DOCSLIB.ORG

Pruebas De Vulnerabilidades Que Presenta La Red De Datos De La Institución, Para Generar Un Informe Del Estado Actual De La Misma

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Pruebas De Vulnerabilidades Que Presenta La Red De Datos De La Institución, Para Generar Un Informe Del Estado Actual De La Misma UNIVERSIDAD NACIONAL DE LOJA ÁREA DE LA ENERGÍA, LAS INSDUSTRIAS Y LOS RECURSOS NATURALES NO RENOVABLES CARRERA DE INGENIERÍA EN SISTEMAS “Implementación de protocolos seguros y herramienta de monitoreo para la red de datos del Gobierno Autónomo Descentralizado Municipal de Loja” “Tesis previa a la Obtención del título de Ingeniero en Sistemas” Autores: Henry Cristian Cuesta Vega Franklin Rolando Mingo Morocho Director: Ing. Gabriela Viñán Rueda, Mg. Sc. Loja – Ecuador 2014 Certificación del Director Ingeniera Gabriela Viñán Rueda, Mg. Sc. DOCENTE DE LA CARRERA DE INGENIERÍA EN SISTEMAS DE LA UNIVERSIDAD NACIONAL DE LOJA CERTIFICA: Que el presente proyecto fin de carrera elaborado previo a la obtención del Título de Ingeniería en Sistemas, titulado: “Implementación de protocolos seguros y herramienta de monitoreo, para la red de datos del Gobierno Autónomo Descentralizado Municipal de Loja.”, realizada por los Egresados Henry Cristian Cuesta Vega y Franklin Rolando Mingo Morocho, cumple con los requisitos establecidos por las normas generales para la graduación en la Universidad Nacional de Loja, tanto en aspecto de forma como de contenido. Por lo tanto, autorizo proseguir los trámites legales para su presentación y defensa. Loja, 09 de octubre del 2014 _____________________________ Ing. Gabriela Viñán Rueda, Mg. Sc. DIRECTORA DE TESIS II AUTORÍA Nosotros Henry Cristian Cuesta Vega y Franklin Rolando Mingo Morocho declaramos ser autores del presente trabajo de tesis y eximimos expresamente a la Universidad Nacional de Loja y a sus representantes jurídicos de posibles reclamos o acciones legales por el contenido de la misma. Adicionalmente aceptamos y autorizamos a la Universidad Nacional de Loja, la publicación de nuestra tesis en el Repositorio Institucional - Biblioteca Virtual. Autor: Henry Cristian Cuesta Vega Franklin Rolando Mingo Morocho Firma: ………………………………. ………………………………. Cédula: 1104225865 1104879380 Fecha: 4 de noviembre de 2014 III CARTA DE AUTORIZACIÓN DE TESIS POR PARTE DE LOS AUTORES, PARA LA CONSULTA, REPRODUCCIÓN PARCIAL O TOTAL Y PUBLICACIÓN ELECTRÓNICA DEL TEXTO COMPLETO. Nosotros Henry Cristian Cuesta Vega y Franklin Rolando Mingo Morocho, declaramos ser autores de la tesis titulada: Implementación de protocolos seguros y herramienta de monitoreo, para la red de datos del Gobierno Autónomo Descentralizado Municipal de Loja, como requisito para optar al grado de: Ingeniero en Sistemas; autorizamos al sistema Bibliotecario de la Universidad Nacional de Loja para que con fines académicos, muestre al mundo la producción intelectual de la Universidad, a través de la visibilidad de su contenido de la siguiente manera en el Repositorio Digital Institucional: Los usuarios pueden consultar el contenido de este trabajo en el RDI, en las redes de información del país y del exterior, con las cuales tenga convenio la Universidad. La Universidad Nacional de Loja, no se responsabiliza por el plagio o copia de la tesis que realice un tercero. Para la constancia de esta autorización, en la cuidad de Loja, cuatro días del mes de noviembre del dos mil catorce. Firma: ……………………………… Autor: Henry Cristian Cuesta Vega Cédula: 1104225865 Dirección: Loja (Ciudadela del Maestro) Correo Electrónico: [email protected] Teléfono: 2573991 Celular: 0993276248 Firma: ……………………………… Autor: Franklin Rolando Mingo Morocho Cédula: 1104879380 Dirección: Loja (Barrio Belén Av. Isidro Ayora y Virgilio Rodas) Correo Electrónico: [email protected] Teléfono: 2552443 Celular: 0989515980 DATOS COMPLEMENTARIOS Director de Tesis: Ing. Gabriela Viñan Rueda, Mg. Sc. Tribunal de Grado: Ing. Henry Patricio