/thread2.confthread /etc/motion/thread1.conf

/etc/motion/thread1.conf

html

, -

:netcam_url http://ip.ad.

re.ss:port/streaming/channels/1/previewwebcam_port 10000

:netcam_url http://ip.ad.re.ss:port/streaming/channels/1/previewwebcam_port 10001

index.html, 251.html,

252,html:

index.html:

251.html:var BaseURL = "http://ip.ad.re.ss:10001/";var File = "stream.mjpg";theDate = new Date();output = '';setInterval(document.write(output),80);

252.html 251.html

.

mjpeg

. firefox .

ylsoftware.com
http://www.ylsoftware.com/news/664http://www.ylsoftware.com/news/664


32/75


33/75


User

AndLINUX w o rkstation

Linux Mint. ,

-

, 19- ,

1024 768 1440 900.

. , -

.

Xorg.conf, -

xrandr.

, Xorg.

conf , -

. !

, 100%.

! :xrandr

, -

.

,

, .

:Screen 0: minimum 8 x 8, current

1280 x 1024, maximum 16384 x16384DVI-I-0 disconnected (normal leftinverted right x axis y axis)VGA-0 connected 12801024+0+0(normal left inverted right x

axis y axis) 338mm x 270mm12801024 60.0*+ 75.01280960 60.01152864 75.01024768 75.0 70.1 60.0800600 75.0 72.2 60.3 56.2640480 75.0 72.8 59.9DVI-I-1 disconnected (normal leftinverted right x axis y axis)HDMI-0 disconnected (normal leftinverted right x axis y axis)

,

VGA -

(VGA-0),

: DVI-I-1 HDMI-0.

19-,

1440

900. -

. :cvt 1440 900 60


34/75


User


:

# 1440900 59.89 Hz (CVT 1.30MA)hsync: 55.93 kHz; pclk: 106.50MHzModeline 1440x900_60.00 106.501440 1528 1672 1904 900 903 909934 -hsync +vsync

, -

, -

,

:xrandr --newmode "1440x900_60.00"106.50 1440 1528 1672 1904 900903 909 934 -hsync +vsync

:xrandr --addmode VGA11440x900_60.00

:xrandr --output VGA1--mode 1440x900_60.00

-

,

. ,

,

, -

. , ,

( )

-

.

.

Gedit, ,

:

#!/bin/sh

xrandr --newmode "1440x900_60.00"106.50 1440 1528 1672 1904 900903 909 934 -hsync +vsyncxrandr --addmode VGA11440x900_60.00xrandr --output VGA1 --mode1440x900_60.00

,

Display.sh . ,

, - .sh.

.

> > > ( -

) >

.

. , -

!

softhelp.org.ua
http://softhelp.org.ua/?p=4430http://softhelp.org.ua/?p=4430


35/75


User


Canon

-

Canon,

PIXUS, MX, MP, IP MG Ubuntu 14.04/13.10/13.04/12.10/12.04, Linux

Mint 16/15/14/13.

Canon

, ,

.

Canon PIXUS 550

Canon PIXUS 560

Canon PIXUS 850

Canon PIXUS 860

Canon PIXUS 865

Canon PIXUS 950Canon PIXUS 990

Canon MX320

Canon MX330

Canon MX350

Canon MX360

Canon MX410

Canon MX420

Canon MX420

Canon MX860

Canon MX870

Canon MX880

Canon MP140

Canon MP160

Canon MP190

Canon MP210

Canon MP240

Canon MP490Canon MP500

Canon MP510

Canon MP520

Canon MP540

Canon MP550

Canon MP560

Canon MP600

Canon MP610

Canon MP630

Canon iP100

Canon iP1800

Canon iP1000

Canon iP1500

Canon iP1900

Canon iP2200

Canon iP2500

Canon iP2600

Canon iP2700

Canon iP3300Canon iP3500

Canon iP3600

Canon iP4200

Canon iP4500

Canon iP4700

Canon iP4800

Canon iP5200

Canon iP6600

Canon iP7500

Canon MG5100

Canon MG5200

Canon MG6100

Canon MG8100

-

:sudo add-apt-repositoryppa:michael-gruz/canon-trunksudo apt-get update

-

.

