- Transmission Control Protocol / Internet Protocol
- Not one specific protocol, but an entire suite of protocols
- web traffic
- port 80
- Simple Mail Transfer Protocol
- Email traffic
- Transmission Control Protocol
- connection-oriented traffic, with guaranteed delivery
- uses three-way handshake: SYN, SYN/ACK, ACK
- User Datagram Protocol
- connectionless sessions, does not ensure delivery
- Internet Protocol
- Divided into IPV4 and IPV6
- identifies hosts using IP addresses, in dot notation (IPV4 - ie: 192.0.0.1) or hex (IPV6)
- an #IP protocol
- uses 32-bit addresses with dot notation
- Private reserved address ranges:
- 10.x.x.x (10.0.0.0 to 10.255.255.255)
- 172.16.x.x (172.16.0.0 to 172.31.255.255)
- 192.168.x.x (192.168.0.0 to 192.168.255.255)
- an #IP protocol
- uses 128-bit addresses with hex notation
- private local network addresses:
- prefixed with
fc00
- not assigned on public internet
- prefixed with
- Internet Control Message Protocol
- Used for testing basic connectivity
- Tools using ICMP:
- ping
- pingpath
- tracert
- Often blocked, as it's used in DDOS attacks
- Address Resolution Protocol
- part of layer 2 of the OSI Model
- resolves IPV4 addresses to MAC addresses
- Real-time Transport protocol
- delivers audio and video over IP networks
- includes VOIP and streaming, push-to-talki, videoconferencing
- Not encrypted!
- Secure Real-Time Transport Protocol
- encryption around RTP
- Session Initiation Protocol (SIP)
- used to open, close, and maintain voice, video, and messaging sessions
- File Transfer Protocol
- transmits in cleartext
- #port 21 (control signals)
- #port 20 (data)
- secure version of FTP, over SSH
- uses #port 22
- Trivial File Transfer Protocol
- for sending small amounts of network data
- uses UDP over #port 69
tags: #encryption #ssl #https
- Secure Shell
- encrypts data in transit
- uses TCP over #port 22
- used for SFTP, SCP, and other encrypted protocols
- Secure Sockets Layer
- deprecated, older protocol for encrypting HTTP traffic or LDAP traffic
- compromised!
- Transport Layer Security (TLS)
- replacement for SSL
- encrypts HTTP traffic to HTTPS
- Internet Protocol Security (IPSec)
- encrypts IP traffic: intended for IPV6, but works with IPV4
- protects #VPN traffic
tags: #mail #email-protocol
- Simple Mail Transfer Protocol
- uses #port 25 (unencrypted traffic)
- uses #port 587 (encrypted traffic)
- Post Office Protocol v3
- transfers #email data from servers to clients
- Internet Message Access Protocol v4 (IMAP4)
- Stores emails on a mail server
- allows organization and management of emails in folders
- TCP #port 143 (unencrypted connections -- Gmail)
- TCP #port 993 (encrypted connections -- Gmail)
- Lightweight Directory Access Protocol
- specifies formats and methods to query directories
- used by Microsoft Active Directory
- Remote Desktop Protocol (RDP)
- allows connecting to a desktop system remotely
- uses TCP or UDP #port 3389
- suite of tools for simplifying the use of SSH to interact with remote systems
- supports SCP and SFTP