Paz Arias, Mg. Sc. Ing. Lorena Elizabeth Conde Zhingre, Mg. Sc. Ing. Waldemar Victorino Espinoza Tituana, Mg. Sc. IV Agradecimiento A mis padres les agradezco el haberme inculcado valores humanos, el brindarme la educación necesaria para llegar a dónde me encuentro hoy, gracias por ser el soporte principal en mi vida. A la Universidad Nacional de Loja y docentes de la carrera de Ingeniería en Sistemas, por ayudar a desarrollarme profesionalmente y aprobar el desarrollo de esta tesis. Atte.: Henry Cuesta Ante todo a Dios por brindarme salud durante el desarrollo de la tesis la sabiduría necesaria para cumplir con cada uno de los objetivos del proyecto. Al administrador de la red de datos del GAD por coordinar y supervisar los avances en cada una de las fases y brindar las facilidades para la implementación del proyecto. Atte.: Franklin Mingo V Dedicatoria A mis padres por el apoyo y motivación constante, a mi familia, les dedico este documento como el fruto del esfuerzo y empeño puesto en la realización de este proyecto de fin de carrera. Atte.: Henry Cuesta Este trabajo se lo dedico a mis padres por el apoyo brindado desde que inicie la carrera hasta la obtención del título. Atte.: Franklin Mingo VI Cesión de Derechos Los autores del presente trabajo investigativo, autorizamos a la Universidad Nacional de Loja hacer uso del mismo en lo que estime sea conveniente con fines académicos para la divulgación de información. VII a. Título “Implementación de protocolos seguros y herramienta de monitoreo, para la red de datos del Gobierno Autónomo Descentralizado Municipal de Loja”. VIII b. Resumen Usar protocolos seguros y certificados digitales, en los servicios de red de instituciones públicas o privadas, permiten el acceso seguro a la información confidencial; al tratarse de una comunicación segura, se garantiza que la identidad del servidor al que se conecta es el apropiado y esta conexión está debidamente cifrada desde el momento en el que se inició, es por este motivo que el presente trabajo brinda una solución con la implementación de protocolos seguros. En el desarrollo del tema propuesto, se emplean técnicas de investigación como la entrevista y encuesta con el fin de determinar en qué condiciones se encuentra la red de datos del GAD Municipal de Loja, identificar posibles amenazas y vulnerabilidades más críticas y relacionarlas con el tema. Se realizó una réplica del servicio de correo con las aplicaciones que se utilizan en la red de datos, se usa la distribución de Linux Debian Wheezy como sistema base, sobre el que se instalarán y configuraran cada una de las aplicaciones para usar certificados digitales, todo esto en un entorno controlado a fin de preparar las mejoras de seguridad correspondientes antes de su implementación. Además de las configuraciones mencionadas anteriormente, también se utilizó VPN IPSec, que brinda una comunicación segura en la capa red del modelo OSI, creando un canal seguro, sobre uno inseguro, garantizando que la información no sufra ningún cambio entre los extremos de la comunicación. Para tener un control de los servicios de la red de datos se eligió Nagios como herramienta de monitoreo y control de estados de los servicios de cada uno de los equipos que se desee monitorear. Con el uso de certificados digitales se tiene una comunicación segura, mientras que Nagios permite el seguimiento del estado de los servicios. IX Summary Using secure protocols and digital certificates, network services from public or private institutions, allow safe access to confidential information, as it is a secure communication ensures that the identity of the server to which connect its appropriate and this connection is properly encrypted from the moment the connection is started, it is for this reason that this document provides a solution with the implementation of secure protocols. In developing the proposed topic, techniques were used as the interview and poll in order to determine