{"id":43918,"date":"2026-08-07T17:01:04","date_gmt":"2026-08-07T14:01:04","guid":{"rendered":"https:\/\/fatihsoysal.com\/blog\/?p=43918"},"modified":"2026-08-07T17:01:39","modified_gmt":"2026-08-07T14:01:39","slug":"lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber","status":"publish","type":"post","link":"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/","title":{"rendered":"LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber"},"content":{"rendered":"<h2>LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber<\/h2>\n<p>Modern web uygulamalar\u0131n\u0131n omurgas\u0131n\u0131 olu\u015fturan LAMP (Linux, Apache, MySQL, PHP) sunucular\u0131, s\u00fcrekli olarak d\u0131\u015f d\u00fcnyadan gelen isteklere yan\u0131t verir ve veri al\u0131\u015fveri\u015finde bulunur. Bu yo\u011fun trafik ak\u0131\u015f\u0131, sunucu performans\u0131n\u0131, g\u00fcvenli\u011fini ve genel kararl\u0131l\u0131\u011f\u0131n\u0131 do\u011frudan etkileyen kritik bir unsurdur. Bir LAMP sunucusunun a\u011f trafi\u011fini etkili bir \u015fekilde denetlemek, potansiyel g\u00fcvenlik tehditlerini erken a\u015famada tespit etmek, performans darbo\u011fazlar\u0131n\u0131 gidermek ve sistemin genel sa\u011fl\u0131\u011f\u0131n\u0131 korumak i\u00e7in hayati \u00f6neme sahiptir. Geleneksel a\u011f izleme ara\u00e7lar\u0131 genellikle a\u011f aray\u00fcz\u00fc d\u00fczeyinde veya paket baz\u0131nda s\u0131n\u0131rl\u0131 g\u00f6r\u00fcn\u00fcrl\u00fck sunarken, <code>sysdig<\/code> gibi g\u00fc\u00e7l\u00fc bir sistem denetim arac\u0131, \u00e7ekirdek seviyesindeki sistem \u00e7a\u011fr\u0131lar\u0131na eri\u015ferek \u00e7ok daha derin ve anlaml\u0131 bir g\u00f6r\u00fcn\u00fcm sa\u011flar. CentOS 7 \u00fczerinde bir LAMP sunucusunda <code>sysdig<\/code> kullanarak a\u011f trafi\u011fini nas\u0131l denetleyece\u011finizi bu kapsaml\u0131 makalede ad\u0131m ad\u0131m inceleyece\u011fiz.<\/p>\n<h3>Neden A\u011f Trafi\u011fi Denetimi Bu Kadar \u00d6nemli?<\/h3>\n<p>A\u011f trafi\u011fi denetimi, bir LAMP sunucusunun operasyonel g\u00fcvenilirli\u011fi ve s\u00fcreklili\u011fi i\u00e7in temel bir gerekliliktir. Bu denetim, \u00e7e\u015fitli kritik alanlarda sunucu y\u00f6neticilerine ve geli\u015ftiricilere paha bi\u00e7ilmez bilgiler sunar:<\/p>\n<p>*   <strong>G\u00fcvenlik Tehditlerini Tespit Etme:<\/strong> Sunucunuza y\u00f6nelik yetkisiz eri\u015fim giri\u015fimleri, DDoS sald\u0131r\u0131lar\u0131, SQL enjeksiyonlar\u0131 veya XSS gibi web tabanl\u0131 sald\u0131r\u0131lar, a\u011f trafi\u011finde anormal desenler olu\u015fturur. <code>sysdig<\/code> ile bu t\u00fcr anormal ba\u011flant\u0131 giri\u015fimlerini, ola\u011fand\u0131\u015f\u0131 port kullan\u0131m\u0131n\u0131 veya beklenmedik giden ba\u011flant\u0131lar\u0131 ger\u00e7ek zamanl\u0131 olarak izleyerek g\u00fcvenlik ihlallerini \u00f6nleyebilir veya h\u0131zla m\u00fcdahale edebilirsiniz. \u00d6rne\u011fin, web sunucusundan d\u0131\u015far\u0131ya do\u011fru ba\u015flat\u0131lan beklenmedik bir ba\u011flant\u0131, bir web kabu\u011funun (web shell) veya k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131n i\u015faret\u00e7isi olabilir. MySQL portuna yap\u0131lan ba\u015far\u0131s\u0131z ba\u011flant\u0131 denemelerinin yo\u011funlu\u011fu, bir kaba kuvvet sald\u0131r\u0131s\u0131n\u0131n g\u00f6stergesi olabilir.<br \/>\n*   <strong>Performans Darbo\u011fazlar\u0131n\u0131 Belirleme:<\/strong> Yava\u015f y\u00fcklenen web sayfalar\u0131, veritaban\u0131 sorgular\u0131n\u0131n gecikmesi veya genel sistem yan\u0131t s\u00fcresindeki d\u00fc\u015f\u00fc\u015fler genellikle a\u011f katman\u0131nda veya ili\u015fkili s\u00fcre\u00e7lerdeki sorunlardan kaynaklan\u0131r. <code>sysdig<\/code>, Apache veya Nginx s\u00fcre\u00e7lerinin a\u011f ba\u011flant\u0131lar\u0131n\u0131, MySQL sunucusunun istemci ba\u011flant\u0131lar\u0131n\u0131 ve PHP s\u00fcre\u00e7lerinin d\u0131\u015f kaynaklara (\u00f6rne\u011fin, API&#8217;ler) yapt\u0131\u011f\u0131 \u00e7a\u011fr\u0131lar\u0131 detayl\u0131 bir \u015fekilde inceleyerek performans sorunlar\u0131n\u0131n k\u00f6kenini anlaman\u0131za yard\u0131mc\u0131 olur. Hangi s\u00fcrecin ne kadar a\u011f bant geni\u015fli\u011fi kulland\u0131\u011f\u0131, hangi ba\u011flant\u0131lar\u0131n uzun s\u00fcrd\u00fc\u011f\u00fc veya hangi IP adreslerinden yo\u011fun istek geldi\u011fi gibi bilgiler, optimizasyon i\u00e7in kritik ipu\u00e7lar\u0131 sunar.<br \/>\n*   <strong>Uyumluluk ve Yasal Gereklilikler:<\/strong> Baz\u0131 end\u00fcstriler ve yasal d\u00fczenlemeler, a\u011f trafi\u011finin belirli bir d\u00fczeyde izlenmesini ve kaydedilmesini gerektirir. Hassas verilerin i\u015flendi\u011fi sunucularda, veri ak\u0131\u015f\u0131n\u0131 denetlemek ve belirli protokollere uyuldu\u011funu do\u011frulamak yasal zorunluluk olabilir. <code>sysdig<\/code> ile detayl\u0131 denetim g\u00fcnl\u00fckleri olu\u015fturarak bu t\u00fcr gereklilikleri kar\u015f\u0131layabilirsiniz.<br \/>\n*   <strong>Sorun Giderme ve Hata Ay\u0131klama:<\/strong> Bir uygulama hatas\u0131 veya sistem ar\u0131zas\u0131 durumunda, a\u011f trafi\u011fi g\u00fcnl\u00fckleri ve ger\u00e7ek zamanl\u0131 izleme, sorunun kayna\u011f\u0131n\u0131 h\u0131zla bulmak i\u00e7in vazge\u00e7ilmezdir. \u00d6rne\u011fin, bir PHP uygulamas\u0131n\u0131n harici bir hizmete ba\u011flanamamas\u0131 durumunda, <code>sysdig<\/code> ile ilgili a\u011f ba\u011flant\u0131lar\u0131n\u0131 izleyerek ba\u011flant\u0131 hatas\u0131n\u0131n nedenini (DNS \u00e7\u00f6z\u00fcn\u00fcrl\u00fc\u011f\u00fc, g\u00fcvenlik duvar\u0131, hedef sunucu eri\u015filemezli\u011fi vb.) tespit edebilirsiniz.<br \/>\n*   <strong>Kaynak Kullan\u0131m\u0131 Analizi:<\/strong> Hangi uygulamalar\u0131n veya kullan\u0131c\u0131lar\u0131n a\u011f kaynaklar\u0131n\u0131 yo\u011fun bir \u015fekilde kulland\u0131\u011f\u0131n\u0131 anlamak, kaynak tahsisini optimize etmek ve olas\u0131 k\u00f6t\u00fcye kullan\u0131mlar\u0131 \u00f6nlemek i\u00e7in \u00f6nemlidir. <code>sysdig<\/code> ile s\u00fcre\u00e7 baz\u0131nda a\u011f kullan\u0131m\u0131n\u0131 izleyerek bu t\u00fcr analizleri yapabilirsiniz.<\/p>\n<p>Bu nedenlerden dolay\u0131, bir LAMP sunucusunda a\u011f trafi\u011fi denetimi, proaktif bir g\u00fcvenlik duru\u015fu sergilemek, performans\u0131 en \u00fcst d\u00fczeye \u00e7\u0131karmak ve operasyonel verimlili\u011fi sa\u011flamak i\u00e7in temel bir ad\u0131md\u0131r.