COMPTIA NETWORK+ N10-008 TCP Ports and Protocols

FTP (File Transfer Protocol)

A protocol used to move files and folders over a network or the Internet. Unsecured.

FTP

File Transfer Protocol

What ports are for FTP (File Transfer Protocol

20 for data transfer, 21 for sending control command

SSH

a cryptographic network protocol for operating network services securely over an unsecured network

SSH (Secure Shell)

22

SSH

Secure Shell

What port is for SSH?

22

SFTP (Secure File Transfer Protocol)

Provides file access, file transfer, and file management over any reliable data stream. It basically tunnels a standard ftp protocol through an already secure ssh protocol

SFTP

Secure File Transfer Protocol

What port does SFTP use?

22

What port number does SSH and SFTP share?

22

Telnet

Provides a virtual terminal or remote login across the network that is connection-based. The remote server must be running a Telnet service for clients to connect. Similar to SSH but is insecure, is considered legacy and has largely been replaced

What port uses Telnet?

23

SMTP (Simple Mail Transfer Protocol)

A communications protocol that enables sending email from a client to a server or between servers.

Sends in plain text. SMTPS was introduced as a secure variant

SMTP

Simple Mail Transfer Protocol

What port uses SMTP?

25

SMTPS

Simple Mail Transfer Protocol Secure. Uses ports 465 and 587

DNS (Domain Name System)

The service that translates URLs to IP addresses.
Uses UDP by default for 1 packet messages
Switches to TCP for larger messages

DNS

Domain Name System

What port uses DNS?

53

DHCP (Dynamic Host Configuration Protocol)

A network service that provides automatic assignment of IP addresses, subnets, mass gateways, and other networking parameters to a client device

DHCP (Dynamic Host Configuration Protocol)

listens for requests on 67, clients will recieve responses back over port 68 both using UDP

DHCP (Dynamic Host Configuration Protocol)

A network service that provides automatic

assignment of IP addresses and other TCP /IP configuration information.

DHCP

Dynamic Host Configuration Protocol

What ports are used for DHCP?

67, 68

TFTP (Trivial File Transfer Protocol)

A simple version of FTP that uses UDP as the transport protocol, and does not require a logon to the remote host.

TFTP

Trivial File Transfer Protocol

What port uses TFTP?

69

HTTP (Hypertext Transfer Protocol)

the protocol used for transmitting web pages over the Internet, unsecured

HTTP

Hypertext Transfer Protocol

Port 80 is used for

HTTP

POP3 (Post Office Protocol version 3)

A protocol used from retrieving email from a mailbox on the mail server. Designed to download messages to client and delete them from the server. Newer pop 3 has option to not delete but lacked read or delete synchronization
POP3S is a secure variant over port 995

POP3 (Post Office Protocol version 3)

A protocol used from retrieving email from a mailbox on the mail server.

POP3

Post Office Protocol 3

Port 110 is the well-known port used by:

POP3

NTP (Network Time Protocol)

An Internet protocol that enables synchronization of computer clock times in a network of computers by exchanging time signals.

NTP

Network Time Protocol

Port 123, Protocol for clock synchronization between computer systems over packet-switched, variable-latency data networks

NTP

NetBIOS (Network Basic Input/Output System)

An older transport protocol used by Microsoft Windows systems for allowing applications (printing and file sharing) on separate computers to communicate over a LAN.

Ports 137-139

NetBIOS

IMAP (Internet Message Access Protocol)

a common protocol for retrieving email messages via the Internet. a secure variant IMAPS was made later.

IMAP

Internet Message Access Protocol

Port 143, Management of electronic mail messages received on a server

IMAP. The secure variant operates over port 993

SNMP (Simple Network Management Protocol)

An Application-layer protocol used to exchange information between network devices.

SNMP

Simple Network Management Protocol

Ports 161 and 162

SNMP

LDAP (Lightweight Directory Access Protocol)

A communications protocol that defines how a client can access information, perform operations, and share directory data on a server.

LDAP

Lightweight Directory Access Protocol

Port 389

LDAP

HTTPS (Hypertext Transfer Protocol Secure)

An encrypted version of HTTP. It uses port 443.

HTTPS

Hypertext Transfer Protocol Secure

Port 443

HTTPS

SMB (Server Message Block)

A protocol that works on the Application layer and is used to share files, serial ports, printers, and communications devices, including mail slots and named pipes, between computers on a local area network.

SMB

Server Message Block

Port 445 is used by:

SMB

Syslog

Used to send logging data back to a centralized server

Port 514 is used for

Syslog. uses UDP or TCP

SMTP TLS/SSL

Simple Mail Transfer Protocol Transport Layer Security

Port 587:

SMTP TLS/SSL

LDAPS (Lightweight Directory Access Protocol Secure)

Secured open, vendor-neutral industry standard for accessing and maintaining distributed directory information services. uses port 636 using TCP

IMAP SSL/TLS

Internet Message Access Protocol over SSL
Secure and encrypted way to receive emails.

Port 993

IMAP SSL/TLS

POP3 SSL/TLS

Post Office Protocol Version 3 over SSL

Secure and encrypted way to receive emails

Port 995

POP3 SSL/TLS

SQL (Structured Query Language)

an international standard language for processing a database

SQL

Structured Query Language

Port 1433

Microsoft SQL

SQLnet

Used for communication from a client to an Oracle database

Port 1521

SQLnet

MySQL

Used for communication from a client to the MySQL database engine

Port 3306

MySQL

RDP (Remote Desktop Protocol)

A proprietary protocol developed by Microsoft, which provides a user with a graphical interface to connect to another computer over a network connection. Uses TCP

RDP

Remote Desktop Protocol

Port 3389

RDP (Remote Desktop Protocol)

SIP (Session Initiation Protocol)

A set of Application layer signaling and control protocols for multiservice, packet-based networks. SIP is used to make an initial connection between hosts for transferring multimedia data. VOIP and Instant Messaging

SIP

Session Initiation Protocol

Ports 5060 and 5061

SIP

ICMP (Internet Control Message Protocol)

A network layer Internet protocol that is used to communicate information about network connectivity issues back to the sender. Used by technicians during troubleshooting . Used by attackers to conduct ping scans and network mapping.

GRE (Generic Routing Encapsulation)

A tunneling protocol developed by Cisco to encapsulate a wide variety of network layer protocols insider a virtual point-to-point or point-to-multipoint link over an IP network. Doesn't provide encryption. Need to set a small maximum MTU size on tunnel.

IPSec (Internet Protocol Security)

A set of open, non-proprietary standards that you can use to secure data as it travels across the network or the Internet through data authentication and encryption.

Authentication Header (AH)

An IPsec protocol that authenticates that packets received were sent from the source identified in the header of the packet.

Encapsulating Security Payload (ESP)

An IPsec protocol that provides authentication, integrity, and encryption services.