under what conditions the data network of the Municipal GAD Loja is, identify potential threats and most critical vulnerabilities related to the topic. It was decided to provide security to public services of the institution, a replica of the mail service was performed with the applications that are used in the data network, using the Linux distribution Debian Wheezy as a base system, on which will be installed and will configure each of the applications using digital certificates, all in a controlled environment to prepare relevant safety improvements before implementation. In addition to the above configurations, VPN IPSec is also used, which provides secure communication on the network layer of the OSI model, creating a secure channel over an insecure, ensuring that information is any way between the ends of the communication. To keep track of the web services data, it was decided to use Nagios as a tool for monitoring and controlling service statuses of each of the computers you want to monitor. With the use of digital certificates you have a secure communication, while Nagios allows monitoring service status. X Índice de Contenidos Índice General a. Título....................................................................................................................VIII b. Resumen ............................................................................................................... IX c. Introducción .......................................................................................................... 21 d. Revisión Literaria ................................................................................................. 23 1. Adquisición de información (Information Gathering) .............................................. 23 1.1. Google como herramienta de búsqueda de información ................................. 23 1.2. Uso de herramientas de búsqueda mediante ip/dominio. ............................... 24 1.2.1. Herramientas
Load more

Recommended publications
  • Supervision Utilisation De Check-MK
    Supervision Utilisation de Check-MK Réseau Min2Rien Journée Thématique « retour d’expériences » - 13/02/2014 NICOLAS JAMIN – Administrateur Système – DSI de l’Académie de LILLE Supervision: Utilisation de Check-MK Plan . Présentation . Fonctionnement / Configuration . Création de scripts (Présentation et exemple) . Utilisation / Capture d’écran . Livestatus / Multisite Nicolas JAMIN – DSI de l’Académie de LILLE 14/02/2014 2 Supervision: Utilisation de Check-MK Presentation . Check-MK : add-on de supervision écrit en python . Nagios utilise des plugins de type actif 1 plugin = 1 service Exécution côté Nagios • Exemple: check_disk = test de l’espace disque . Check-MK utilise des plugins de type passif 1 plugin ~ 30 tests de base Exécution côté Client • Exemple: check_mk = check_disk + check_mem + check_ps + … . Forte baisse du taux d’utilisation des CPUs sur Nagios grâce à Check-MK . Remplace les plugins de type NRPE, NSCLIENT ++ Nicolas JAMIN – DSI de l’Académie de LILLE 14/02/2014 3 Supervision: Utilisation de Check-MK Fonctionnement Nicolas JAMIN – DSI de l’Académie de LILLE 14/02/2014 4 Supervision: Utilisation de Check-MK Configuration (sur le serveur NAGIOS) . Fichier main.mk Contient la configuration générale (seuil d’alerte, exclusions des services …) • Inventory_df_exclude_mountpoints = [‘/dev’,’/mnt/vzsnap0’] • Filesystem_default_level[‘levels’] = (90.0, 95.0) . Fichier tcp_hosts.mk Contient les hosts et hostgroups des serveurs auxquels ils appartiennent. • template124.expr.in.ac-lille.fr|linux|apt|openvz|ubuntu12 . Fichier hostgroups.mk Contient la définition des hostgroups. • (‘Serveurs Ubuntu 12.04’, [ ‘ubuntu12’ ], ALL_HOSTS), Nicolas JAMIN – DSI de l’Académie de LILLE 14/02/2014 5 Supervision: Utilisation de Check-MK Configuration (sur le serveur NAGIOS) . Plus aucune configuration côté Nagios Core • /etc/nagios/host.cfg, /etc/nagios/hostgroup.cfg … .