<\/p>\n<h3>Neden sysdig?<\/h3>\n<p>Piyasada bir\u00e7ok a\u011f izleme ve denetim arac\u0131 bulunurken, <code>sysdig<\/code> \u00f6zellikle sistem \u00e7a\u011fr\u0131lar\u0131 seviyesinde sundu\u011fu derin g\u00f6r\u00fcn\u00fcrl\u00fck ve esneklik sayesinde LAMP sunucusu denetimi i\u00e7in \u00f6ne \u00e7\u0131kmaktad\u0131r. \u0130\u015fte <code>sysdig<\/code>&#8216;i tercih etmeniz i\u00e7in ba\u015fl\u0131ca nedenler:<\/p>\n<p>*   <strong>\u00c7ekirdek Seviyesinde Derin G\u00f6r\u00fcn\u00fcrl\u00fck:<\/strong> <code>sysdig<\/code>, Linux \u00e7ekirde\u011fine bir mod\u00fcl olarak entegre olur ve t\u00fcm sistem \u00e7a\u011fr\u0131lar\u0131n\u0131 yakalar. Bu, a\u011f trafi\u011fi de dahil olmak \u00fczere her t\u00fcrl\u00fc sistem etkinli\u011fine benzersiz bir derinlikte eri\u015fim sa\u011flar. Geleneksel paket yakalay\u0131c\u0131lar (\u00f6rne\u011fin <code>tcpdump<\/code>) yaln\u0131zca a\u011f aray\u00fcz\u00fcnden ge\u00e7en paketleri g\u00f6r\u00fcrken, <code>sysdig<\/code> bir s\u00fcrecin neden bir a\u011f ba\u011flant\u0131s\u0131 kurdu\u011funu veya hangi sistem \u00e7a\u011fr\u0131lar\u0131n\u0131n bu ba\u011flant\u0131y\u0131 tetikledi\u011fini g\u00f6sterir.<br \/>\n*   <strong>S\u00fcre\u00e7 Odakl\u0131 Yakla\u015f\u0131m:<\/strong> <code>sysdig<\/code>, a\u011f etkinliklerini belirli s\u00fcre\u00e7lerle ili\u015fkilendirir. Bu, hangi uygulaman\u0131n (Apache, MySQL, PHP-FPM) hangi IP adresine veya portuna ba\u011fland\u0131\u011f\u0131n\u0131, ne kadar veri g\u00f6nderip ald\u0131\u011f\u0131n\u0131 net bir \u015fekilde g\u00f6rmenizi sa\u011flar. Bir web sunucusundan beklenmedik giden ba\u011flant\u0131lar g\u00f6rd\u00fc\u011f\u00fcn\u00fczde, bunun hangi Apache veya PHP s\u00fcrecinden kaynakland\u0131\u011f\u0131n\u0131 an\u0131nda tespit edebilirsiniz.<br \/>\n*   <strong>G\u00fc\u00e7l\u00fc Filtreleme Mekanizmas\u0131:<\/strong> <code>sysdig<\/code>, karma\u015f\u0131k filtre ifadeleri kullanarak yaln\u0131zca ilgilendi\u011finiz olaylar\u0131 yakalaman\u0131za olanak tan\u0131r. S\u00fcre\u00e7 ad\u0131na, kullan\u0131c\u0131ya, dosya tan\u0131mlay\u0131c\u0131s\u0131na (socket), IP adresine, porta, protokole ve hatta sistem \u00e7a\u011fr\u0131s\u0131 t\u00fcr\u00fcne g\u00f6re filtreleme yapabilirsiniz. Bu, g\u00fcr\u00fclt\u00fcy\u00fc azaltarak hedeflenen denetimler yapman\u0131z\u0131 sa\u011flar.<br \/>\n*   <strong>Zengin \u00c7\u0131kt\u0131 Formatlar\u0131 ve Enstr\u00fcmanlar:<\/strong> <code>sysdig<\/code>, ham olaylar\u0131 g\u00f6sterebilece\u011fi gibi, \u00e7e\u015fitli &#8220;scap&#8221; (system call capture) dosyalar\u0131na kaydedebilir ve <code>csysdig<\/code> gibi interaktif bir aray\u00fcz sunar. Ayr\u0131ca, sistem \u00e7a\u011fr\u0131lar\u0131n\u0131 analiz ederek <code>netstat<\/code>, <code>top<\/code>, <code>lsof<\/code> gibi komutlar\u0131n i\u015flevselli\u011fini taklit eden &#8220;chisels&#8221; ad\u0131 verilen \u00f6nceden tan\u0131mlanm\u0131\u015f ara\u00e7lar\u0131 (Lua betikleri) bar\u0131nd\u0131r\u0131r. Bu chisels, a\u011f ba\u011flant\u0131lar\u0131n\u0131, en \u00e7ok a\u011f kullanan s\u00fcre\u00e7leri, HTTP trafi\u011fini (\u015fifrelenmemi\u015f ise) ve daha fazlas\u0131n\u0131 kolayca izlemenizi sa\u011flar.<br \/>\n*   <strong>D\u00fc\u015f\u00fck Performans Etkisi:<\/strong> \u00c7ekirdek mod\u00fcl\u00fc sayesinde, <code>sysdig<\/code> genellikle di\u011fer izleme ara\u00e7lar\u0131na k\u0131yasla daha d\u00fc\u015f\u00fck bir performans y\u00fck\u00fcyle \u00e7al\u0131\u015f\u0131r, \u00e7\u00fcnk\u00fc verileri do\u011frudan \u00e7ekirdekten al\u0131r ve kullan\u0131c\u0131 alan\u0131na kopyalama ihtiyac\u0131n\u0131 azalt\u0131r.<br \/>\n*   <strong>Esneklik ve Geni\u015fletilebilirlik:<\/strong> Lua betikleri arac\u0131l\u0131\u011f\u0131yla <code>sysdig<\/code>&#8216;in yeteneklerini geni\u015fletebilir, \u00f6zel denetim kurallar\u0131 olu\u015fturabilir veya belirli olaylara yan\u0131t veren otomasyonlar geli\u015ftirebilirsiniz.<\/p>\n<p>Bu \u00f6zellikler, <code>sysdig<\/code>&#8216;i bir LAMP sunucusunda a\u011f trafi\u011fi denetimi i\u00e7in vazge\u00e7ilmez bir ara\u00e7 haline getirir. Hem g\u00fcvenlik hem de performans a\u00e7\u0131s\u0131ndan derinlemesine analizler yapma yetene\u011fi sunar.<\/p>\n<h3>LAMP Sunucusu Ba\u011flam\u0131nda A\u011f Trafi\u011fi Denetimi<\/h3>\n<p>Bir LAMP sunucusu, web uygulamalar\u0131n\u0131 \u00e7al\u0131\u015ft\u0131rmak i\u00e7in bir dizi bile\u015fenin uyumlu bir \u015fekilde \u00e7al\u0131\u015fmas\u0131n\u0131 gerektirir. Bu bile\u015fenlerin her biri, a\u011f trafi\u011fi denetimi a\u00e7\u0131s\u0131ndan farkl\u0131 ilgi alanlar\u0131 sunar:<\/p>\n<p>*   <strong>Apache (veya Nginx):<\/strong> Web sunucusu olarak, d\u0131\u015f d\u00fcnyadan gelen HTTP\/HTTPS isteklerini dinler ve i\u015fler. Denetimde, hangi IP adreslerinden istek geldi\u011fi, hangi URL&#8217;lere eri\u015fildi\u011fi, ka\u00e7 ba\u011flant\u0131n\u0131n a\u00e7\u0131k oldu\u011fu ve bu ba\u011flant\u0131lar\u0131n ne kadar veri transfer etti\u011fi gibi bilgiler \u00f6nemlidir. Ola\u011fand\u0131\u015f\u0131 y\u00fcksek ba\u011flant\u0131 say\u0131lar\u0131 veya belirli bir IP&#8217;den gelen yo\u011fun istekler DDoS sald\u0131r\u0131s\u0131 veya tarama giri\u015fimi olabilir.<br \/>\n*   <strong>MySQL:<\/strong> Veritaban\u0131 sunucusu, genellikle web sunucusuyla ayn\u0131 makinede veya ayr\u0131 bir sunucuda \u00e7al\u0131\u015f\u0131r. Denetimde, MySQL&#8217;e hangi IP adreslerinden ba\u011flant\u0131 kuruldu\u011fu (genellikle sadece localhost veya belirli uygulama sunucular\u0131), ba\u015far\u0131s\u0131z ba\u011flant\u0131 denemeleri, uzun s\u00fcren sorgular ve veritaban\u0131ndan d\u0131\u015far\u0131ya do\u011fru yap\u0131lan beklenmedik ba\u011flant\u0131lar (e\u011fer b\u00f6yle bir senaryo varsa) incelenir. MySQL portuna (varsay\u0131lan 3306) d\u0131\u015far\u0131dan gelen yetkisiz ba\u011flant\u0131 giri\u015fimleri ciddi bir g\u00fcvenlik riskidir.