Izrada programskog alata za analiziranje mrežnog podatkovnog prometa

master's thesis

• Title (english): Development of a software tool for network data traffic analysis
• Author: Josip Verković
• Mentor: Alen Bažant (mentor)
• Committee member: Alen Bažant (predsjednik povjerenstva)
• Committee member: Miljenko Mikuc (član povjerenstva)
• Committee member: Marin Vuković (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2019-07-15, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Electrical Engineering

Abstract

Izgrađeno programsko rješenje za analiziranje i obrađivanje mrežnih paketa je modularan sustav koji se sastoji od tri glavna modula. To je središnji i glavni modul za prikupljanje, analizu i obradu mrežnih paketa izgrađen u programskom jeziku Go. Nadalje druga komponenta programskog rješenja je modul za pohranjivanje strukturiranih podataka generiranih kao rezultat obrade mrežnih paketa središnjeg modula izgrađena u programskom alatu Elasticsearch. I kao zadnja komponenta je modul za prikazivanje pohranjenih strukturiranih podataka i njihovu naprednu grafičku obradu izgrađen u programskom alatu Kibana.
Program u svom presjeku rada presreće mrežne pakete preko definiranih tokova, analizira, obrađuje prema implementiranoj programskoj logici te pohranjuje rezultat modulom za pohranjivanje strukturiranih podataka. Programsko rješenje je skalabilno i jednostavnim protokolnim koracima se može dodavati podrška za nove protokole. Postoje dva načina rada programskog rješenja. Prvi način je statički gdje se ulazni mrežni paketi zadaju preko ulazne datoteke sa mrežnim podacima. Ovaj način je prilagođen i namjena mu je grafička vizualizacija dnevnika logova. Drugi način je dinamična obrada mrežnih paketa gdje se podaci dobivaju preko definiranih mrežnih sučelja i tokova.

Abstract (english)

The built-in software solution for analyzing and processing network packs is a modular system that consists of three main modules. It is the central and main module for collecting, analyzing and processing network packets built in the Go programing language. Furthermore, the second component of the program solution is the structured data storage module generated as a result of the processing of the central module network packages built in the Elasticsearch program tool. And as the last component is a module for displaying stored structured data and their advanced graphics processing built in the Kibana program software.
The program in its cross-section intercepts network packets over defined flows, analyzes it, processes it according to the implemented program logic, and stores the result with the module for storing structured data. The program solution is scalable and simple protocol steps can support for new protocols. There are two ways to work with a program solution. The first mode is static where the input network packets are assigned through the input file with the network data. This mode is customized and its purpose is graphic visualization of logs. Another way is to dynamically process network packets where data is obtained over defined network interfaces and streams.

• Keywords: Go; Elasticsearch; Kibana; HTTP; mrežni protokoli; analizator; modul; tok; skalabilnost; vizualizacija; dnevnik; log; dinamičnost; otvorenost; modularnost
• Keywords (english): Go; Elasticsearch; Kibana; HTTP; network protocols; analyzer; module; stream; scalability; visualization; log; statically; dynamic; openness; modularity
• Language: croatian
• URN:NBN: urn:nbn:hr:168:288503
• Study programme: Title: Information and Communication Technology; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije (magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2020-01-07 22:48:15