问题

“监视”似乎对安全政策不起作用

  • 2020年6月30日
  • 2个答复
  • 1713次观点
Yamachan
徽章

我设置了图中所示的名为LAMP的安全策略，并将其设置为监视模式。

灯-DB

Centos 7

MySQL在端口3306上运行。

接受Lamp-Web数据库请求。

Fiwewalld无法控制。

这层中的VM可以互相交谈吗？- 不

灯 - ​​网络

Centos 7

WordPress和Apache正在运行。

Web服务在HTTP端口上启动。

没有数据库，没有Fiwewalld的控制。

这层中的VM可以互相交谈吗？- 不

然后我做了以下操作：

  1. 从192.168.0.0/23段中查看浏览器中的LAMP-WEB。
  2. 从192.168.0.0/23段开始ping至lamp-db。

但是，“监视”屏幕显示“ TCP端口：80个未找到的流”（如图所示）（如图），尽管ping成功，但“未检测到未检测到的未接管流量。”显示。

为什么“监视”无法捕获数据包？

やまちゃん（❁´◡`❁）
I set the security policy named LAMP as shown in the figure, and set it to monitor mode.<\/p>
\"//www.jhbzcj.com/next/prism-for-infra-and-it-ops-26/\"<\/figure>
\t\t\t

LAMP-DB<\/p> \t\t\t<\/td> \t\t\t

 \t\t\t

CentOS 7<\/p> \t\t\t

MySQL is running on port 3306.<\/p> \t\t\t

LAMP-WEB database request is accepted.<\/p> \t\t\t

There is no control by fiwewalld.<\/p> \t\t\t

Can VMs in this tier talk to each other ? - No<\/p> \t\t\t<\/td> \t\t<\/tr>

\t\t\t

LAMP-WEB<\/p> \t\t\t<\/td> \t\t\t

 \t\t\t

CentOS 7<\/p> \t\t\t

Wordpress and apache are running.<\/p> \t\t\t

Web services are launched on http port.<\/p> \t\t\t

There is no database, no control by fiwewalld.<\/p> \t\t\t

Can VMs in this tier talk to each other ? - No<\/p> \t\t\t<\/td> \t\t<\/tr><\/tbody><\/table>

\u00a0<\/p>

Then I did the following:<\/p>

  1. View LAMP-WEB in browser from 192.168.0.0\/23 segment.<\/li> \t
  2. Ping to LAMP-DB from 192.168.0.0\/23 segment.<\/li> <\/ol>

    However, \u201cMonitoring\u201d screen shows \u201cTcp Port:80 No flows found\u201d (as shown in the figure\uff09 and despite success of the ping, \u201cNo uncaptured traffic flows were detected.\" is displayed.<\/p>

    Why can't \"Monitoring\" catch the packets?<\/p>","quoteUsername":"yamachan","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

    2个答复

    r
    秩
    徽章

    你好 @yamachan，棱镜中的监视页面需要几分钟才能显示捕获的数据包。我还建议在PING启动后刷新页面或关闭页面并重新访问。这也是连续的ping吗？

    Hi @yamachan<\/user-mention>, the monitoring page in the Prism takes few minutes to show the captured packets. Also I would suggest to refresh the page or close the page and re-visit\u00a0after the ping has initiated. Also was it a continuous ping?<\/p>","quoteUsername":"RAMESH BABU","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
    Yamachan
    徽章

    你好 @Ramesh Babu，感谢您的建议。

    但是，即使我独自留下了一个小时左右，它仍然是“未检测到未发现的交通流量”。

    我很长一段时间以来一直在追逐这个问题。今天，我意识到基本设置可能是错误的。我在主题中写了有关此设置的文章：如何配置物理NIC（S）出现在虚拟网络屏幕上？

    やまちゃん（❁´◡`❁）
    Hi @RAMESH BABU<\/user-mention>, thanks for the suggestion.<\/p>

    But even if I left it alone for an hour or so, it was still \u201cNo uncaptured traffic flows were detected\u201d.<\/p>

    I've been chasing this problem for a long time. Today, I realized that the basic setup might be wrong. I wrote about this setup in the topic: How do I configure physical nic(s) to appear on the Virtual Networks screen?<\/a><\/p>","quoteUsername":"yamachan","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

    回复


    Learn more about our cookies.<\/a>","cookiepolicy.button":"Accept cookies","cookiepolicy.button.deny":"Deny all","cookiepolicy.link":"Cookie settings","cookiepolicy.modal.title":"Cookie settings","cookiepolicy.modal.content":"We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.<\/a>","cookiepolicy.modal.level1":"Basic
    Functional","cookiepolicy.modal.level2":"Normal
    Functional + analytics","cookiepolicy.modal.level3":"Complete
    Functional + analytics + social media + embedded videos"}}}">
    Baidu