Chapter 9: TCP/IP Applications Flashcards
Session
A logical stream of data flowing between two programs over a network.
Transmission Control Protocol (TCP)
- Enables connection-oriented communication in networks that use the TCP/IP protocol suite.
- Most common type of session
TCP Three-Way Handshake
A three-packet conversation between TCP hosts to establish and start a data transfer session.
User Datagram Protocol (UDP)
Used for the type of sessions that don’t require the overhead of connection-oriented traffic.
Port and Session Type of DHCP
Port 67 (server) and port 68 (client) UDP
Network Time Protocol (NTP)
Synchronizes the clocks of devices on a network.
UDP port 123
Trivial File Transfer Protocol (TFTP)
Enables you to transfer files from one machine to another.
UDP port 69
Internet Control Message Protocol (ICMP)
- Used to handle many low level functions such as error reporting.
- Usually request and response pairs
What kind of packets does ping send?
ICMP
What is the packet called that ping sends out? The one that comes back?
Echo request, Echo reply
If your computer has no route to the address listed, ping will display _________.
Destination Host Unreachable
If you ping a device and no echo reply comes back before the 1-second default time, ping will respond with _______.
Request Timed Out
Ping of Death
A ping that allowed malicious users to send malformed ping packets to your computer and make it crash.
Internet Group Management Protocol (IGMP)
Enables routers to communicate with hosts to determine a “group” membership for multicasting.
What is the subnet that multicast addresses use?
224.0.0.0/4
Well-known Port Numbers
0-1023
Reserved for specific TCP/IP applications
Ephemeral Ports
1024-5000
An arbitrary number generated by a sending computer that the receiving computer uses as a destination address when sending a return packet.
Dynamic/Private Port Numbers
49152-65535
Recommended by IANA to use as ephemeral port numbers
Registered Ports
1024-49151
The IANA assigns these ports for anyone to use for their application
Socket
A combination of a port number and an IP address that uniquely identifies a connection.
Endpoints
The term used when discussing the data each computer stores about the connection between two computers’ TCP/IP applications.
netstat
Shows you the list of endpoints you have connections with.
netstat -a
Tells netstat to show all used ports
netstat -n
Tells netstat to show raw port #’s and IP addresses.
netstat -o
Tells netstat to show the process ID
netstat -b
Shows the name of the running program
Open Port
A socket that is prepared to respond to any IP packets destined for that socket’s port number.
Established Port
Active, working endpoint
close_wait
Implies that a graceful closure is happening, i.e. each side see the session closing normally
time_wait
Means a connection has been lost and is waiting a defined amount of time called a timeout period.
ps
Linux command that shows process IDs
Hypertext Transfer Protocol (HTTP)
Defines what actions Web servers and browsers should take in response to various commands.
TCP port 80
Web Server
- A computer that delivers Web pages.
- Listen on port 80
Internet Information Services (IIS)
- Microsoft’s Web server program for managing Web servers.
- Enables you to set a max connection limit on your Web server based on available bandwidth and memory
Apache HTTP Server
The web server that most UNIX/Linux based operating systems use.
What are the three qualities of a secure Internet application?
1) Authentication
2) Encryption
3) Nonrepudiation:Process of making sure data came from the person or entity it was supposed to come from.
Secure Sockets Layer (SSL)
A protocol developed for transmitting private documents over the Internet
HTTPS
- The secure form of HTTP
- TCP Port 443
Telnet
- The first protocol invented to connect remotely to another computer.
- TCP Port 23