IM records model(up)

At present, a small number of products on the market can be made available to business owners for in-house staff management of the Internet acts, including instant messaging software with the use of the contents of control, including control of the product model with the IM instant messaging software features, this first part of the specifications do Explanation, or MIS managers will be able to know whether or not the application of the product structure of your organization network. Generally speaking, the network monitoring products are several types of models, my simple network architecture that icon, if your organization has a Load-balancing equipment, VPN routes, different sub-paragraph cutting, the situation is not so simple, first understand a word the meaning of the model, if the network structure more complex, we can analyze what model would be more appropriate.

1.In-Line Mode

Will usually called Gateway Mode Mode to install because it is normally mounted on the outside of the trunk access, similar to the gateway location, the so-called In-Line Mode is the name implies, "inside-line" mode, meaning that devices will become a line Part of such a product are normally accompanied by a network of more than 2-hole, one that is linking up external access, is a downlink that is connected For the internal control of the region, the model with the gateway is the biggest difference is that Must be at the gateway to all Internet facilities side of the head, while the In-Line Mode control of the equipment is not responsible for packet-oriented, usually in charge of the records and refused to function, so in fact you can install the network in any one of the nodes, But only under the control of the region by such a product is usually through the analysis and packet filtering technology, all the flow lines to do packet inspection, due to a user's network of more than a packet node, so they are The on-speed packet will be a little impact, including the bandwidth and speed of response, and in general usually need to use this model of the record and control the application of most of the seventh floor of the packet analysis, which is to be To unlock the inner packet of information, for the characteristics of the packet to determine what application, and then the contents of the agreement in accordance with the reverse combination can be read back to the human operator or the content of the record after it, can be seen this type of product The model required a very large number of computing resources, especially when you reverse the conditions and agreements (For the application of control) to set more of the load on the bigger machine, under normal circumstances, the vendor will provide the equipment which the proposed control Pipe or the number of packets through flux, but also the types of machines depending on the application of the complexity of the agreement to raise or lower the processor load, so the actual test recommended by the manufacturer model apply to your organization's environment is quite appropriate. This model is commonly used by the greatest risk from the product or if the instability of the crash will cause the region under the control of the network break, so if it can not bear the risk of disconnected services or the use of Side, will have to consider again and again, and secondly, due to the system, the emergence of the average load is not (as the use of the user) and occasionally blocked packet will be the case, that is to say, watching a Web page to wait for a long time, and was about to give up When all of a sudden all the pages and data files at the same time, and this is possible because the equipment to deal with, or less than a full load caused by the buffer zone. The use of this model is usually needed to control the functions, In-line mode can be done on Packets discarded or tampered with (their input did not appear in the data communications software on the) moves.

2.Sniffer Mode

Also known as the monitor mode, also called bypass mode that is, early use of the Hub (Hub) times (most of the equipment currently used Switch is the switch) characteristics, that is, before the closure of the hub All of the Port package is to be heard, that if you have a 24Ports the hub in the hub 10/100 on the bandwidth is shared, because each packet will be sent to each Port, take advantage of this Kinds of characteristics of the uplink and downlink network connected to the Hub and then measuring equipment, road access is also in the Hub, the device will be able to flow through the line on the packet for monitoring and measuring recorded, so even if the device does not crash or damage The package will affect the flow of network equipment to reduce the environmental impact of the operation of the equipment will not affect the performance of the network-through efficiency, however, one of the biggest weaknesses of the model can only be recorded for monitoring and measuring the contents of the Demand, if the need for control, and equipment to the packet and there is no ownership of the packets do not refuse to abandon or tamper with the action. In addition, advances in technology, as a result, the market has been the hub of all evolution To the extent of the switch, and the switch is characterized by in-house than on the circuit, and when the Port of MAC related packet switch to the Port will send packets to carry out, so greatly improved the local area network The packet exchange efficiency, but also because of this, through the switch of focus to the network in which to carry out monitoring is difficult because the equipment and no real communication with the users do so packets will not necessarily flow to where the equipment Port, it is difficult to purchase Hub of the shortcomings of the model, however, to how high-tech now so low that we may not ask for more? It, similar to the noble Cisco networking equipment suppliers parts of the high-end Switch MirrorPort have on the functions, that is, can be set by the Switch on a 2 Port do Mirror so that the function of the 2 Port to achieve a similar effect such as the HUB will be able to monitor packets to resolve the issue, but!! ! Equipment as compared with the current general price for Switch will be more than 10 times .... ..... Ai Hua Delai it? Revealed another secretly, as a result of the market price of Switch are very, very bloody, Do you think there will be Switch packets and then identify the functions of the exchange .... ... In fact, strictly speaking, the machine became Switch may be time for you! Time, the exchange of packets as a result of the chaos and in-house to save costs and reduce the CPU a temporary table or not Algorithm strong, and usually Switch will become the Hub ... Ha ha ... not to say that I am talking about!