Jinsi ya Kupata Orodha ya Bandari Zote Zilizofunguliwa kwenye Linux


Katika makala hii, tutazungumzia kwa ufupi kuhusu bandari katika mtandao wa kompyuta na kuhamia jinsi unaweza kuorodhesha bandari zote zilizo wazi kwenye Linux.

Katika mtandao wa kompyuta, na kwa hakika zaidi katika masharti ya programu, mlango ni huluki yenye mantiki ambayo hufanya kazi kama mwisho wa mawasiliano ili kutambua programu au mchakato fulani kwenye mfumo wa uendeshaji wa Linux. Ni nambari ya 16-bit (0 hadi 65535) ambayo hutofautisha programu moja kutoka kwa nyingine kwenye mifumo ya mwisho.

Itifaki mbili maarufu za usafirishaji wa Mtandao, Itifaki ya Udhibiti wa Usambazaji (TCP) na Itifaki ya Datagram ya Mtumiaji (UDP) na itifaki zingine ambazo hazijulikani sana hutumia nambari za bandari kwa vipindi vya mawasiliano (nambari za bandari chanzo na lengwa kwa kushirikiana na anwani za IP za chanzo na lengwa).

Kwa kuongeza, mchanganyiko wa anwani ya IP, bandari na itifaki kama vile TCP/UDP inajulikana kama tundu, na kila huduma lazima iwe na tundu la kipekee.

Ifuatayo ni aina tofauti za bandari:

  1. 0-1023 - Bandari Zinazojulikana, ambazo pia hujulikana kama Mfumo wa Bandari.
  2. 1024-49151 - Bandari Zilizosajiliwa, zinazojulikana pia kama Bandari za Watumiaji.
  3. 49152-65535 - Bandari Zenye Nguvu, pia hujulikana kama Bandari za Kibinafsi.

Unaweza kuona orodha ya programu tofauti na mchanganyiko wa bandari/itifaki katika faili ya /etc/services katika Linux kwa kutumia paka amri:

$ cat /etc/services 
OR
$ cat /etc/services | less
# /etc/services:
# $Id: services,v 1.48 2009/11/11 14:32:31 ovasik Exp $
#
# Network services, Internet style
# IANA services version: last updated 2009-11-10
#
# Note that it is presently the policy of IANA to assign a single well-known
# port number for both TCP and UDP; hence, most entries here have two entries
# even if the protocol doesn't support UDP operations.
# Updated from RFC 1700, ``Assigned Numbers'' (October 1994).  Not all ports
# are included, only the more common ones.
#
# The latest IANA port assignments can be gotten from
#       http://www.iana.org/assignments/port-numbers
# The Well Known Ports are those from 0 through 1023.
# The Registered Ports are those from 1024 through 49151
# The Dynamic and/or Private Ports are those from 49152 through 65535
#
# Each line describes one service, and is of the form:
#
# service-name  port/protocol  [aliases ...]   [# comment]

tcpmux          1/tcp                           # TCP port service multiplexer
tcpmux          1/udp                           # TCP port service multiplexer
rje             5/tcp                           # Remote Job Entry
rje             5/udp                           # Remote Job Entry
echo            7/tcp
echo            7/udp
discard         9/tcp           sink null
discard         9/udp           sink null
systat          11/tcp          users
systat          11/udp          users
daytime         13/tcp
daytime         13/udp
qotd            17/tcp          quote
qotd            17/udp          quote
msp             18/tcp                          # message send protocol
msp             18/udp                          # message send protocol
chargen         19/tcp          ttytst source
chargen         19/udp          ttytst source
ftp-data        20/tcp
ftp-data        20/udp
# 21 is registered to ftp, but also used by fsp
ftp             21/tcp
ftp             21/udp          fsp fspd
ssh             22/tcp                          # The Secure Shell (SSH) Protocol
ssh             22/udp                          # The Secure Shell (SSH) Protocol
telnet          23/tcp
telnet          23/udp

Ili kuorodhesha milango yote iliyo wazi au milango inayoendeshwa kwa sasa ikijumuisha TCP na UDP katika Linux, tutatumia netstat, ni zana madhubuti ya kufuatilia miunganisho ya mtandao na takwimu.

$ netstat -lntu

Proto Recv-Q Send-Q Local Address               Foreign Address             State      
tcp        0      0 0.0.0.0:22                  0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:3306                0.0.0.0:*                   LISTEN      
tcp        0      0 0.0.0.0:25                  0.0.0.0:*                   LISTEN      
tcp        0      0 :::22                       :::*                        LISTEN      
tcp        0      0 :::80                       :::*                        LISTEN      
tcp        0      0 :::25                       :::*                        LISTEN      
udp        0      0 0.0.0.0:68                  0.0.0.0:*                               

Wapi,

  1. -l - huchapisha soketi za kusikiliza pekee
  2. -n - inaonyesha nambari ya mlango
  3. -t - huwezesha uorodheshaji wa milango ya tcp
  4. -u - huwezesha uorodheshaji wa milango ya udp

Unaweza pia kutumia ss amri, shirika linalojulikana sana la kukagua soketi kwenye mfumo wa Linux. Tekeleza amri iliyo hapa chini ili kuorodhesha bandari zako zote za TCP na UCP zilizo wazi:

$ ss -lntu

Netid State      Recv-Q Send-Q               Local Address:Port       Peer Address:Port 
udp   UNCONN     0      0                    *:68                     *:*     
tcp   LISTEN     0      128                  :::22                    :::*     
tcp   LISTEN     0      128                  *:22                     *:*     
tcp   LISTEN     0      50                   *:3306                   *:*     
tcp   LISTEN     0      128                  :::80                    ::*     
tcp   LISTEN     0      100                  :::25                    :::*     
tcp   LISTEN     0      100                  *:25  

Fanya iwe ya uhakika kusoma kurasa za mtu za amri zilizo hapo juu kwa habari zaidi ya utumiaji.

Kwa muhtasari, kuelewa dhana ya bandari katika mitandao ya kompyuta ni muhimu sana kwa wasimamizi wa mfumo na mtandao. Unaweza pia kupitia mwongozo huu wa netstat na mifano rahisi, sahihi na iliyoelezewa vyema.

Mwisho kabisa, wasiliana nasi kwa kushiriki mbinu zingine za kuorodhesha milango iliyo wazi katika Linux au kuuliza swali kupitia fomu ya majibu iliyo hapa chini.