:sudo apt-get install cnijlter-ip100series

:sudo apt-get install cnijlter-mp140series

:sudo apt-get install cnijlter-mx320series

. !

softhelp.org.ua
http://softhelp.org.ua/?p=4911http://softhelp.org.ua/?p=4911


36/75


User

AndLINUX c o nsole

Linux

,

,

.

-

,

.

.zip,

,

, .zip.

- , Linux,

, .

Tar gzip

, -

,

Linux ,

tar. Tape

Archive ( ), , -

.

tar

, , ,

.

tar (

tar tarball) -

.tar,

tar -

.tgz (, tar

GNU zip). -

tar

,

bzip2, zip, LZW LZMA.

tarball

, , -

:tar cvf someles.tar *

c create (), v -

verbose (,

tar ,

), f

, ,

somefiles.tar. * ,

-

Linux, .

somefiles.tar

. -

gzip, zip, compress bzip2.

:gzip someles.tar

gzip

.gz. -

somefiles.tar -

somefiles.tar.gz.

, -

,

- tar, :tar cvzf someles.tgz *


37/75


User

AndLINUX c o nsole

gzip ( tarball), - somefiles.tgz. -

z tar,

tarball.

z -

j, J Z, -

tar

bzip2, xz LZW. -

xz -

LZMA2,

,

Windows 7-Zip.

7-Zip

7zr -

,

7-Zip. .7z,

:7zr a someles.7z *

a add (),

. . -

somefiles.7z. -

Windows -

- . Linux -

7zr

, -

7-zip

/ . 7zr

-

tarball ( -

).

Unix :tar cvf - * | 7zr a -si someles.tar.7z

f -

tar ,

Unix stdout, . -

, -

tar -

7zr,

, -si. -

7zr

somefiles.tar, tarball, , ,

. -

,

-

tarball,

7zr:tar -cvf someles.tar *7zr a someles.tar.7z someles.

tar

-

-

;

, .

tarball,

:tar xvf someles.tar

x eXtract

().

tarball,

:tar xvzf someles.tgz

z tar ,

gzip.


38/75


User

AndLINUX c o nsole

z -

, ,

j, J Z.

7-Zip,

:7zr e someles.tar.7z

Linux -

. -

zip xz; , -

. -

,

man, , man xz.

rus-linux.net

Linux.

Linux?

, Linux. C:\\ D:\\ .

Linux,

. -

.

-

. :

"/" -

, -.

/home -

, , -

,

. -

- /home/

__. /mnt /media -

, -

, -

.

Ubuntu /media

, ,

-

. -

.

.

1
http://rus-linux.net/MyLDP/consol/depthlook.htmlhttp://rus-linux.net/MyLDP/consol/depthlook.html


39/75


User

AndLINUX c o nsole

cd ~

cd - , -

-

"ls". ls,

:

ls -F

-

,

ls -l -

-

ls -a -

! cd,

, "TAB", -

. ,

, -

. "TAB",

,

,

.

"cd",

. , - - . -

ls, ,

Ubuntu.

:

~ () -

. -

,

: pwd. -

.

-

"cd". -

cd, , .

:

/home cd /home. ,

cd:

cd ..

cd ../..


40/75


User

AndLINUX c o nsole

30 ,

- "TAB" .

,

,

-

"mkdir":

mkdir dir1 -

'dir1'

mkdir dir1 dir2

mkdir -p /dir1/dir2 -

"rmdir":

-

"rm". , -

:

rm file1 'file1' "rm"

, :

rm -r dir1

'dir1'

rm -r dir1 dir2

-f,

, -

, :rm -f le1rm -rf dir1

-

-

mv:

, ,

:

mv _ _

:


41/75


User

AndLINUX c o nsole

mv _ /

. - "cp":

cp file1 file2 file1 -

file2

cp -a dir1/ dir2/ - -

dir1 dir2cp file1 dir1/-

file1 c dir1

-

Linux.

! -

,

,

--help

: rm --help

linuxrussia.com
http://www.linuxrussia.com/2013/08/terminal-linux-1.htmlhttp://www.linuxrussia.com/2013/08/terminal-linux-1.html


42/75


User

AndLINUX p r ogramming

. ,

-

, -

. -

, !

