2.1 Network Protocols & Common Ports

common ports and their associating network protocols

File Transfer Protocol

is a standard network protocol used for transferring files between a client and a server over a TCP-based network. It facilitates file uploads, downloads, and management.

operates on ports tcp/20 and tcp/21 for data and control connections respectively.

Secure Shell

is a cryptographic network protocol used for secure access to a computer over an unsecured network, allowing users to run commands and manage systems remotely.

Looks and acts the same as Telnet but provides secure encrypted communication.

operates on Tcp/22

Telnet

is a network protocol used to provide a command-line interface for communicating with a remote device or server. It allows users to access and manage devices over an unsecured network, typically using plain text communication. Uses in the clear communication

It operates on Tcp/23 and is often replaced by more secure protocols like SSH due to its lack of encryption.

Simple Mail Transfer Protocol

is a standard communication protocol used for sending and receiving emails across networks. It facilitates the transfer of messages between email clients and servers, ensuring proper delivery.

operates on tcp/25 for sending emails.

It is used primarily for sending emails from one server to another and can also be used for sending messages from a client to a server.

Domain Name System

is a hierarchical naming system used to translate human-readable domain names into IP addresses, allowing users to access websites and services on the internet. It plays a crucial role in directing traffic on the internet by resolving hostnames.

operates on UDP/53.

It enables users to access websites using easy-to-remember domain names instead of numeric IP addresses.

Dynamic Host Configuration Protocol

is a network management protocol used to automatically assign IP addresses, subnet mask and other network configuration parameters to devices on a network, allowing them to communicate effectively. This protocol enables devices to request and obtain IP addresses without manual

It simplifies network administration by automatically managing IP address allocation and reduces the chances of conflicts within a network.

Operates under udp/67 and udp/68

HTTP and HTTPS (Hypertext Transfer Protocol and Hypertext Transfer Protocol Secure0

are protocols used for transmitting hypertext via the World Wide Web.

HTTP facilitates communication between web browsers and servers, while

HTTPS adds a layer of security through encryption.

HTTP operates on tcp/80 and HTTPS on tcp/443, ensuring secure data transfer.

Web server comms (communication within the browser)

POP3 and IMAP4

are protocols used by email clients to retrieve messages from mail servers. POP3 downloads emails to the client and usually deletes them from the server, while IMAP allows users to view messages without removing them from the server, enabling synchronization across multiple devices.

Post Office Protocol version 3

Internet Message Access protocol version 4

Both authenticate and transfer emails

POP3- basic mail transfer functionality. Tcp/110

IMAP4- manage multiple inboxes of emails for multiple clients. Tcp/143

Server Message Block

is a network file-sharing protocol used by computers running the Windows operating system. It enables applications on a computer to access files and resources on a remote server. SMB operates over TCP/IP, NetBIOS over TCP/IP, or NWLink protocols, providing file and printer sharing, as well as inter-process communication over a network.

is commonly used in microsoft windows and also known as common internet file system

Udp/137-netbios name

Tcp/139- netbios sessions

Tcp/445- netbios-less

Simple Network Management Protocol

is a protocol used for network management, allowing devices on a network to be monitored and controlled. It facilitates collecting information and managing network devices such as routers, switches, and servers.

operates over UDP, usually on port 161 for general requests and 162 for traps, making it essential for maintaining network health.

provides a standardized framework for monitoring and managing network performance.

V1- structured tables, in the clear communication

V2- data enhancements, bulk transfers, in the clear

V3- message integrity, authentication, encryption

Lightweight Directory Access Protocl

Lightweight Directory Access Protocol is a protocol that facilitates access to and management of directory services. It allows for querying and updating of directory entries, often for user authentication and authorization, and typically runs over TCP/IP on port 389.

Remote Desk Protocol

is a protocol used to connect to a remote computer and control it as if the user were sitting in front of it. It enables users to access and manage remote desktops over a network, typically utilizing TCP on port 3389.

Can connect entire desktops or singular app