<br \/>\n*   <strong>PHP:<\/strong> Genellikle Apache ile mod\u00fcl olarak veya PHP-FPM (FastCGI Process Manager) arac\u0131l\u0131\u011f\u0131yla \u00e7al\u0131\u015f\u0131r. PHP betikleri, veritaban\u0131na ba\u011flan\u0131r, harici API&#8217;lere istek g\u00f6nderir veya dosya sistemi i\u015flemleri yapar. Denetimde, PHP s\u00fcre\u00e7lerinin d\u0131\u015far\u0131ya do\u011fru hangi ba\u011flant\u0131lar\u0131 kurdu\u011fu (\u00f6rne\u011fin, bir \u00fc\u00e7\u00fcnc\u00fc taraf API&#8217;ye yap\u0131lan cURL istekleri), bu ba\u011flant\u0131lar\u0131n performans\u0131 ve herhangi bir k\u00f6t\u00fc ama\u00e7l\u0131 PHP beti\u011finin beklenmedik a\u011f etkinli\u011fi yarat\u0131p yaratmad\u0131\u011f\u0131 izlenir.<\/p>\n<p><code>sysdig<\/code>, bu \u00fc\u00e7 ana bile\u015fenin a\u011f etkile\u015fimlerini s\u00fcre\u00e7 baz\u0131nda izleyerek, her birinin kendine \u00f6zg\u00fc g\u00fcvenlik ve performans gereksinimlerini kar\u015f\u0131laman\u0131za olanak tan\u0131r.<\/p>\n<h3>\u00d6n Gereklilikler<\/h3>\n<p><code>sysdig<\/code> ile LAMP sunucunuzda a\u011f trafi\u011fi denetimi yapmaya ba\u015flamadan \u00f6nce, a\u015fa\u011f\u0131daki \u00f6n gerekliliklerin kar\u015f\u0131land\u0131\u011f\u0131ndan emin olun:<\/p>\n<p>*   <strong>CentOS 7 \u0130\u015fletim Sistemi:<\/strong> Bu rehber CentOS 7 \u00fczerinde \u00e7al\u0131\u015fmay\u0131 varsaymaktad\u0131r.<br \/>\n*   <strong>LAMP Sunucusu Kurulumu:<\/strong> Apache HTTP Sunucusu, MySQL (veya MariaDB) ve PHP&#8217;nin sunucunuzda kurulu ve \u00e7al\u0131\u015f\u0131r durumda olmas\u0131 gerekmektedir.<br \/>\n*   <strong>Root veya Sudo Yetkileri:<\/strong> <code>sysdig<\/code>&#8216;i kurmak ve \u00e7al\u0131\u015ft\u0131rmak i\u00e7in k\u00f6k kullan\u0131c\u0131 (root) veya sudo yetkilerine sahip bir kullan\u0131c\u0131 olman\u0131z gerekmektedir.<br \/>\n*   <strong>Temel Linux Komut Sat\u0131r\u0131 Bilgisi:<\/strong> Linux komutlar\u0131n\u0131 ve dosya sistemini kullanma konusunda temel bilgiye sahip olmak faydal\u0131 olacakt\u0131r.<br \/>\n*   <strong>\u0130nternet Ba\u011flant\u0131s\u0131:<\/strong> <code>sysdig<\/code> paketlerini indirmek i\u00e7in sunucunuzun internete ba\u011fl\u0131 olmas\u0131 gerekmektedir.<\/p>\n<h3>sysdig Kurulumu<\/h3>\n<p>CentOS 7 \u00fczerinde <code>sysdig<\/code>&#8216;i kurmak olduk\u00e7a basittir. A\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izleyerek kurulumu ger\u00e7ekle\u015ftirebilirsiniz:<\/p>\n<p>1.  <strong>sysdig Deposu Ekleme:<\/strong> <code>sysdig<\/code> paketleri CentOS&#8217;un varsay\u0131lan depolar\u0131nda bulunmaz. Bu nedenle, <code>sysdig<\/code>&#8216;in kendi deposunu sisteme eklemeniz gerekir.<\/p>\n<pre><code class=\"language-bash\">sudo curl -s https:\/\/s3.amazonaws.com\/download.draios.com\/stable\/install-sysdig | sudo bash<\/code><\/pre>\n<p>    Bu komut, <code>sysdig<\/code> deposunu otomatik olarak sisteminize ekler ve GPG anahtar\u0131n\u0131 i\u00e7e aktar\u0131r.<\/p>\n<p>2.  <strong>sysdig ve Kernel Mod\u00fcl\u00fcn\u00fc Kurma:<\/strong> Depo eklendikten sonra, <code>yum<\/code> paket y\u00f6neticisini kullanarak <code>sysdig<\/code>&#8216;i ve \u00e7ekirdek mod\u00fcl\u00fcn\u00fc kurabilirsiniz.<\/p>\n<pre><code class=\"language-bash\">sudo yum install sysdig kernel-devel-&quot;$(uname -r)&quot;<\/code><\/pre>\n<p>    <code>kernel-devel-\"$(uname -r)\"<\/code> ifadesi, sisteminizde \u00e7al\u0131\u015fan mevcut \u00e7ekirdek s\u00fcr\u00fcm\u00fcne uygun <code>kernel-devel<\/code> paketini kurar. Bu paket, <code>sysdig<\/code> \u00e7ekirdek mod\u00fcl\u00fcn\u00fcn derlenmesi i\u00e7in gereklidir. Kurulum s\u0131ras\u0131nda ba\u011f\u0131ml\u0131l\u0131klar da otomatik olarak y\u00fcklenecektir.<\/p>\n<p>3.  <strong>Kurulumu Do\u011frulama:<\/strong> Kurulum tamamland\u0131ktan sonra, <code>sysdig<\/code>&#8216;in do\u011fru bir \u015fekilde \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulamak i\u00e7in basit bir komut \u00e7al\u0131\u015ft\u0131rabilirsiniz:<\/p>\n<pre><code class=\"language-bash\">sudo sysdig -V<\/code><\/pre>\n<p>    Bu komut, <code>sysdig<\/code>&#8216;in s\u00fcr\u00fcm numaras\u0131n\u0131 g\u00f6sterecektir. Ayr\u0131ca, <code>sysdig<\/code>&#8216;i herhangi bir filtre olmadan \u00e7al\u0131\u015ft\u0131rarak sistemdeki ger\u00e7ek zamanl\u0131 olaylar\u0131 g\u00f6rmeye ba\u015flayabilirsiniz:<\/p>\n<pre><code class=\"language-bash\">sudo sysdig<\/code><\/pre>\n<p>    E\u011fer ekran\u0131n\u0131zda sistem olaylar\u0131 akmaya ba\u015fl\u0131yorsa, <code>sysdig<\/code> ba\u015far\u0131yla kurulmu\u015f ve \u00e7al\u0131\u015f\u0131yor demektir. \u00c7\u0131kmak i\u00e7in <code>Ctrl+C<\/code> tu\u015flar\u0131na basabilirsiniz.<\/p>\n<h3>Temel sysdig Kullan\u0131m\u0131 ve A\u011f Trafi\u011fi Denetimi<\/h3>\n<p><code>sysdig<\/code>&#8216;in temel komut yap\u0131s\u0131 <code>sudo sysdig [filtre] [\u00e7\u0131kt\u0131 format\u0131\/chisels]<\/code> \u015feklindedir. A\u011f trafi\u011fini denetlemek i\u00e7in kullanabilece\u011finiz baz\u0131 temel komutlar ve chisels&#8217;lar \u015funlard\u0131r:<\/p>\n<p>1.  <strong>T\u00fcm A\u011f Ba\u011flant\u0131lar\u0131n\u0131 Listeleme (netstat benzeri):<\/strong><br \/>\n    <code>sysdig<\/code>&#8216;in <code>netstat<\/code> chisel&#8217;\u0131, aktif a\u011f ba\u011flant\u0131lar\u0131n\u0131 ve dinleme soketlerini <code>netstat<\/code> komutuna benzer bir formatta g\u00f6sterir.<\/p>\n<pre><code class=\"language-bash\">sudo sysdig -c netstat<\/code><\/pre>\n<p>    Bu, TCP, UDP ve UNIX soketlerini g\u00f6sterir. <code>netstat -p<\/code> gibi s\u00fcre\u00e7 bilgilerini de i\u00e7erir.<\/p>\n<p>2.  <strong>En \u00c7ok A\u011f Kullanan S\u00fcre\u00e7leri G\u00f6sterme (iftop\/nethogs benzeri):<\/strong><br \/>\n    <code>spy_iface<\/code> chisel&#8217;\u0131, a\u011f aray\u00fcz\u00fcndeki en \u00e7ok trafik olu\u015fturan s\u00fcre\u00e7leri g\u00f6sterir.<\/p>\n<pre><code class=\"language-bash\">sudo sysdig -c spy_iface<\/code><\/pre>\n<p>    Bu, hangi s\u00fcre\u00e7lerin (\u00f6rn. <code>httpd<\/code>, <code>mysqld<\/code>, <code>php-fpm<\/code>) a\u011f bant geni\u015fli\u011fini en \u00e7ok kulland\u0131\u011f\u0131n\u0131 anlaman\u0131za yard\u0131mc\u0131 olur.<\/p>\n<p>3.  <strong>Belirli Portlardaki Trafi\u011fi \u0130zleme:<\/strong><br \/>\n    LAMP sunucusunda genellikle Apache i\u00e7in 80 (HTTP) ve 443 (HTTPS), MySQL i\u00e7in 3306 portlar\u0131 kullan\u0131l\u0131r. Bu portlardaki trafi\u011fi izlemek i\u00e7in filtreler kullanabiliriz.