-

,

- .

-

, ,

(). ,, , .

, .

-

xor .

:

0 ^ 0 = 0; 0 ^ 1 = 1; 1 ^ 0 = 1; 1 ^ 1 = 0

xor /C++ -

^. C

.

xor -

.

A = B ^ C, A, B,

C ,

B = A ^ C.

-. -

. ,

-

. -

^

-

. ,

, -

. , -

zyx :

^^^^^^^^^^^^^

zyxzyxzyxzyxz

xor, -

: -

.

- .xef.

-

-

. -

,

.

.

.

. xor_encoding.c -

:


43/75


User


#include // printf, getchar #include // strcmpi, strcpy, strcat, strlen, strrchr

#include // clock

// strcmpi.

// strcmpi , strcmp:

#ifndef strcmpi

#define strcmpi strcmp

#endif

// strcmpi strcmp , strcmpi

// .

// , , .

#define BUFER_SIZE 32768 // 32

// /:

const char password[] = "vqx2ef9kjr34p56-fw6t5u2fr5tej%f142z";

int main(int argc, char* argv[]) {

// :

unsigned char bufer[BUFER_SIZE]; FILE *f_in, *f_out;

unsigned int i; int pc, last_pc = -1, is_encoding;

unsigned long processed_bytes = 0, file_size; size_t n;

char szOutFileName[512], szOriginalExt[256];

const char *p = &password[0]; char *pDot; unsigned char orig_ext_len; clock_t start_time, end_time;

// p .

if (argc < 2) { //

printf("Input file was not specified.\n");

return 1; //

}

// argv[1] : .

// 2- fopen : r ;


44/75


User


// w ; b .

// : f_in = fopen(argv[1], "rb");

if (f_in == NULL) { //

printf("Cannot open input file \"%s\".\n",

argv[1]);

return 2; //

}

// file_size : fseek(f_in, 0, SEEK_END); //

file_size = ftell(f_in); // ftel

fseek(f_in, 0, SEEK_SET); //

// :

printf("Input file size: %lu bytes.\n", file_size);

// :

printf("Input file: \"%s\".\n", argv[1]);

// szOutFileName :

strcpy(szOutFileName, argv[1]);

// - szOutFileName:

pDot = strrchr(szOutFileName, '.');

// xef:

if ( pDot && (strcmpi(pDot, ".xef") == 0) ) { is_encoding = 0; //

*pDot = '\0'; // .xef

// :

orig_ext_len = fgetc(f_in);

if (orig_ext_len) { //

// szOriginalExt:

fgets(szOriginalExt, orig_ext_len + 1, f_in); // :

strcat(szOutFileName, ".");


45/75


User


strcat(szOutFileName, szOriginalExt);

} processed_bytes = (1 + orig_ext_len);

} else { // ,

is_encoding = 1;

if (pDot) { //

// :

strcpy(szOriginalExt, pDot + 1);

// :

*pDot = '\0';

} else //

szOriginalExt[0] = '\0'; //

// .xef - :

strcat(szOutFileName, ".xef");

}

// :

printf("Output le: \"%s\".\n", szOutFileName);

// : :

printf("\t%s...\n", is_encoding ? "Encoding" : "Decoding");

// : :

// :

f_out = fopen(szOutFileName, "rb"); if (f_out) { // ,

fclose(f_in); //

fclose(f_out); //

// :

printf("Output le \"%s\" already exists.\nPress enter to exit.\n",

szOutFileName);

getchar(); // enter

return 3; //

} // if (f_out)


46/75


User


// :

f_out = fopen(szOutFileName, "wb"); if (f_out == NULL) { //

fclose(f_in); //

printf("Cannot open output file \"%s\" for writing.\n",

szOutFileName);

return 4; //

}

if (is_encoding) { // // 1- f_out :

fputc( (unsigned char)strlen(szOriginalExt), f_out );

fputs(szOriginalExt, f_out); //

}

start_time = clock(); //

for (;;) { // for break

// n - .