    [Show full text]
  • The Checkmk Roadmap
    Agenda 1.Recap: What’s coming for Checkmk 1.7 Insert Picture Here 2.The next 100+ features 3.The next big topics 2 Most features are nearing completion 0% 100% User Experience Cloud & Containers Network Monitoring Automation & Extensibility Performance + Extend the monitoring base 3 Only project in early stage: Redesigning the UX 0% 100% User Experience Redesigned user experience Raw Edition: Modern graphing + Grafana integration Improved reporting New dashlets and dashboard usability Pre-built intelligent dashboards Tags & Labels Forecast graphs and historic data painters 4 Nearly finished with Cloud & Containers for 1.7 0% 100% Cloud & Containers Prometheus integration Extended Kubernetes Monitoring Improved Dynamic Configuration More AWS plug-ins More Azure plug-ins 5 Finishing up ntop integration as main topic 0% 100% Network Monitoring ntop integration: Traffic dashboard ntop integration: Alerts ntop integration: Flows ntop integration: Host details VPN Monitoring More plug-ins for network monitoring 6 Check-API on final spurt, REST-API progressing 0% 100% Automation & Extensibility Check-, Inventory- and Bakery-API REST-API Distributed agent bakery and bakery configurability New notification plug-ins 7 Major performance improvements still underway 0% 100% Performance More scalability for check helpers Activate Changes: Incremental sync of configuration WATO improvements 8 Many checks done, more to come :-) 0% 100% + Extend the monitoring base New and extended plug-ins already done 9 New: Feature Packs ⬢ A lot of useful features are
    [Show full text]
  • Ausreißer Check Mk
    05/2014 Check_mk als Nagios-Alternative Titelthema Ausreißer Check_mk 34 Check_mk hat zurzeit Rückenwind: Es gilt nicht mehr als schnödes Nagios-Plugin und seine Oberfläche Multi- site lässt die Konkurrenz alt aussehen. Doch wird Check_mk diesem Ruf in der Praxis gerecht? Holger Gantikow www.linux-magazin.de wachen will und wie er alle Ergebnisse in einem Rutsch zurück. dies möglichst optimal Das erfordert nur eine einzige Verbin- mittels Hostgruppen und dung (Abbildung 1, rechts). Templates abbildet, da- Auch Nagios wertet anders aus: Mit dem mit seine Konfiguration Nagios Remote Plugin Executor (NRPE) wartbar bleibt. Zugleich stupst es in der Regel ein Plugin auf dem wächst aber die Last auf Host an, das etwa die RAM-Auslastung dem Nagios-Server mit je- misst. Das Plugin erhält einige Schwel- der Erweiterung: Je mehr lenwerte und liefert einen Status zurück Dienste und Hosts dieser (»OK«, »Warning«, »Critical«). überwacht, desto mehr Check_mk bewertet die Ergebnisse hin- wird die Serverhardware gegen erst auf dem Server. Dies hat den zum Engpass. Die Anzahl positiven Nebeneffekt, dass die Agents der „aktiven Checks“ pro auf den zu überwachenden Hosts keine Prüfintervall bestimmt, weitere Konfiguration benötigen. Der wie leistungsfähig der Check_mk-Server filtert die von den Server sein muss (Abbil- Agenten gelieferten Daten mit Hilfe der © Ljupco Smokovski, 123RF Smokovski, © Ljupco dung 1, links). Konfigurationsparameter und Schwellen- werte, die der Admin festgelegt hat, und Wer den Zustand von mehr als einer Check_mk am Start schickt die Ergebnisse an Nagios weiter. Handvoll Systeme im Blick behalten möchte, muss auf handgestrickte Shell- Speziell gegen diese beiden Probleme, Testlauf skripte oder gelegentliche Kontrollen gegen die komplexe Konfiguration und verzichten und braucht ein vollwertiges die hohe Serverlast, möchte Check_mk Ob Check_mk hält, was es verspricht, Monitoring.