<\/p>\n<p>    *   <strong>HTTP ve HTTPS trafi\u011fini izleme:<\/strong><\/p>\n<pre><code class=\"language-bash\">sudo sysdig &quot;fd.port=80 or fd.port=443&quot;<\/code><\/pre>\n<p>        Bu komut, 80 veya 443 numaral\u0131 portlar \u00fczerinden ger\u00e7ekle\u015fen t\u00fcm a\u011f olaylar\u0131n\u0131 g\u00f6sterir. \u00c7\u0131kt\u0131da ba\u011flant\u0131 kuran s\u00fcre\u00e7, uzak IP adresi, g\u00f6nderilen\/al\u0131nan veri miktar\u0131 gibi bilgiler yer al\u0131r.<\/p>\n<p>    *   <strong>MySQL trafi\u011fini izleme:<\/strong><\/p>\n<pre><code class=\"language-bash\">sudo sysdig &quot;fd.port=3306&quot;<\/code><\/pre>\n<p>        Bu komut, MySQL portu \u00fczerindeki t\u00fcm etkinlikleri (ba\u011flant\u0131 kurma, veri g\u00f6nderme\/alma) g\u00f6sterecektir. Genellikle bu trafi\u011fin <code>mysqld<\/code> s\u00fcreci taraf\u0131ndan y\u00f6netildi\u011fini g\u00f6r\u00fcrs\u00fcn\u00fcz.<\/p>\n<p>4.  <strong>S\u00fcre\u00e7 Ad\u0131na G\u00f6re Filtreleme:<\/strong><br \/>\n    Belirli bir s\u00fcrecin (\u00f6rne\u011fin Apache veya MySQL) a\u011f etkile\u015fimlerini izlemek i\u00e7in <code>proc.name<\/code> filtresini kullanabilirsiniz.<\/p>\n<p>    *   <strong>Apache (httpd) s\u00fcre\u00e7lerinin a\u011f etkinliklerini izleme:<\/strong><\/p>\n<pre><code class=\"language-bash\">sudo sysdig &quot;proc.name=httpd and (fd.port=80 or fd.port=443)&quot;<\/code><\/pre>\n<p>        Bu komut, yaln\u0131zca <code>httpd<\/code> s\u00fcre\u00e7leri taraf\u0131ndan 80 veya 443 portlar\u0131 \u00fczerinden yap\u0131lan a\u011f ba\u011flant\u0131lar\u0131n\u0131 g\u00f6sterir. Bu, web sunucusunun d\u0131\u015f d\u00fcnyayla nas\u0131l etkile\u015fime girdi\u011fini anlamak i\u00e7in \u00e7ok faydal\u0131d\u0131r.<\/p>\n<p>    *   <strong>MySQL (mysqld) s\u00fcre\u00e7lerinin a\u011f etkinliklerini izleme:<\/strong><\/p>\n<pre><code class=\"language-bash\">sudo sysdig &quot;proc.name=mysqld and fd.port=3306&quot;<\/code><\/pre>\n<p>        Bu komut, <code>mysqld<\/code> s\u00fcrecinin 3306 portu \u00fczerindeki t\u00fcm a\u011f etkile\u015fimlerini izler. Bu, veritaban\u0131 ba\u011flant\u0131lar\u0131n\u0131 ve veri transferini denetlemek i\u00e7in \u00f6nemlidir.<\/p>\n<p>5.  <strong>Yeni Ba\u011flant\u0131lar\u0131 \u0130zleme:<\/strong><br \/>\n    Sunucuya gelen yeni ba\u011flant\u0131lar\u0131 izlemek, \u00f6zellikle g\u00fcvenlik a\u00e7\u0131s\u0131ndan \u00f6nemlidir. <code>evt.type=accept<\/code> filtresi, sunucunun bir ba\u011flant\u0131y\u0131 kabul etti\u011fi olaylar\u0131 g\u00f6sterir.<\/p>\n<p>    *   <strong>Yeni HTTP\/HTTPS ba\u011flant\u0131lar\u0131n\u0131 izleme:<\/strong><\/p>\n<pre><code class=\"language-bash\">sudo sysdig &quot;evt.type=accept and (fd.port=80 or fd.port=443)&quot;<\/code><\/pre>\n<p>        Bu komut, web sunucusuna yeni kurulan her ba\u011flant\u0131y\u0131 g\u00f6sterir. Hangi IP adreslerinden ba\u011flant\u0131 geldi\u011fini, hangi s\u00fcrecin (Apache) bu ba\u011flant\u0131y\u0131 kabul etti\u011fini g\u00f6rebilirsiniz.<\/p>\n<p>    *   <strong>Yeni MySQL ba\u011flant\u0131lar\u0131n\u0131 izleme:<\/strong><\/p>\n<pre><code class=\"language-bash\">sudo sysdig &quot;evt.type=accept and fd.port=3306&quot;<\/code><\/pre>\n<p>        Bu, MySQL veritaban\u0131na yeni ba\u011flant\u0131 giri\u015fimlerini izlemek i\u00e7in kritik bir g\u00fcvenlik filtresidir.<\/p>\n<p>6.  <strong>Uzak IP Adresine G\u00f6re Filtreleme:<\/strong><br \/>\n    Belirli bir uzak IP adresinden gelen veya giden trafi\u011fi izlemek isteyebilirsiniz.<\/p>\n<pre><code class=\"language-bash\">sudo sysdig &quot;fd.cip=192.168.1.100&quot;<\/code><\/pre>\n<p>    Bu komut, 192.168.1.100 IP adresiyle ili\u015fkili t\u00fcm a\u011f olaylar\u0131n\u0131 g\u00f6sterir. <code>fd.cip<\/code> istemci IP adresini, <code>fd.sip<\/code> sunucu IP adresini temsil eder.<\/p>\n<p>7.  <strong><code>csysdig<\/code> ile \u0130nteraktif \u0130zleme:<\/strong><br \/>\n    <code>sysdig<\/code> ayr\u0131ca, <code>htop<\/code> benzeri interaktif bir kullan\u0131c\u0131 aray\u00fcz\u00fc olan <code>csysdig<\/code>&#8216;i de i\u00e7erir. Bu ara\u00e7, ger\u00e7ek zamanl\u0131 sistem metriklerini ve olaylar\u0131 g\u00f6rselle\u015ftirmek i\u00e7in harikad\u0131r.<\/p>\n<pre><code class=\"language-bash\">sudo csysdig<\/code><\/pre>\n<p>    <code>csysdig<\/code> i\u00e7inde farkl\u0131 g\u00f6r\u00fcn\u00fcmler aras\u0131nda ge\u00e7i\u015f yapabilir ve filtreleri kolayca uygulayabilirsiniz. A\u011f ba\u011flant\u0131lar\u0131n\u0131, s\u00fcre\u00e7lerin a\u011f kullan\u0131m\u0131n\u0131 ve daha fazlas\u0131n\u0131 interaktif olarak ke\u015ffedebilirsiniz.<\/p>\n<h3>Geli\u015fmi\u015f A\u011f Denetimi Senaryolar\u0131<\/h3>\n<p><code>sysdig<\/code>&#8216;in g\u00fcc\u00fc, karma\u015f\u0131k senaryolarda derinlemesine analiz yapma yetene\u011finde yatar. LAMP sunucunuzda kar\u015f\u0131la\u015fabilece\u011finiz \u00e7e\u015fitli durumlar i\u00e7in geli\u015fmi\u015f denetim teknikleri:<\/p>\n<p>1.  <strong>Performans Sorunlar\u0131n\u0131 Tespit Etme:<\/strong><\/p>\n<p>    *   <strong>Yava\u015f HTTP \u0130stekleri:<\/strong> Bir web sayfas\u0131n\u0131n yava\u015f y\u00fcklendi\u011fini fark etti\u011finizde, <code>sysdig<\/code> ile Apache s\u00fcre\u00e7lerinin belirli bir iste\u011fi i\u015flerken ne kadar s\u00fcre a\u011fda kald\u0131\u011f\u0131n\u0131 veya hangi uzak sunuculara ba\u011fland\u0131\u011f\u0131n\u0131 inceleyebilirsiniz. <code>sendto<\/code> ve <code>recvfrom<\/code> olaylar\u0131n\u0131 izleyerek veri transfer h\u0131zlar\u0131n\u0131 ve gecikmeleri de\u011ferlendirebilirsiniz.<\/p>\n<pre><code class=\"language-bash\">sudo sysdig -s 1000 -A &quot;proc.name=httpd and (evt.type=sendto or evt.type=recvfrom)&quot;<\/code><\/pre>\n<p>        <code>-s 1000<\/code> ile 1000 baytl\u0131k veri yakalar, <code>-A<\/code> ile ASCII format\u0131nda g\u00f6sterir. Bu, HTTP ba\u015fl\u0131klar\u0131n\u0131 veya k\u00fc\u00e7\u00fck veri par\u00e7ac\u0131klar\u0131n\u0131 g\u00f6rmenizi sa\u011flayabilir.<\/p>\n<p>    *   <strong>Y\u00fcksek MySQL Sorgu S\u00fcreleri:<\/strong> MySQL veritaban\u0131n\u0131n yava\u015flad\u0131\u011f\u0131 durumlarda, <code>mysqld<\/code> s\u00fcrecinin a\u011f etkile\u015fimlerini inceleyebilirsiniz. Hangi istemcilerin (genellikle <code>httpd<\/code> veya <code>php-fpm<\/code> s\u00fcre\u00e7leri) en \u00e7ok sorgu g\u00f6nderdi\u011fini veya en \u00e7ok veri ald\u0131\u011f\u0131n\u0131 g\u00f6rebilirsiniz.