// f_in

// BUFER_SIZE bufer:

n = fread(bufer, sizeof(char), BUFER_SIZE, f_in);

// , for (;;):

if (n == 0) break;

// bufer ( -):

for (i = 0; i < n; i++) {

// ^ bufer[i] :

bufer[i] = ( bufer[i] (unsigned char)*p );

// :

p++;

// p , :

if ((*p) == '\0') p = &password[0];

} // for (i = 0; i < n; i++)

// ( )


47/75


User


f_out:

fwrite(bufer, sizeof(char), n, f_out);

processed_bytes += n; //

// pc :

pc = (int)

( ((double)processed_bytes) / ((double)file_size) * 100.0 );

if (pc != last_pc) { //

// :

printf("Processed bytes: %lu ( %d %% )\r", processed_bytes, pc);

last_pc = pc; //

} // if

} // for (;;)

end_time = clock(); //

// :

printf("\nDone. Elapsed time: %f seconds\nPress enter to exit.\n", ( (oat)(end_time - start_time) ) / (oat)CLOCKS_PER_SEC);

fclose(f_in); //

fclose(f_out); //

getchar();

return 0;

} // main

clock -

( ) -

.

,

CLOCKS_PER_SEC.

- -

.

.

.

[email protected]


48/75


User

AndLINUX s e curity

RSA-

GnuPG 1.4.16 (GNU Privacy Guard) -

-

(CVE-2013-4576),

- RSA-

,

-

. GnuPG 2.0

.

, -

-

( ),

-

,

CPU.

, RSA-

. -

,

10KHz,

.

-

,

.

.

( 30

) -,

.

-

-

, -

,

, -

. C

,

, -

-

, .

-

(

-

RSA-). - 4096- RSA-, -

, .


49/75


User

AndLINUX s e curity

-

-

-,

.

,

. , -

-

,

- (

VGA, USB

Ethernet

).

opennet.ru
http://www.opennet.ru/opennews/art.shtml?num=38689http://www.opennet.ru/opennews/art.shtml?num=38689


50/75


51/75


User

AndLINUX s e rvers


User

AndLINUX o t her

OpenSource

- .

, -

, ,

.

-

,

.

Apache OpenMeetings

-

-

,

: ,

, , : -

(),

: - , -

: , ,

. -

,

.

- Apache

OpenMeetings

-

, -

-

.

,

Google Code ( EclipsePublic License). -

Apache, -

, , Apache

License 2.0. -

2.0 2012 .

, -

-

- -

Flash.

AVI/FLV , -

20 -

.

, -

,

. - .

:

16 ,

- ;

200 , -

/.

-

-

( Jabber

).


52/75


User

AndLINUX s e rvers


User

AndLINUX o t her

. , -

, , -

,

. -

(-

iCal). -

(+, ,

), . - -

, , -

, .

OpenMeetings

VoIP

Asterisk,

Moodle, Drupal, Joomla, SugarCRM -

.

Openmeetings

, -

. -

LDAP/ Active Directory (

$RED5_HOME/webapps/openmeetings/

conf

). - OpenMeeting

, -

.

Openmeetings

,

. -

(LanguageEditor)

-

. .

Openmeetings -

Java XML. -

: -

Apache Tomcat, Open Source Flash/RTMP

Server Red5, OpenOce.org/LibreOce.

-

MySQL, PostgreSQL, Oracle,

DB2 Apache Derby.

-

http ( 5080), rtmp ( 1935),

rtmpt ( 8088). -

-

.

, -

*nix Windows. - Openmeetings

,

, -

.

,

, -

1 CPU 1 .

, -


53/75


User

AndLINUX s e rvers


User

AndLINUX o t her

, .

2x/4x 2 (32/64 ) 4 .

100

Pentium 4 2 .

Openmeetings

?

- -

.

. ,

QoS , -

. -

. ,

Apache OpenMeetings -

256 /.

, -

160 /. -

(N ):

(256 N) /; ((256 N (N 1)) /.

:

(256 (N 1)) /;

256 /.

BBB 30-

50 /. -

BBB FAQ goo.

gl/Pii7Y. Skype -

- 4 / ()

512/ ().

BigBlueButton

BigBlueButton

(bigbluebutton.org) 2007

. , (Carleton

University),

.

Blindside, -

BigBlueButton,

.

BBB - ,

OpenMeetings. -

,

, -

.

