{"id":17936,"date":"2025-01-01T14:25:48","date_gmt":"2025-01-01T11:25:48","guid":{"rendered":""},"modified":"2025-11-11T01:00:34","modified_gmt":"2025-11-10T22:00:34","slug":"linux-gercek-zamanli-trafik-izleme-gelen-saldirilari-gorme","status":"publish","type":"post","link":"https:\/\/eniyisunucum.com\/bilgi\/linux-gercek-zamanli-trafik-izleme-gelen-saldirilari-gorme\/","title":{"rendered":"Linux Ger\u00e7ek Zamanl\u0131 Trafik \u0130zleme , Gelen Sald\u0131r\u0131lar\u0131 G\u00f6rme"},"content":{"rendered":"<figure><\/figure>\n<p>Linux sunucunuz \u00fczerinde gelen giden trafi\u011fi izlemek i\u00e7in kullanabilece\u011finiz hem paket bazl\u0131 hemde istatistik olarak nas\u0131l inceleyebilece\u011finizi anlataca\u011f\u0131z. (Linux vds\/sunucuz da trafi\u011fi analiz ederek herhangi bir sald\u0131r\u0131 olup olmad\u0131\u011f\u0131n\u0131 tespit edebilirsiniz) \u0130lk olarak en basit aray\u00fcz\u00fc olan \u201c<em>nload<\/em>\u201d ile ba\u015flayal\u0131m. Kurulumu,<br \/>\nAPT Sistemler,<\/p>\n<pre><code>$ apt-get install nload -y<\/code><\/pre>\n<p>YUM Sistemler,<\/p>\n<pre><code>$ yum install nload -y<\/code><\/pre>\n<p>\u015eeklinde kurulumu yaparak kurulum bittikten sorna nload komutunu kullanarak yaz\u0131l\u0131m\u0131 \u00e7al\u0131\u015ft\u0131r\u0131p [enter] a basarak kulland\u0131\u011f\u0131n\u0131z interface \u00fczerine geldi\u011finizde giden ve gelen trafi\u011fi rahat bir aray\u00fcz ile izleyebilirsiniz. Aray\u00fcz olarak en rahat\u0131 nload oldu\u011fu i\u00e7in onunla ba\u015flamak istedim ancak s\u0131radaki ara\u00e7tan bir eski\u011fi var p\/s (paket \/ saniye) g\u00f6stermiyor.<\/p>\n<p>S\u0131radaki arac\u0131m\u0131z \u201c<em>vnstat\u201d\u00a0<\/em>ilk olarak kurulumunu yap\u0131n\u0131z,<\/p>\n<p>APT Sistemler,<\/p>\n<pre><code>$ apt-get install vnstat -y<\/code><\/pre>\n<p>YUM Sistemler,<\/p>\n<pre><code>yum install vnstat -y<\/code><\/pre>\n<p>vnstat interface yi parametre olarak belirterek o interface \u00fczerinden ge\u00e7en trafi\u011fi izlemize yard\u0131mc\u0131 olan bir ara\u00e7t\u0131r. \u0130lk olarak \u201cifconfig\u201d komutu ile interface adresinizi \u00f6\u011frenin (sunucunuzun ip adresi yazan hangisi ise).<\/p>\n<p>\u00d6rnek \u201cifconfig\u201d \u00e7\u0131kt\u0131s\u0131,<\/p>\n<pre><code>root@eniyisunucum.com:~# ifconfig\nens192    Link encap:Ethernet  HWaddr 00:50:56:ad:b5:fd\n          inet addr:193.164.7.74  Bcast:10.202.2.1  Mask:255.255.255.0\n          inet6 addr: fe80::250:56ff:fead:b5fd\/64 Scope:Link\n          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1\n          RX packets:534742 errors:0 dropped:82 overruns:0 frame:0\n          TX packets:108513 errors:0 dropped:0 overruns:0 carrier:0\n          collisions:0 txqueuelen:1000\n          RX bytes:227286074 (227.2 MB)  TX bytes:25829011 (25.8 MB)\n\nlo        Link encap:Local Loopback\n          inet addr:127.0.0.1  Mask:255.0.0.0\n          inet6 addr: ::1\/128 Scope:Host\n          UP LOOPBACK RUNNING  MTU:65536  Metric:1\n          RX packets:265 errors:0 dropped:0 overruns:0 frame:0\n          TX packets:265 errors:0 dropped:0 overruns:0 carrier:0\n          collisions:0 txqueuelen:1\n          RX bytes:26880 (26.8 KB)  TX bytes:26880 (26.8 KB)<\/code><\/pre>\n<p>sunucumuzun ip adresi \u201c193.164.7.74\u201d yazan sat\u0131rtan anlad\u0131\u011f\u0131m\u0131z \u00fczere interface olarak \u201cens192\u201d kullan\u0131lmakta hemen komutumuza ge\u00e7elim;<\/p>\n<pre><code>$ vnstat -i ens192 -l<\/code><\/pre>\n<p>\u00e7\u0131kt\u0131 olarak giden gelen trafi\u011fi anl\u0131k olarak hem boyut hemde p\/s olarak ekrana yazd\u0131r\u0131cak ve kolay bir \u015fekilde takip edebileceksiniz.