<\/p>\n<pre><code class=\"language-bash\">sudo sysdig &quot;proc.name=mysqld and fd.port=3306 and (evt.type=read or evt.type=write)&quot;<\/code><\/pre>\n<p>        Bu, MySQL sunucusunun 3306 portunda okuma\/yazma (veri transferi) olaylar\u0131n\u0131 g\u00f6sterir.<\/p>\n<p>    *   <strong>A\u011f Gecikmesi (Latency) Tespiti:<\/strong> Uzak bir servise (API, d\u0131\u015f veritaban\u0131 vb.) yap\u0131lan ba\u011flant\u0131larda gecikme ya\u015fan\u0131yorsa, PHP s\u00fcre\u00e7lerinin bu servise yapt\u0131\u011f\u0131 ba\u011flant\u0131lar\u0131 izleyebilirsiniz. <code>sysdig<\/code> olay zaman damgalar\u0131n\u0131 kullanarak ba\u011flant\u0131 kurma ve ilk veri al\u0131\u015fveri\u015fi aras\u0131ndaki s\u00fcreyi g\u00f6zlemleyebilirsiniz.<\/p>\n<p>2.  <strong>G\u00fcvenlik \u0130hlallerini \u0130zleme:<\/strong><\/p>\n<p>    *   <strong>Yetkisiz MySQL Ba\u011flant\u0131lar\u0131:<\/strong> MySQL sunucusuna yaln\u0131zca belirli IP adreslerinden veya <code>localhost<\/code>&#8216;tan eri\u015fim izni vermelisiniz. D\u0131\u015far\u0131dan gelen yetkisiz ba\u011flant\u0131 giri\u015fimlerini izlemek i\u00e7in:<\/p>\n<pre><code class=\"language-bash\">sudo sysdig &quot;evt.type=accept and fd.port=3306 and fd.cip!='127.0.0.1' and fd.cip!='&lt;WEB_SUNUCUSU_IP&gt;' &quot;<\/code><\/pre>\n<p>        <code><WEB_SUNUCUSU_IP><\/code> yerine web sunucunuzun dahili IP adresini yaz\u0131n. Bu filtre, <code>localhost<\/code> veya yetkili web sunucusu d\u0131\u015f\u0131ndaki t\u00fcm yeni MySQL ba\u011flant\u0131lar\u0131n\u0131 g\u00f6sterecektir.<\/p>\n<p>    *   <strong>Apache&#8217;den Beklenmedik Giden Ba\u011flant\u0131lar:<\/strong> Bir web sunucusunun normalde d\u0131\u015far\u0131ya do\u011fru ba\u011flant\u0131 ba\u015flatmamas\u0131 gerekir (istisnalar: CDN, API \u00e7a\u011fr\u0131lar\u0131, g\u00fcncellemeler). E\u011fer <code>httpd<\/code> veya <code>php-fpm<\/code> s\u00fcre\u00e7lerinden beklenmedik giden ba\u011flant\u0131lar g\u00f6r\u00fcyorsan\u0131z, bu bir g\u00fcvenlik ihlalinin (\u00f6rne\u011fin, bir web kabu\u011fu veya k\u00f6t\u00fc ama\u00e7l\u0131 yaz\u0131l\u0131m\u0131n komuta-kontrol sunucusuna ba\u011flanmas\u0131) i\u015fareti olabilir.<\/p>\n<pre><code class=\"language-bash\">sudo sysdig &quot;proc.name=httpd and evt.type=connect and fd.type=ipv4 and fd.cip!='&lt;LOCAL_IP_RANGE&gt;'&quot;<\/code><\/pre>\n<p>        <code><LOCAL_IP_RANGE><\/code> yerine sunucunuzun yerel a\u011f IP aral\u0131\u011f\u0131n\u0131 yaz\u0131n (\u00f6rn. 192.168.1.0\/24). Bu, Apache&#8217;den yerel a\u011f d\u0131\u015f\u0131na yap\u0131lan t\u00fcm yeni ba\u011flant\u0131lar\u0131 izler.<\/p>\n<p>    *   <strong>Kaba Kuvvet Sald\u0131r\u0131lar\u0131:<\/strong> Belirli bir portta (\u00f6rne\u011fin 22 SSH veya 3306 MySQL) \u00e7ok say\u0131da ba\u015far\u0131s\u0131z ba\u011flant\u0131 denemesi g\u00f6r\u00fcyorsan\u0131z, bu bir kaba kuvvet sald\u0131r\u0131s\u0131n\u0131n i\u015fareti olabilir. <code>sysdig<\/code> do\u011frudan ba\u015far\u0131s\u0131z ba\u011flant\u0131lar\u0131 g\u00f6stermese de, \u00e7ok say\u0131da <code>evt.type=accept<\/code> olay\u0131n\u0131n ard\u0131ndan h\u0131zl\u0131 bir \u015fekilde <code>evt.type=close<\/code> olaylar\u0131 ve herhangi bir veri al\u0131\u015fveri\u015fi olmamas\u0131 bu duruma i\u015faret edebilir.<\/p>\n<p>3.  <strong>Uygulama Katman\u0131 Analizi (\u015eifrelenmemi\u015f Trafik \u0130\u00e7in):<\/strong><\/p>\n<p>    *   <code>sysdig<\/code>&#8216;in <code>httptop<\/code> chisel&#8217;\u0131, \u015fifrelenmemi\u015f HTTP trafi\u011fini analiz edebilir ve en \u00e7ok istek alan URL&#8217;leri veya en yava\u015f HTTP isteklerini g\u00f6sterebilir.<\/p>\n<pre><code class=\"language-bash\">sudo sysdig -c httptop<\/code><\/pre>\n<p>        <strong>NOT:<\/strong> \u00c7o\u011fu modern web sitesi HTTPS kulland\u0131\u011f\u0131 i\u00e7in, <code>httptop<\/code> \u015fifrelenmi\u015f trafi\u011fi do\u011frudan analiz edemez. HTTPS trafi\u011fi i\u00e7in, <code>sysdig<\/code> yaln\u0131zca ba\u011flant\u0131n\u0131n kuruldu\u011funu ve veri transferi oldu\u011funu g\u00f6rebilir, ancak i\u00e7eri\u011fi (URL, HTTP metodu vb.) de\u015fifre edemez. Bu durumda, daha derin uygulama katman\u0131 analizi i\u00e7in Apache\/Nginx eri\u015fim g\u00fcnl\u00fcklerini kullanmak veya <code>tcpdump<\/code> ile yakalanan trafi\u011fi Wireshark gibi ara\u00e7larla de\u015fifre etmek (e\u011fer SSL anahtarlar\u0131na eri\u015fiminiz varsa) gerekebilir.<\/p>\n<p>    *   <strong>T\u00fcm A\u011f Olaylar\u0131n\u0131 Kaydetme:<\/strong> Uzun s\u00fcreli analiz veya adli t\u0131p (forensics) i\u00e7in t\u00fcm sistem olaylar\u0131n\u0131 bir dosyaya kaydedebilirsiniz.<\/p>\n<pre><code class=\"language-bash\">sudo sysdig -w \/var\/log\/sysdig\/network_audit.scap &quot;fd.type=ipv4&quot;<\/code><\/pre>\n<p>        Bu komut, t\u00fcm IPv4 a\u011f olaylar\u0131n\u0131 <code>\/var\/log\/sysdig\/network_audit.scap<\/code> dosyas\u0131na kaydeder. Kaydedilen dosyay\u0131 daha sonra <code>sysdig -r <dosya_ad\u0131><\/code> ile okuyabilir ve farkl\u0131 filtreler uygulayarak analiz edebilirsiniz.<\/p>\n<h3>sysdig Filtreleme ve Lua Scriptleri<\/h3>\n<p><code>sysdig<\/code>&#8216;in g\u00fcc\u00fcn\u00fcn b\u00fcy\u00fck bir k\u0131sm\u0131, esnek filtreleme mekanizmas\u0131ndan ve Lua tabanl\u0131 &#8220;chisels&#8221; (betikler) kullanma yetene\u011finden gelir.<\/p>\n<p>1.  <strong>Filtreleme Mekanizmas\u0131:<\/strong><br \/>\n    <code>sysdig<\/code> filtreleri, mant\u0131ksal operat\u00f6rler (<code>and<\/code>, <code>or<\/code>, <code>not<\/code>) ve parantezlerle birle\u015ftirilebilen anahtar-de\u011fer \u00e7iftlerinden olu\u015fur. En yayg\u0131n kullan\u0131lan filtre alanlar\u0131 \u015funlard\u0131r:<\/p>\n<p>    *   <code>evt.type<\/code>: Sistem \u00e7a\u011fr\u0131s\u0131 t\u00fcr\u00fc (\u00f6rn. <code>open<\/code>, <code>read<\/code>, <code>write<\/code>, <code>connect<\/code>, <code>accept<\/code>, <code>close<\/code>).<br \/>\n    *   <code>proc.name<\/code>: S\u00fcre\u00e7 ad\u0131 (\u00f6rn. <code>httpd<\/code>, <code>mysqld<\/code>, <code>php-fpm<\/code>).<br \/>\n    *   <code>proc.pid<\/code>: S\u00fcre\u00e7 ID&#8217;si.<br \/>\n    *   <code>user.name<\/code>: Kullan\u0131c\u0131 ad\u0131.<br \/>\n    *   <code>fd.name<\/code>: Dosya tan\u0131mlay\u0131c\u0131 ad\u0131 (\u00f6rn. <code>\/var\/log\/apache\/access.log<\/code>, <code>socket<\/code>).