. BBB -

, -


54/75


User

AndLINUX s e rvers


User

AndLINUX o t her

. 2009

BlindsideNetworks -

.

2010

Google Summer of Code.

API,

, -

BBB Sakai, WordPress, Moodle,

Joomla, Redmine, Drupal, Matterhorn, LAMS . -

BBB,

: -

,

, .

-

-

BigBlueButton -

.

,

. , 0.8

Bailetti 4 3 RC.

-- -

WebFWD (Web Forward),

Mozilla.

BigBlueButton -

- -

, (

Java- BigBlueButton),

(, ) (-

HTML 5, FF

Chrome),

-

,

PDF (

, OpenOce.

org/LibreOce),

. -

.

-

-

Adobe Flash,

, -

Windows, *nix Mac OS X.

Android.

: ( -

-

) .

,

. -

, ( -

) .

BigBlueButton


55/75


User

AndLINUX s e rvers


User

AndLINUX o t her

: , -

, , ,

.

,

. -

, ,

, -

.

, -

.

320240,

640480, 1280720, -

BBB -

.

BBB -

OpenSource :

FreeSWITCH, Nginx, Flash

Red5, MySQL, ActiveMQ, Tomcat, Redis,

Grails, Xuggler, OpenOce.org, Image

Magick, SWFTools .

Asterisk,

-

, FreeSWITCH , -

Asterisk/app_konference.

- BBB

40 , -

. BigBlueButton

CPU Dual Core 2.6

, 2

.

, - ,

.

30-50 /. -

FAQ (goo.gl/

Pii7Y), -

.

80

, -

. -

80 (HTTP),

935 (RTMP) 9123 ( ).

,

BBB ,

Linux,

FreeBSD, Mac OS X Windows.

Ubuntu CentOS

. BBB - Amazon EC2.

, -

(

), , API, -

, -

(VoIP, nginx ..) -

. ,

. VM

BigBlueButton


56/75


User

AndLINUX s e rvers


User

AndLINUX o t her

, -

BBB, .

Asterisk?

VoIP Asterisk

MeetMe(app_meetme.so), -

-

, , , . -

.

. -

ConfBridge(

MeetMe), app_conference (appkonference.

sf.net) app_konference. app_

conference

.

( ),

( ).

.

tux.in.ua
http://www.tux.in.ua/articles/3455http://www.tux.in.ua/articles/3455


57/75


User

AndLINUX s e rvers


User

AndLINUX o t her

Traceroute traceroute -

-

,

(Internet Protocol

(IP)). -

IPv6

traceroute6.

traceroute -

UNIX- - . -

, ,

tracepath

Linux tracert

Microsoft Windows. -

Windows NT -

PingPath c

.

Tracerute -

.

, -

,

(TTL) -

.

-

TTL ,

2 ping, telnet dig,

.

ICMP ( ICMP (ICMP Time

Exceeded)) .

traceroute -

TTL -

. -

TTL

, ,

-

. TTL ,

. -

, -

-

- ICMP

(ICMP Echo Reply).

Traceroute

ICMP - ,

-

. , -

( ) -

.

:traceroute


58/75


User

AndLINUX s e rvers


User

AndLINUX o t her

:traceroute www.google.ittraceroute to www.google.it(72.14.234.104), 30 hops max, 60byte packets1 192.168.0.1 (192.168.0.1) 1.905ms 5.552 ms 9.496 ms2 * * *3 host141-189-static.38-88-b.business.telecomitalia.it(88.38.189.141) 50.136 ms 53.519ms 55.674 ms

4 r-bo83-vl19.opb.interbusiness.it (80.21.70.162) 58.609 ms63.730 ms 66.937 ms5 172.17.5.69 (172.17.5.69)74.281 ms 76.749 ms 79.629 ms6 172.17.8.165 (172.17.8.165)91.052 ms 42.074 ms 42.009 ms7 172.17.5.241 (172.17.5.241)49.091 ms 50.790 ms 53.211 ms8 te1-9-1-0.milano50.mil.seabone.

net (93.186.128.165) 54.800 ms56.805 ms 59.189 ms9 te3-2.milano53.mil.seabone.net(195.22.205.227) 60.866 ms 63.446ms 65.927 ms10 72.14.198.233 (72.14.198.233)68.039 ms 70.902 ms 73.316 ms11 209.85.249.54 (209.85.249.54)75.359 ms 78.234 ms 80.581 ms12 72.14.232.63 (72.14.232.63)41.714 ms 40.862 ms 41.676 ms

13 mil01s07-in-f104.1e100.net(72.14.234.104) 46.361 ms 49.293ms 52.165 ms

Whois

WHOIS ( "who is",

" ") -

, -

, -

-,

, IP- -

, -

.