    [Show full text]
  • Automate Monitoring with Salt and Checkmk
    Automate Monitoring with Salt and Checkmk _ Philipp Lemke February / 2020 ConfigManagementCamp Ghent Agenda 1. About me 2. Project salt-checkmk 3. Salt & Checkmk Synergies 4. Setting up a monitoring environment from scratch 4.1. Install Checkmk 4.2. Add your Salt-Minions automatically to checkmk 4.3. Install checkmk Monitoring Agents via Salt 4.4. Use Salt Grains to define Rules in checkmk 5. Checkmk Notifications / Salt Event Bus / Reactors 5.1. ACL Definitions 5.2. Install Notification Plugin & Define Rule 5.3. Define Salt Reactor Config & Reactor 5.4. Invoke Orchestration Runner 5.5. Example(s) About me Philipp Lemke Trier / Germany @Agfa HealthCare @Sideline Solution Architect AMS Freelancer / Consultant Automation / Monitoring [email protected] [email protected] www.philipp-lemke.de www.agfahealthcare.com Github: PhilippLemke Project salt-checkmk https://github.com/tribe29/salt-checkmk States / Modules Documentation Formula Execution- & State Modules In Salt & Checkmk User Content provided as Salt SLS Example States context Formula Synergies ■ Intelligent Automation ■ Intelligent Monitoring ■ Python Environment ■ Detailed Health Info ■ Asset Data (Grains) ■ Notifications Both ■ Compatible with most OS ■ Written in Python ■ Scalability: Master-of-Masters Concept Distributed Topology Support Master-of-Masters Salt Syndic Minions Checkmk Master Checkmk Slave Hosts Central Data Center Remote Sites / Data Centers Setting up Checkmk & Minion Monitoring Starting Point Salt Environment with Master & Minions Salt Master Minions CentOS Ubuntu
    [Show full text]
  • JOB DESCRIPTION Devops
    Trobz ­ Open Source Solutions for the Enterprise 4th floor, 47/2/57 Bui Dinh Tuy street, Binh Thanh district, HCMC, Vietnam trobz.com JOB DESCRIPTION DevOps You will work with various internal teams at Trobz and build the tools to manage, deploy, monitor and scale our Infrastructure. DevOps at Trobz means between 20% to 80% Dev / Ops mixed role. Focus on backend software engineering, data processing, APIs, internal tools, SQL / DBA, etc. on the developer side. Focus on unix systems engineering, infrastructure as code, virtualization and containers, network engineering, security, database architecture, continuous integration, and web scale production infrastructure on the Ops side. We use tools like Ubuntu Linux, Ansible, Gitlab/Gitlab CI, Check MK, PostgreSQL, Apache, Nginx, Proxmox, Docker and we write code mostly in Python and Javascript. Responsibilities ● Build cloud environments to a service specification you help develop ● Support the deployment of applications into those environments ● Design new environments and architectures ● Build tools and monitoring ● Advance the art and do cool stuff Requirements ● Must have a degree in information technology ● 2+ years of experience "doing" DevOps, including working at large scale with real, highly concurrent, user traffic ● Experience with managing production virtualized environments on cloud ● Solid hands on skills with at least roughly 50% of the following: Apache, Nginx, Docker, Network Analysis Tools, Linux, CLI Tools, Python, Bash, Git, DNS, HTTP Headers, HTTP Caching, SSL, RESTFUL APIs, PostgreSQL, Check MK, Ansible ● Must be focused on quality, efficiency and continuous improvement ● Must be able to read and write in English .
