Common Network Ports And Uses Flashcards
Telnet
TCP23, Login to devices remotely, console access, in-the-clear communication, not the best choice for production systems.
SSH
(Secure Shell) TCP22, Login to devices remotely, console access, looks and acts same as telnet except data is encrypted.
DNS
UDP53, Converts names to IP addresses. (Usually multiple DNS servers are in production)
SMTP
(Simple Mail Transfer Protocol) TCP25, Server to server email transfer, also used to send mail from a device to a server, for incoming mail on device other protocols are used such as IMAP or POP3.
SFTP
(Secure File Transfer Protocol) TCP22, Uses the SSH file transfer protocol, full feature file transfer (can resume transfer if interrupted, provide directory listing, remote file removals), encrypted with SSH.
FTP
(File Transfer Protocol) TCP20 (Active mode data) TCP21 (control), transfers files between systems, requires authentication with username / pw, full-featured functionality (list, add, delete, etc.), not encrypted like SFTP
TFTP
(Trivial File Transfer Protocol) UDP69, very simple file transfer application - read and write files, no authentication - not used on production systems.
DHCP
(Dynamic Host Configuration Protocol) UDP67, UDP68, automated configuration of IP address, subnet mask, and other options, (requires a DHCP server - server, appliance, integrated into a SOHO router, etc.), (dynamic /pooled - IP addresses are assigned in real-time from a pool, each system is given a lease and must renew at set intervals), (DHCP reservation- addresses are assigned by MAC address in the DHCP server, quickly manage addresses from one location.)
HTTP
(Hypertext Transfer Protocol) TCP80, communication in the browser and other applications, data sent in-the-clear.
HTTPS
(Hypertext Transfer Protocol (Secured)) TCP443, communication in the browser and other applications that is encrypted.
SNMP
(Simple Network Management Protocol) UDP161, gather statistics from network devices, Version 1 (The original) - structured tables, in-the-clear, Version 2 (A good step ahead) - Data type enhancements, bulk transfers, still in-the-clear, Version 3 (A secure standard) - message integrity, authentication, encryption.
RDP
(Remote Desktop Protocol) TCP3389, share a desktop from a remote location, remote desktop services on many Windows versions, can connect to an entire desktop or just an application, clients for Windows, MacOS, Linux, Unix, iPhone, and others.
NTP
(Network Time Protocol) UDP123, (switches, routers, firewalls, servers, workstations all have their own clocks), synchronizing the clocks becomes critical (log files, authentication details, outage information), automatic updates (flexible, you control how clocks are updated), very accurate (better than 1 millisecond on a local network).
SIP
(Session Initiation Protocol) TCP5060, TCP5061, setup and manage VoIP sessions (call, ring, hang up), extend voice communication (video conference, instant messaging, file transfer, etc.)
SMB
(Server Message Block (also called CIFS-Common Internet File System)) TCP445 (NetBIOS-less), protocol used by Microsoft Windows for file sharing, printer sharing, direct SMB communication over tcp445 without the NetBIOS transport