-

,

. Whois -

RFC 3912, -

.

:whois

:whois wikipedia.comRegistrant: Wikimedia Foundation,Inc. 149 New Montgomery StreetThird Floor San Francisco,California 94105 United StatesRegistered through: GoDaddy.com,

Inc. (http://www.godaddy.com)Domain Name: WIKIPEDIA.COMCreated on: 12-Jan-01Expires on: 10-Jan-15Last Updated on: 01-Mar-06Administrative Contact: Admin,DNS [email protected] Foundation, Inc. 149New Montgomery Street Third FloorSan Francisco, California 94105

United States +1.4158396885 Fax-- +1.4158820495Technical Contact: Admin,DNS [email protected] Foundation, Inc. 149New Montgomery Street Third FloorSan Francisco, California 94105United States +1.4158396885 Fax-- +1.4158820495Domain servers in listed order:NS0.WIKIMEDIA.ORG NS1.WIKIMEDIA.ORG NS2.WIKIMEDIA.ORG


59/75


User

AndLINUX s e rvers


User

AndLINUX o t her

Netstat

GNU/Linux netstat -

.

,

, :kaos@kaos:~$ netstatActive Internet connections (w/o

servers)Proto Recv-Q Send-Q Local AddressForeign Address Statetcp 0 0 proxy.surfnet.iac:33297mg-in-f125.:xmpp-clientESTABLISHEDtcp 0 0 proxy.surfnet.iac:33995by1msg5176516.phx.:1863ESTABLISHED ActiveUNIX domain sockets (w/o servers)Proto RefCnt Flags Type State

I-Node Path unix 3 [ ]DGRAM 13826 /dev/log unix 2 [ ]DGRAM 5109 @/org/kernel/udev/udevd unix 2 [ ]DGRAM 10443 @/org/freedesktop/hal/udev_event unix 3 [ ]STREAM CONNECTED 34721 /tmp/orbit-kaos/linc-4876-0-ebf915e300c0 unix 3 [ ] STREAMCONNECTED 34720

(-), (/).

-

:

-a: TCP-

TCP- UDP-,

.

-e: -

( Ethernet), -

. -

-s.

-g: -

(Multicast) IPv4

IPv6 (

).

-i: -

.

-n: TCP-,

-

.

-p: , -

(

Linux

root; Windows -

-b).

-r:

(

route print Windows).

-u: UDP-.

-t: TCP-.

:netstat -tlnp

, -

-

(PID). -

,

.netstat -an | grep ESTABLISHED |awk '{print $5}' | awk -F:'{print $1}' | sort | uniq -c |awk '{ printf("%st%st",$2,$1) ;for (i = 0; i < $1; i++){printf("*")}; print "" }'


60/75


User

AndLINUX s e rvers


User

AndLINUX o t her

ASCII-, -

IP-

. :10.100.0.22 1 *10.100.0.23 2 **10.100.1.51 3 ***120.116.18.134 1 *87.11.50.125 4 ****

netstat -ant | awk '{print $NF}'| grep -v '[a-z]' | sort | uniq-c

. :1 CLOSE_WAIT11 ESTABLISHED63 LISTEN21 TIME_WAIT

Mtr

mtr -

-

traceroute ping.

mtr -

,

,

TTL. - TTL

, -

-

.

mtr

- -

.

-

(

) .

:mtr

"mtr google.com":

mtr --report --report-cycles10 www.google.com > google_net_report.txt

-

, mtr, -

.

mtr

,

-, -

.

.

rus-linux.net
http://rus-linux.net/MyLDP/lvs/command-line-tools-network-analysis-2.htmlhttp://rus-linux.net/MyLDP/lvs/command-line-tools-network-analysis-2.html


61/75


User

AndLINUX s e rvers


User

AndLINUX o t her

WiFi-

-

Wi-Fi

.