    [Show full text]
  • For Control Systems at Cern
    Evaluation of standard monitoring tools(including log analysis) for control systems at Cern August 2013 Author: Vlad Vintila Supervisor(s): Fernando Varela Rodriguez CERN openlab Summer Student Report 2013 CERN openlab Summer Student Report 2013 Project Specification The goal of this Openlab Summer Student project was to assess the implications and the benefits of integrating two standard IT tools, namely Icinga and Splunkstorm with the existing production setup for monitoring and management of control systems at CERN. Icinga – an open source monitoring software based on Nagios would need to be integrated with an in-house developed WinCC OA application called MOON, that is currently used for monitoring and managing all the components that make up the control systems. Splunkstorm – a data analysis and log management online application would be used stand alone, so it didn’t need integration with other software, only understanding of features and installation procedure. Abstract The aim of this document is to provide insights into installation procedures, key features and functionality and projected implementation effort of Icinga and Splunkstorm IT tools. Focus will be on presenting the most feasible implementation paths that surfaced once both software were well understood. CERN openlab Summer Student Report 2013 Table of Contents Project specification ........................................................................................................ 2 Abstract ...........................................................................................................................
    [Show full text]
  • Communication Solutions Mastering Network Technologies Company Profile
    Mastering Network Technologies Nash Technologies Communication Solutions Mastering Network Technologies Company Profile » Nash Technologies provides vendor-independent solutions in software and communications: embedded, high-available, and real-time. » We serve telecommunications, automotive, transportation, and other industries. » Our company is based in Germany, in Nuremberg, Stuttgart, and Cologne. » Spin-out of Alcatel-Lucent in 2008 (Nuremberg) and 2010 (Stuttgart) » Approx. 150 engineers » Revenues: approx. €20m in FY2015 » Global presence via partnership with Harvey Nash (professional recruitment and IT outsourcing), incl. off-shore capabilities via offices in Ho-Chi-Minh City and Hanoi (Vietnam) May 2017 Copyright Nash Technologies – All rights reserved 2 Mastering Network Technologies Our History Nash Technologies 1980 1992 1996 2006 2008 2010 2015 Nash Technologies GmbH Philips Kommunikations Nürnberg Industrie AG TeKaDe Nürnberg Stuttgart Standard Electric Lorenz AG Alcatel SEL Nash Technologies Stuttgart GmbH May 2017 Copyright Nash Technologies – All rights reserved 3 Mastering Network Technologies Our References Telecommunications Automotive Transportation Industry May 2017 Copyright Nash Technologies – All rights reserved 4 Mastering Network Technologies Our Positioning: Services & Solutions We help you transform your network to All-IP PHY / Ethernet / IP/MPLS Layer Application & Service Layer (IMS, OTT, Fixed, Network Management Mobile, Voice, Video, etc.) • Consulting & Network Architecture Definition • Consulting & Network
    [Show full text]
  • Analysis and Evaluation of Network Management Solutions a Comparison of Network Management Solutions Suitable for Networks with 2,500+ Devices
    DEGREE PROJECT IN COMPUTER ENGINEERING, FIRST CYCLE STOCKHOLM, SWEDEN 2016 Analysis and Evaluation of Network Management Solutions A Comparison of Network Management Solutions Suitable for Networks with 2,500+ Devices MURAT GABDURAHMANOV and SIMON TRYGG KTH ROYAL INSTITUTE OF TECHNOLOGY INFORMATION AND COMMUNICATION TECHNOLOGY Analysis and Evaluation of Network Management Solutions A Comparison of Network Management Solutions Suitable for Networks with 2,500+ Devices Murat Gabdurahmanov and Simon Trygg 2016-06-16 Bachelor of Science Thesis Examiner Gerald Q. Maguire Jr. Academic adviser Anders Västberg KTH Royal Institute of Technology School of Information and Communication Technology (ICT) Department of Communication Systems SE-100 44 Stockholm, Sweden c Murat Gabdurahmanov and Simon Trygg, 16 June 2016 Abstract Some companies today are using sub-optimal and nearly obsolete management systems for their networks. Given the large number of different services that are demanded by users, there is a need to adapt the network structure to support the current and potential future demands. As a result, there is a need for new Network Management Solutions (NMSs). The aim of this thesis project is to help a company who uses a NMS called Local Area Network (LAN) Management Solution (LMS). LMS was designed by Cisco for managing LAN networks. However, the company’s demands are growing and they need to expand their network more than expected. Moreover, LMS is designed to only support devices by Cisco, whereas the company wants a universal solution with wide device support from many manufacturers. This thesis presents an analysis of their current system and suggests potential solutions for an upgrade that will meet all of the company’s demands and will have a long operating life.