<br \/>\n    *   <code>fd.type<\/code>: Dosya tan\u0131mlay\u0131c\u0131 t\u00fcr\u00fc (\u00f6rn. <code>file<\/code>, <code>ipv4<\/code>, <code>ipv6<\/code>, <code>unix<\/code>).<br \/>\n    *   <code>fd.port<\/code>: TCP\/UDP port numaras\u0131 (\u00f6rn. <code>80<\/code>, <code>443<\/code>, <code>3306<\/code>).<br \/>\n    *   <code>fd.cip<\/code>: \u0130stemci IP adresi.<br \/>\n    *   <code>fd.sip<\/code>: Sunucu IP adresi.<br \/>\n    *   <code>fd.proto<\/code>: Protokol (\u00f6rn. <code>tcp<\/code>, <code>udp<\/code>, <code>icmp<\/code>).<br \/>\n    *   <code>fd.lport<\/code>: Yerel port.<br \/>\n    *   <code>fd.rport<\/code>: Uzak port.<\/p>\n<p>    <strong>\u00d6rnek Karma\u015f\u0131k Filtreler:<\/strong><\/p>\n<p>    *   <strong>Apache&#8217;den d\u0131\u015far\u0131ya do\u011fru 80 veya 443 portu \u00fczerinden yap\u0131lan t\u00fcm ba\u011flant\u0131 denemeleri:<\/strong><\/p>\n<pre><code class=\"language-bash\">sudo sysdig &quot;proc.name=httpd and evt.type=connect and (fd.port=80 or fd.port=443) and fd.cip!='127.0.0.1'&quot;<\/code><\/pre>\n<p>        Bu, web sunucusunun d\u0131\u015far\u0131daki ba\u015fka bir web sunucusuna ba\u011flanma giri\u015fimlerini izler.<\/p>\n<p>    *   <strong>MySQL&#8217;e gelen yetkisiz IP&#8217;lerden ba\u011flant\u0131 denemeleri (ba\u015far\u0131s\u0131z veya ba\u015far\u0131l\u0131):<\/strong><\/p>\n<pre><code class=\"language-bash\">sudo sysdig &quot;fd.port=3306 and evt.type=accept and not (fd.cip='127.0.0.1' or fd.cip='&lt;WEB_SUNUCUSU_IP&gt;') &quot;<\/code><\/pre>\n<p>        Bu filtre, <code>localhost<\/code> veya izin verilen web sunucusu IP&#8217;si d\u0131\u015f\u0131ndaki t\u00fcm yeni MySQL ba\u011flant\u0131lar\u0131n\u0131 g\u00f6sterir.<\/p>\n<p>    *   <strong>PHP-FPM s\u00fcre\u00e7lerinin d\u0131\u015far\u0131daki herhangi bir porttan veri g\u00f6ndermesi:<\/strong><\/p>\n<pre><code class=\"language-bash\">sudo sysdig &quot;proc.name=php-fpm and evt.type=sendto and fd.type=ipv4 and fd.cip!='127.0.0.1'&quot;<\/code><\/pre>\n<p>        Bu, PHP-FPM&#8217;in harici bir sunucuya veri g\u00f6nderme olaylar\u0131n\u0131 izler ve potansiyel k\u00f6t\u00fc ama\u00e7l\u0131 faaliyetleri tespit etmede yard\u0131mc\u0131 olabilir.<\/p>\n<p>2.  <strong>Lua Scriptleri ile Otomasyon ve Geni\u015fletme:<\/strong><br \/>\n    <code>sysdig<\/code>, Lua betikleri arac\u0131l\u0131\u011f\u0131yla geni\u015fletilebilir. Bu betikler, <code>chisels<\/code> olarak adland\u0131r\u0131l\u0131r ve <code>sysdig<\/code>&#8216;in \u00e7ekirdekten ald\u0131\u011f\u0131 olaylar\u0131 i\u015fleyerek \u00f6zel \u00e7\u0131kt\u0131lar olu\u015fturabilir, istatistikler hesaplayabilir veya belirli ko\u015fullar alt\u0131nda uyar\u0131lar tetikleyebilir.<\/p>\n<p>    *   <strong>Mevcut Chisels&#8217;lar\u0131 Ke\u015ffetme:<\/strong><br \/>\n        <code>sysdig -l<\/code> komutuyla mevcut chisels&#8217;lar\u0131 listeleyebilirsiniz.<\/p>\n<pre><code class=\"language-bash\">sysdig -l<\/code><\/pre>\n<p>        Bu liste, <code>netstat<\/code>, <code>httptop<\/code>, <code>spy_iface<\/code>, <code>top_procs<\/code> gibi bir\u00e7ok kullan\u0131\u015fl\u0131 arac\u0131 i\u00e7erir.<\/p>\n<p>    *   <strong>\u00d6zel Lua Betikleri Kullanma:<\/strong> Kendi Lua betiklerinizi yazarak veya mevcut betikleri d\u00fczenleyerek <code>sysdig<\/code>&#8216;in davran\u0131\u015f\u0131n\u0131 \u00f6zelle\u015ftirebilirsiniz. \u00d6rne\u011fin, belirli bir e\u015fi\u011fin \u00fczerinde a\u011f trafi\u011fi alg\u0131land\u0131\u011f\u0131nda bir uyar\u0131 g\u00f6nderen bir betik yazabilirsiniz. Lua betikleri genellikle <code>\/usr\/share\/sysdig\/chisels<\/code> dizininde bulunur.<\/p>\n<p>        Bir <code>mysqltop<\/code> veya <code>apache_slow_requests<\/code> gibi \u00f6zel bir chisel yazarak, LAMP sunucunuza \u00f6zg\u00fc performans veya g\u00fcvenlik metriklerini takip edebilirsiniz. Bu, <code>sysdig<\/code>&#8216;in ham \u00e7\u0131kt\u0131s\u0131n\u0131 anlaml\u0131 bilgilere d\u00f6n\u00fc\u015ft\u00fcrmenin g\u00fc\u00e7l\u00fc bir yoludur.<\/p>\n<h3>Performans ve Kaynak Kullan\u0131m\u0131<\/h3>\n<p><code>sysdig<\/code>, kernel mod\u00fcl\u00fc sayesinde nispeten d\u00fc\u015f\u00fck bir performans y\u00fck\u00fcyle \u00e7al\u0131\u015facak \u015fekilde tasarlanm\u0131\u015ft\u0131r. Ancak, a\u015fa\u011f\u0131daki fakt\u00f6rler performans \u00fczerinde etkili olabilir:<\/p>\n<p>*   <strong>Filtrelerin Karma\u015f\u0131kl\u0131\u011f\u0131:<\/strong> \u00c7ok geni\u015f veya karma\u015f\u0131k filtreler kullanmak, <code>sysdig<\/code>&#8216;in daha fazla olay\u0131 i\u015flemesine neden olabilir ve bu da CPU kullan\u0131m\u0131n\u0131 art\u0131rabilir. \u0130yi tan\u0131mlanm\u0131\u015f, dar kapsaml\u0131 filtreler kullanmak performans\u0131 optimize eder.<br \/>\n*   <strong>Veri Kayd\u0131 (Capturing):<\/strong> Olaylar\u0131 bir dosyaya kaydetmek (<code>-w<\/code> se\u00e7ene\u011fi), disk G\/\u00c7 (I\/O) kullan\u0131m\u0131n\u0131 art\u0131r\u0131r. Yo\u011fun trafikli sistemlerde uzun s\u00fcreli kay\u0131tlar b\u00fcy\u00fck dosyalar olu\u015fturabilir. Bu dosyalar\u0131n depoland\u0131\u011f\u0131 disk alan\u0131n\u0131 ve disk performans\u0131n\u0131 g\u00f6z \u00f6n\u00fcnde bulundurmak \u00f6nemlidir.<br \/>\n*   <strong><code>csysdig<\/code> Kullan\u0131m\u0131:<\/strong> <code>csysdig<\/code> gibi interaktif ara\u00e7lar, terminalde s\u00fcrekli g\u00fcncellenen bir aray\u00fcz sunduklar\u0131 i\u00e7in <code>sysdig<\/code>&#8216;in ham \u00e7\u0131kt\u0131ya g\u00f6re biraz daha fazla kaynak t\u00fcketebilir.<\/p>\n<p>Genel olarak, <code>sysdig<\/code> \u00e7o\u011fu LAMP sunucusu i\u00e7in kabul edilebilir bir performans y\u00fck\u00fc ile \u00e7al\u0131\u015f\u0131r. Ancak, \u00e7ok y\u00fcksek trafikli \u00fcretim ortamlar\u0131nda kullanmadan \u00f6nce performans etkisini test etmek her zaman iyi bir uygulamad\u0131r.