Wi-Fi- /

Wi-Fi-.

-

,

.

,

.

- ,

Linux Kismet

.

.

,

:

iwlist wlan0 scan

. -

, -

,

.

:#!/usr/bin/perl

use strict;use warnings;use diagnostics;

use Math::Round;

# if (@ARGV != 1) {

# - print "Usage:\n"; print " $0 ifname\n\n"; # exit;}

# -

my $clear_screen = `clear`;

# my $ifname = shift;

while (1) { # my $scan_result = `iwlist

$ifname scan`; # my $error_code = $?; # - exit if $error_code; # - my @scan_results_tmp =

split /Cell \d+/is, $scan_result; # my @scan_results = ();


62/75


User

AndLINUX s e rvers


User

AndLINUX o t her

#

foreach my $hotspot_line(@scan_results_tmp) { # , next if $hotspot_line !~ m{Channel\:}is; # my %hotspot = (); #

$hotspot{'Channel'} = $hotspot_line;$hotspot{'Channel'} =~s{^.+Channel\:(\d+).+$}{$1}is; # SSID $hotspot{'SSID'}= $hotspot_line; $hotspot{'SSID'}

=~ s{^.+ESSID\:"((.+?)?)".+$}{$1}is; # -$hotspot{'Crypted'} = $hotspot_line;$hotspot{'Crypted'} =~

s{^.+Encryption key:(\w+?)\s.+$}{$1}is; # -. - my $q1 =$hotspot_line; $q1 =~s{^.+Quality=(\d+)/\d+.+$}{$1}is; my $q2 =

$hotspot_line; $q2 =~s{^.+Quality=\d+/(\d+).+$}{$1}is;

$hotspot{'Quality'} = round($q1 *

100 / $q2); push @scan_results, \%hotspot; } # @scan_results = sort {sprintf("%02d", $a->{Channel})cmp sprintf("%02d",$b->{Channel}) } @scan_results;

# print $clear_screen; # print sprintf(" % 2.2s[% 9.9s] [% 32.32s] [% 7.7s]\n","Ch", "Quality", "SSID","Crypt"); print sprintf('%1$s'x61 ."\n", "-"); foreach my $hotspot (@

scan_results) { print sprintf("%02d [% 8d%%] [% 32.32s] [%7.7s]\n", $hotspot->{Channel}, $hotspot->{Quality}, $hotspot-

>{SSID}, $hotspot->{Crypted}); } # sleep 1;}

-

,

. :

./wiscan.pl wlan2


63/75


User

AndLINUX s e rvers


User

AndLINUX o t her

: Ch [ Quality] [SSID] [ Crypt]------------------------------------------------------------- 01 [ 93%] [Yuldash House] [ on] 02 [ 94%] [serr_dom] [ on] 04 [ 94%] [home-of-moose] [ on] 06 [ 93%] [

wi.tattele.com] [ off] 06 [ 93%] [KEENETIC 4G] [ on] 06 [ 94%] [ MTS_telefon_2-65-60-30] [ on]

06 [ 94%] [home.net] [ on] 08 [ 93%] [YOTA] [ on] 10 [ 93%] [Estucador] [ on] 10 [ 93%] [DIR-300NRUB6] [ on]

- -

. - -

.

ylsoftware.com
http://www.ylsoftware.com/news/669http://www.ylsoftware.com/news/669


64/75

USER v14.03(7)ualinux.com

User

AndLINUX s e rvers

ualinux.com 64

User

AndLINUX C y berCrime

Linux-,

Symantec -

-

GNU/Linux.

, -

,

read, EVP_CipherInit, fork ioctl. -

-

,

sshd,

- .

-

,

, -

, -

.

,

. ,

,

":!;.", -

.

Blowfish Base64.

, -

, -

shell-

- . -

, -

, email-.

,

SSH- ,

.

":!;." .

, -

.

-

sshd -

, "key=",

"dhost=", "hbt=3600", "sp=", "sk=" "dip=".