    [Show full text]
  • Check MK Documentation Documentation Release
    Check_MK Documentation Documentation Release Marius Pana August 12, 2019 Contents 1 What is Monitoring all about?3 2 Why monitor things? 5 2.1 States...................................................5 2.2 Events..................................................5 2.3 What is a monitoring system?......................................5 2.4 What is a check?.............................................6 2.5 Active vs. Passive Checks........................................6 3 Check_MK Architecture 7 3.1 Check_MK Components.........................................7 3.2 Configuration & Check Engine.....................................8 3.3 Livestatus.................................................8 3.4 Multisite.................................................8 3.5 WATO..................................................8 3.6 Notify...................................................9 3.7 Business Intelligence...........................................9 3.8 Mobile..................................................9 3.9 Event Console.............................................. 10 4 Check_MK Quickstart 11 4.1 Prerequisites............................................... 11 4.2 Operating System............................................ 11 4.3 Disk Space................................................ 11 4.4 SMTP for outgoing emails........................................ 11 4.5 Time services............................................... 12 4.6 Repository................................................ 12 4.7 Downloading Check_MK.......................................
    [Show full text]
  • Holm Schwantner Monitoring Heterogener Systeme Am Beispiel Des IT-Systems Im
    Holm Schwantner Monitoring heterogener Systeme am Beispiel des IT-Systems im “Das TIETZ” DIPLOMARBEIT HOCHSCHULE MITTWEIDA (FH) UNIVERSITY OF APPLIED SCIENCES Fachbereich Elektro- und Informationstechnik Mittweida, Mai 2014 Holm Schwantner Monitoring heterogener Systeme am Beispiel des IT-Systems im “Das TIETZ” eingereicht als DIPLOMARBEIT an der HOCHSCHULE MITTWEIDA (FH) UNIVERSITY OF APPLIED SCIENCES Fachbereich Elektro- und Informationstechnik Mittweida, Mai 2014 Erstprufer:¨ Prof. Dr.-Ing. Thomas Beierlein Zweitprufer:¨ Dipl.-Kffr. Sibylle Lowe¨ Vorgelegte Arbeit wurde verteidigt am: Bibliographische Beschreibung: Holm Schwantner: Monitoring heterogener Systeme am Beispiel des IT-Systems im “Das TIETZ” 2014. - 71 S. Mittweida, Hochschule Mittweida (FH) - University of Applied Sciences, Fachbereich Elektro- und Informationstechnik, Diplomarbeit, 2014 Referat: Ein storungsfreier¨ Betrieb der Informationstechnik in Unternehmen und Ein- richtungen ist heute Voraussetzung fur¨ deren Betriebsfahigkeit.¨ Monitoring ist eine bewahrte¨ Vorgehensweise in der Systemadministration, um das zu bewerkstelligen. Diese Arbeit beschaftigt¨ sich mit der Auswahl und Untersuchung eines Monitoringsystems fur¨ die Uberwachung¨ der heterogenen IT-Infrastruktur eines stadtischen¨ Eigenbetriebes. Mit Methoden der Anforderungsanalyse werden zunachst¨ alle Komponenten identifiziert und klassifiziert, die in das Monitoring ubernommen¨ werden sollen. Mit Icinga wird eine fur¨ das Moni- toring der vorgefundenen Infrastruktur sinnvolle Open-Source-Losung¨ aus- gewahlt¨ und anschließend eine mogliche¨ Umsetzung in ein funktionierendes Monitoringsystem unter der Anwendung von Standards gezeigt. Inhaltsverzeichnis Seite 4 Inhaltsverzeichnis Abbildungsverzeichnis 6 Abk ¨urzungsverzeichnis 7 1 Einleitung 8 1.1 Motivation . .8 1.2 Idee . .9 1.3 Ziel . .9 1.4 Uberblick¨ . 10 2 Grundlagen 12 2.1 Rechnernetze . 12 2.1.1 Begriffe . 13 2.1.2 Schichtenmodell . 14 2.2 Monitoring . 16 2.2.1 SNMP .