<\/p>\n<h3>S\u0131k Kar\u015f\u0131la\u015f\u0131lan Sorunlar ve \u00c7\u00f6z\u00fcmleri<\/h3>\n<p><code>sysdig<\/code> kullan\u0131rken kar\u015f\u0131la\u015fabilece\u011finiz baz\u0131 yayg\u0131n sorunlar ve bunlar\u0131n \u00e7\u00f6z\u00fcmleri \u015funlard\u0131r:<\/p>\n<p>*   <strong>Kernel Mod\u00fcl\u00fc Y\u00fcklenememesi:<\/strong> <code>sysdig<\/code>&#8216;in \u00e7ekirdek mod\u00fcl\u00fc, \u00e7al\u0131\u015fan \u00e7ekirdek s\u00fcr\u00fcm\u00fcn\u00fczle uyumlu olmal\u0131d\u0131r. E\u011fer <code>sysdig<\/code> kurulduktan sonra &#8220;Error: Could not load the sysdig kernel module&#8221; gibi bir hata al\u0131rsan\u0131z:<br \/>\n    *   <code>kernel-devel<\/code> paketinin mevcut \u00e7ekirdek s\u00fcr\u00fcm\u00fcn\u00fczle e\u015fle\u015fti\u011finden emin olun: <code>uname -r<\/code> ve <code>rpm -qa | grep kernel-devel<\/code> komutlar\u0131n\u0131 kar\u015f\u0131la\u015ft\u0131r\u0131n. Gerekirse do\u011fru <code>kernel-devel<\/code> s\u00fcr\u00fcm\u00fcn\u00fc y\u00fckleyin.<br \/>\n    *   Sistemi yeniden ba\u015flatmay\u0131 deneyin.<br \/>\n    *   <code>dkms<\/code> (Dynamic Kernel Module Support) kurulu oldu\u011fundan emin olun: <code>sudo yum install dkms<\/code>. Bu, \u00e7ekirdek g\u00fcncellemelerinden sonra mod\u00fcl\u00fcn otomatik olarak yeniden derlenmesine yard\u0131mc\u0131 olur.<br \/>\n*   <strong>\u0130zin Sorunlar\u0131:<\/strong> <code>sysdig<\/code> \u00e7al\u0131\u015fmak i\u00e7in k\u00f6k ayr\u0131cal\u0131klar\u0131 gerektirir. E\u011fer <code>sudo<\/code> kullanmadan \u00e7al\u0131\u015ft\u0131rmaya \u00e7al\u0131\u015f\u0131rsan\u0131z izin hatalar\u0131 al\u0131rs\u0131n\u0131z. Her zaman <code>sudo sysdig<\/code> veya <code>sudo csysdig<\/code> kullan\u0131n.<br \/>\n*   <strong>Gereksiz Veri Yakalama (Noise):<\/strong> Filtre kullanmadan <code>sysdig<\/code> \u00e7al\u0131\u015ft\u0131rmak, \u00e7ok fazla veri ak\u0131\u015f\u0131na neden olabilir ve \u00f6nemli olaylar\u0131 g\u00f6zden ka\u00e7\u0131rman\u0131za yol a\u00e7abilir. Her zaman belirli bir amaca y\u00f6nelik dar kapsaml\u0131 filtreler kullanmaya \u00e7al\u0131\u015f\u0131n.<br \/>\n*   <strong>SSL\/TLS \u015eifrelemesi ve Uygulama Katman\u0131 Analizi S\u0131n\u0131rlamalar\u0131:<\/strong> <code>sysdig<\/code>, kernel seviyesinde \u00e7al\u0131\u015ft\u0131\u011f\u0131 i\u00e7in SSL\/TLS \u015fifrelemesi alt\u0131ndaki trafi\u011fin i\u00e7eri\u011fini do\u011frudan de\u015fifre edemez. Bu, HTTPS trafi\u011finin URL&#8217;lerini veya POST verilerini do\u011frudan g\u00f6remeyece\u011finiz anlam\u0131na gelir. Bu t\u00fcr durumlarda, Apache\/Nginx eri\u015fim g\u00fcnl\u00fckleri, uygulama i\u00e7i loglama veya \u00f6zel SSL\/TLS proxy \u00e7\u00f6z\u00fcmleri gibi ek ara\u00e7lara ba\u015fvurman\u0131z gerekebilir. <code>sysdig<\/code> yine de \u015fifrelenmi\u015f ba\u011flant\u0131lar\u0131n kuruldu\u011funu, hangi s\u00fcre\u00e7lerin ba\u011fland\u0131\u011f\u0131n\u0131 ve ne kadar veri transfer edildi\u011fini g\u00f6sterecektir, bu da ba\u011flant\u0131 sorunlar\u0131n\u0131 veya anormal trafik hacimlerini tespit etmek i\u00e7in hala de\u011ferlidir.<br \/>\n*   <strong>\u00c7\u0131kt\u0131 Format\u0131:<\/strong> Varsay\u0131lan <code>sysdig<\/code> \u00e7\u0131kt\u0131s\u0131 olduk\u00e7a detayl\u0131d\u0131r. Daha okunabilir bir \u00e7\u0131kt\u0131 i\u00e7in chisels (<code>-c netstat<\/code>, <code>-c httptop<\/code>) kullanmay\u0131 veya kendi Lua betiklerinizi yazmay\u0131 d\u00fc\u015f\u00fcnebilirsiniz.<\/p>\n<h3>Sonu\u00e7<\/h3>\n<p>Bir LAMP sunucusunda a\u011f trafi\u011fini denetlemek, sistemin g\u00fcvenli\u011fini, performans\u0131n\u0131 ve genel sa\u011fl\u0131\u011f\u0131n\u0131 korumak i\u00e7in vazge\u00e7ilmez bir uygulamad\u0131r. <code>sysdig<\/code>, Linux \u00e7ekirde\u011fi seviyesinde sundu\u011fu derin g\u00f6r\u00fcn\u00fcrl\u00fck, s\u00fcre\u00e7 odakl\u0131 yakla\u015f\u0131m ve g\u00fc\u00e7l\u00fc filtreleme yetenekleri sayesinde bu denetim g\u00f6revini \u00fcst\u00fcn bir \u015fekilde yerine getirebilen \u00e7ok de\u011ferli bir ara\u00e7t\u0131r. CentOS 7 \u00fczerinde kolayca kurulabilen <code>sysdig<\/code>, Apache, MySQL ve PHP s\u00fcre\u00e7lerinin a\u011f etkile\u015fimlerini ger\u00e7ek zamanl\u0131 olarak izleyerek g\u00fcvenlik ihlallerini tespit etmenize, performans darbo\u011fazlar\u0131n\u0131 gidermenize ve sisteminizin kararl\u0131l\u0131\u011f\u0131n\u0131 sa\u011flaman\u0131za olanak tan\u0131r.<\/p>\n<p>Temel komutlardan ba\u015flayarak geli\u015fmi\u015f filtreleme tekniklerine ve Lua betiklerine kadar <code>sysdig<\/code>&#8216;in geni\u015f yeteneklerini kullanarak, LAMP sunucunuzun a\u011f katman\u0131nda neler olup bitti\u011fine dair kapsaml\u0131 bir anlay\u0131\u015f geli\u015ftirebilirsiniz. Unutmay\u0131n ki, proaktif izleme ve denetim, sadece sorunlar\u0131 \u00e7\u00f6zmekle kalmaz, ayn\u0131 zamanda potansiyel sorunlar\u0131 daha ortaya \u00e7\u0131kmadan \u00f6nce \u00f6nlemenize yard\u0131mc\u0131 olur. <code>sysdig<\/code>&#8216;i ara\u00e7 kutunuza ekleyerek, LAMP sunucular\u0131n\u0131z\u0131n operasyonel m\u00fckemmelli\u011fini bir ad\u0131m \u00f6teye ta\u015f\u0131yabilirsiniz.<\/p>\n<div class=\"github-example-link\"><strong>\u00d6rnek kod:<\/strong> <a href=\"https:\/\/github.com\/fatihsoysalcom\/sysdig-network-traffic-monitoring-demo\" target=\"_blank\" rel=\"noopener noreferrer\">github.com\/fatihsoysalcom\/sysdig-network-traffic-monitoring-demo<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber Modern web uygulamalar\u0131n\u0131n omurgas\u0131n\u0131 olu\u015fturan LAMP (Linux, Apache, MySQL, PHP) sunucular\u0131, s\u00fcrekli olarak d\u0131\u015f d\u00fcnyadan gelen isteklere yan\u0131t verir ve veri al\u0131\u015fveri\u015finde bulunur.","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_page_header_type":"","csco_page_load_nextpost":"","csco_page_subscribe_form":"","csco_page_contact_form":"","footnotes":""},"categories":[241],"tags":[],"class_list":{"0":"post-43918","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-linux","7":"cs-entry","8":"cs-video-wrap"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v20.5 (Yoast SEO v25.3.1) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber\" \/>\n<meta property=\"og:description\" content=\"LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber Modern web uygulamalar\u0131n\u0131n omurgas\u0131n\u0131 olu\u015fturan LAMP (Linux, Apache, MySQL, PHP) sunucular\u0131, s\u00fcrekli olarak d\u0131\u015f d\u00fcnyadan gelen isteklere yan\u0131t verir ve veri al\u0131\u015fveri\u015finde bulunur.