, - , -

. ,

-

, -

, .

opennet.ru
http://www.opennet.ru/opennews/art.shtml?num=38441http://www.opennet.ru/opennews/art.shtml?num=38441


65/75


User

AndLINUX s e rvers

ualinux.com 65

User


Ettercap -

, GTK

(GUI), -

.

Ettercap

MITM ( "-

"),

,

...

Ettercap ,

( Telnet, FTP,

POP3, IMAP, SMB, HTTP ),

.


66/75


User

AndLINUX s e rvers

ualinux.com 66

User


Ettercap

-

,

(root), - log- -

(

, -

, ), -

Ettercap

:

/etc/ettercap.conf

-

ARP-spoofing ( ).

zenway.ru
http://zenway.ru/page/ettercaphttp://zenway.ru/page/ettercap


67/75


User

AndLINUX s e rvers

ualinux.com 67

User


:

-

(

"spoof", -

). -

,

IP-. -

-

,

-

. 1.

1: Ethernet- IP-

, Ethernet-

-

,

, MAC- -

, , (preambles) .

TCP/IP, TCP- -

IP-

Ethernet-. TCP-

-

, , IP- -

. - OSI

.

,

TCP/IP

(SYN,

SYN-ACK, ACK).

,

.

, -

IT-

. ,

, -

. - , Linux-

.


68/75


User

AndLINUX s e rvers

ualinux.com 68

User


-

FIN/FIN-ACK. IP- -

,

,

, -

. IP- IP-

-

, ,

-

;

-

, -

,

2.

2:

,

, -

IP- ,

IP- -

, IP-

,

.TCP/IP -

,

-

. - , . -

,

, -

, ,

, -

. , -

-, ,

IP-

.

,

-

. -

-

,

. -

,

-

. -

, , ,

, -

7 OSI,

.

, -

, , -

Web- .

- ,

-


69/75


User

AndLINUX s e rvers

ualinux.com 69

User


telnet

Web-, - -

, Web-

,

.

,

; -

-

,

.

-

-

- . ,

-

,

: -

, - -

.

, -

, TCP- .

-

,

-

-

-

. ,

,

,

,

, -

- . ,

-

, -

ACK-, -

.

,

, -

. ,

-

.

,

-

- IP-

.

Web-, - HTTP-

IP-

. -

,

- . -

, -

.

,


70/75


User

AndLINUX s e rvers

ualinux.com 70

User


. -

- "" ("blind" spofing)

"" ("non-blind" spoofing).

,

-

,

.

, -

, -

-

.

,

-

. ,

,

-

, -

-

.

, -

-

-

. -

(man-in-the-middle), -

.

, ,

, -

- , TCP.

(IP port spoofing)

NAT -

, -

. ,

-

,

- IP-.

.

,

.

ARP

(ARP spoofing)

-

, -

IP-.

, ARP poisoning,

ARP-

-

MAC- IP- .

, , -

,

-

IP- MAC-

. -

.

-

, - , -


71/75


User

AndLINUX s e rvers

ualinux.com 71

User


,

, .

DNS

(DNS spoofing)

DNS

poisoning -

.

,

, -

IP-.

, Web- email-

-

.

-

IP-,

.

, , -

-

.

Email- Web-

(Email and Web spoofing)

7 OSI, -

, - -

, Web-

.

-

(-

) .

,

-

,

.

,

,

,

, -

-

.

,

, -

2 OSI, -

, , ,

, .

-

-

. -

-

, -

ACK-.

SYN-, -

. -

IP- -

, -

IP-

.

-

, -


72/75


User

AndLINUX s e rvers

ualinux.com 72

User


-

. , -

:

IP-

,

-

,

.

Linux

, - , -

(source address

verification). ,

, ,

,

. ,

-

, Ubuntu CentOS, -

, ,

, .

hosts.conf -

nospoof on -

,

.

Linux

-

arpwatch, .

IP MAC-, -

-

.

.

- , -

.

,

. -

,

-

.

,

-

IT- -

. - -

IT-.

rus-linux.net
http://rus-linux.net/MyLDP/sec/cyber-attacks-packet-spoofing.htmlhttp://rus-linux.net/MyLDP/sec/cyber-attacks-packet-spoofing.html


73/75


74/75


75/75

Documents

Userandlinux Morethanuser v14.03(7)