    [Show full text]
  • Check MK Scheda Informativa
    Check MK Scheda Informativa Check MK Monitoraggio dei sistemi IT con tecnologie Open Source Controllo delle risorse aziendali Benefici principali Nell’attività quotidiana, al fine di garantire l’efficienza delle soluzioni di business, il Opera su Nagios, monitoraggio dello stato delle infrastrutture IT un'applicazione open è di grande importanza. source Di solito, avendo tale attività costi elevati, si Richiede risorse IT ricorre a sistemi di monitoraggio solo dove la molto contenute rete da amministrare è veramente complessa o dove la criticità dei servizi è molto elevata. Realizza un inventario automatico delle Un approccio semplice ed economico componenti CLEMPS aiuta i propri clienti a utilizzare controllate sui server Check MK, un tool Open Source che, dopo un’installazione veloce e una configurazione molto semplice, consente, in modo intuitivo, di eseguire, tramite Web browser e come illustrato in figura, il monitoring della propria rete, dei sistemi operativi e delle applicazioni attivate, senza alcun costo di licenza software. 1 Check MK Scheda Informativa Come funziona Ruolo dei Servizi Professionali I controlli avvengono tramite Check MK un plug-in di un altro strumento Open Source La prima attività dei servizi professionali CLEMPS denominato Nagios, che consente, tramite un riguarda l’attivazione della piattaforma di Web browser, il monitoraggio di computer, monitoraggio, che è basata su un sistema fisico o switch, router, stampanti e anche di servizi più virtuale Linux CentOS 7.x caratterizzato da: o meno standard come HTTP, FTP, POP3 e Un sistema Nagios e Check MK funzionante; similari. Un server Apache con il modulo mod_python per monitorare i sistemi; Come illustrato in figura, i dati vengono il package di sistema xinetd operativo; recuperati e visualizzati in quattro fasi: un sistema Postfix configurato per le notifiche email che perverranno a chi deve 1.
    [Show full text]
  • Debops Contrib Documentation Release Master
    DebOps Contrib Documentation Release master DebOps Contrib Collective Sep 03, 2017 Contents 1 DebOps Contrib 3 1.1 DebOps Contrib Playbooks.......................................3 2 Adding roles to the documentation5 3 Ansible roles provided in DebOps Contrib7 3.1 Ansible role: debops-contrib.apparmor.................................7 3.2 Ansible role: debops-contrib.bitcoind.................................. 13 3.3 Ansible role: debops-contrib.btrfs.................................... 20 3.4 Ansible role: debops-contrib.checkmk_agent.............................. 23 3.5 Ansible role: debops-contrib.checkmk_server.............................. 37 3.6 Ansible role: debops-contrib.dropbear_initramfs............................ 57 3.7 Ansible role: debops-contrib.etckeeper................................. 67 3.8 Ansible role: debops-contrib.firejail................................... 72 3.9 Ansible role: debops-contrib.foodsoft.................................. 80 3.10 Ansible role: debops-contrib.fuse.................................... 91 3.11 Ansible role: debops-contrib.gdnsd................................... 95 3.12 Ansible role: debops-contrib.homeassistant............................... 99 3.13 Ansible role: debops-contrib.kernel_module.............................. 107 3.14 Ansible role: debops-contrib.neurodebian................................ 112 3.15 Ansible role: debops-contrib.roundcube................................. 116 3.16 Ansible role: debops-contrib.snapshot_snapper............................. 131 3.17 Ansible role:
    [Show full text]