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/\" \/>\n<meta property=\"og:site_name\" content=\"Kodlar\u0131n Gizemli D\u00fcnyas\u0131\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-07T14:01:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-07T14:01:39+00:00\" \/>\n<meta name=\"author\" content=\"Fatih Soysal\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fatih Soysal\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"22 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/\"},\"author\":{\"name\":\"Fatih Soysal\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"headline\":\"LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber\",\"datePublished\":\"2026-08-07T14:01:04+00:00\",\"dateModified\":\"2026-08-07T14:01:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/\"},\"wordCount\":4005,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"articleSection\":[\"Linux\"],\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/#respond\"]}],\"copyrightYear\":\"2026\",\"copyrightHolder\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/\",\"name\":\"LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131\",\"isPartOf\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\"},\"datePublished\":\"2026-08-07T14:01:04+00:00\",\"dateModified\":\"2026-08-07T14:01:39+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Anasayfa\",\"item\":\"https:\/\/fatihsoysal.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#website\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/\",\"name\":\"Fatihsoysal.com\",\"description\":\"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim\",\"publisher\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"tr\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1\",\"name\":\"Fatih Soysal\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"tr\",\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"contentUrl\":\"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png\",\"width\":512,\"height\":512,\"caption\":\"Fatih Soysal\"},\"logo\":{\"@id\":\"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.\",\"url\":\"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/","og_locale":"tr_TR","og_type":"article","og_title":"LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber","og_description":"LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber Modern web uygulamalar\u0131n\u0131n omurgas\u0131n\u0131 olu\u015fturan LAMP (Linux, Apache, MySQL, PHP) sunucular\u0131, s\u00fcrekli olarak d\u0131\u015f d\u00fcnyadan gelen isteklere yan\u0131t verir ve veri al\u0131\u015fveri\u015finde bulunur.","og_url":"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/","og_site_name":"Kodlar\u0131n Gizemli D\u00fcnyas\u0131","article_published_time":"2026-08-07T14:01:04+00:00","article_modified_time":"2026-08-07T14:01:39+00:00","author":"Fatih Soysal","twitter_card":"summary_large_image","twitter_misc":{"Yazan:":"Fatih Soysal","Tahmini okuma s\u00fcresi":"22 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/#article","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/"},"author":{"name":"Fatih Soysal","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"headline":"LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber","datePublished":"2026-08-07T14:01:04+00:00","dateModified":"2026-08-07T14:01:39+00:00","mainEntityOfPage":{"@id":"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/"},"wordCount":4005,"commentCount":0,"publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"articleSection":["Linux"],"inLanguage":"tr","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/#respond"]}],"copyrightYear":"2026","copyrightHolder":{"@id":"https:\/\/fatihsoysal.com\/blog\/#organization"}},{"@type":"WebPage","@id":"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/","url":"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/","name":"LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber - Kodlar\u0131n Gizemli D\u00fcnyas\u0131","isPartOf":{"@id":"https:\/\/fatihsoysal.com\/blog\/#website"},"datePublished":"2026-08-07T14:01:04+00:00","dateModified":"2026-08-07T14:01:39+00:00","breadcrumb":{"@id":"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/fatihsoysal.com\/blog\/lamp-sunucusunda-ag-trafigini-sysdig-ile-denetleme-centos-7-uzerinde-kapsamli-bir-rehber\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Anasayfa","item":"https:\/\/fatihsoysal.com\/blog\/"},{"@type":"ListItem","position":2,"name":"LAMP Sunucusunda A\u011f Trafi\u011fini sysdig ile Denetleme: CentOS 7 \u00dczerinde Kapsaml\u0131 Bir Rehber"}]},{"@type":"WebSite","@id":"https:\/\/fatihsoysal.com\/blog\/#website","url":"https:\/\/fatihsoysal.com\/blog\/","name":"Fatihsoysal.com","description":"Blog - Yaz\u0131l\u0131m D\u00fcnyas\u0131 Tecr\u00fcbelerim","publisher":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fatihsoysal.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"tr"},{"@type":["Person","Organization"],"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/002a254750921dcfd568a99e48240dd1","name":"Fatih Soysal","image":{"@type":"ImageObject","inLanguage":"tr","@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","contentUrl":"https:\/\/fatihsoysal.com\/blog\/wp-content\/uploads\/2024\/04\/cropped-replicate-prediction-3kgg1hgjn5rgp0cf0p5tr0jw7w-1.png","width":512,"height":512,"caption":"Fatih Soysal"},"logo":{"@id":"https:\/\/fatihsoysal.com\/blog\/#\/schema\/person\/image\/"},"description":"Kullan\u0131m ve kodlama m\u00fckemmeliyetini odak alan uygulamalar olu\u015fturma deneyimine sahip, profesyonel olarak 15+ y\u0131l \u00fczeri deneyime sahip bir yaz\u0131l\u0131m m\u00fchendisi.","url":"https:\/\/fatihsoysal.com\/blog\/author\/fatihsoysal\/"}]}},"yoast_meta":{"yoast_wpseo_title":"","yoast_wpseo_metadesc":"","yoast_wpseo_canonical":""},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/43918","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/comments?post=43918"}],"version-history":[{"count":2,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/43918\/revisions"}],"predecessor-version":[{"id":43920,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/posts\/43918\/revisions\/43920"}],"wp:attachment":[{"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/media?parent=43918"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/categories?post=43918"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fatihsoysal.com\/blog\/wp-json\/wp\/v2\/tags?post=43918"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}