<\/p>\n<figure><\/figure>\n<p>Paket bazl\u0131 trafi\u011fi analiz etmek i\u00e7in ise pcap alman\u0131z gerekmektedir. ilk olarak \u201ctcpdump\u201d isimli arac\u0131 kural\u0131m,<\/p>\n<p>APT Sistemler,<\/p>\n<pre><code>$ apt-get install tcpdump -y<\/code><\/pre>\n<p>YUM Sistemler,<\/p>\n<pre><code>$ yum install tcpdump -y<\/code><\/pre>\n<p>Ard\u0131ndan vnstat da g\u00f6sterdi\u011fimiz gibi \u201cifconfig\u201d \u00fczerinden interface i \u00f6\u011frenerek -i parametresinden sonras\u0131na ekleyerek verice\u011fimiz \u00f6rnek komut gibi 1000 sat\u0131rl\u0131k paket log\/pcap kayd\u0131n\u0131 alabilirsiniz.<\/p>\n<pre><code>$ tcpdump -i ens192 -c 1000 -w trafikanaliz.pcap<\/code><\/pre>\n<p>Sonraki ad\u0131m ise pcap \u0131 kendi bilgisayar\u0131n\u0131za indirerek wireshark \u00fczerinden pcap dosyas\u0131n\u0131 \u00e7al\u0131\u015ft\u0131rmakt\u0131r.<\/p>\n<p><em>NOT<\/em>: Sald\u0131r\u0131 gelen ve y\u00fcksek t\u00fcketim yapan sunucular\u0131n\u0131z i\u00e7in premium sanal sunucular\u0131m\u0131z\u0131 tercih edebilirsiniz. Eniyisunucum.com<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Linux sunucunuz \u00fczerinde gelen giden trafi\u011fi izlemek i\u00e7in kullanabilece\u011finiz hem paket bazl\u0131 hemde istatistik olarak nas\u0131l inceleyebilece\u011finizi anlataca\u011f\u0131z. (Linux vds\/sunucuz da trafi\u011fi analiz ederek herhangi bir sald\u0131r\u0131 olup olmad\u0131\u011f\u0131n\u0131 tespit edebilirsiniz) \u0130lk olarak en basit aray\u00fcz\u00fc olan \u201cnload\u201d ile ba\u015flayal\u0131m. Kurulumu, APT Sistemler, $ apt-get install nload -y YUM Sistemler, $ yum install nload -y [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-17936","post","type-post","status-publish","format-standard","hentry","category-genel"],"_links":{"self":[{"href":"https:\/\/eniyisunucum.com\/bilgi\/wp-json\/wp\/v2\/posts\/17936","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eniyisunucum.com\/bilgi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eniyisunucum.com\/bilgi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eniyisunucum.com\/bilgi\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eniyisunucum.com\/bilgi\/wp-json\/wp\/v2\/comments?post=17936"}],"version-history":[{"count":2,"href":"https:\/\/eniyisunucum.com\/bilgi\/wp-json\/wp\/v2\/posts\/17936\/revisions"}],"predecessor-version":[{"id":18161,"href":"https:\/\/eniyisunucum.com\/bilgi\/wp-json\/wp\/v2\/posts\/17936\/revisions\/18161"}],"wp:attachment":[{"href":"https:\/\/eniyisunucum.com\/bilgi\/wp-json\/wp\/v2\/media?parent=17936"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eniyisunucum.com\/bilgi\/wp-json\/wp\/v2\/categories?post=17936"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eniyisunucum.com\/bilgi\/wp-json\/wp\/v2\/tags?post=17936"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}