Messer - 1. Networking Concepts (Part 1 of 2) Flashcards
To move data (e.g. HTTP) across a network, we need to package it up, encapsulate it within ___________ or ____________, which then needs to be encapsulated within ___________, which is then encapsulated within _____________.
TCP or UDP
IP
Ethernet
TCP and UDP are transported inside of, and encapsulated by ________.
IP Protocol
TCP and UDP operate at which layer of the OSI Model?
Layer 4 (Transport)
__________ allows us to use many different applications at the same time across a network, and is a nice feature of TCP and UDP.
Multiplexing
TCP stands for _____________.
Transmission Control Protocol
UDP stands for ________________.
User Datagram Protocol
How do TCP and UDP differ in terms of connections?
TCP is connection-oriented. A formal connection is made between separate devices on a network, data is transferred, and then the connection is formally terminated.
UDP is “connectionless.” There is no formal opening or closing of a connection. Data is sent whenever available, without acknowledgment from receiver.
How do TCP and UDP differ in terms of reliability?
TCP is “reliable.” It sends numbered data so if data is lost or out of order, it can recover from the error, re-order, and/or re-transmit the data.
UDP is “unreliable.” No error recovery. No re-ordering of data or retransmission.
In what way can UDP’s “connectionless unreliability” be an advantage?
No unnecessary overhead!
What is the purpose of a port number?
Port numbers are associated with different applications so data can be directed to the correct place within a device. (e.g. Port 80 - unencrypted web traffic)
What is a socket?
IP address + port number
[See notes - Feel like I’m missing stuff here]
What are the two types of port numbers?
Non-ephemeral / permanent (Commonly used by applications or services running on a server)
Ephemeral / temporary (Clients usually send randomly chosen port # when sending data)
TCP and UDP ports can be any between __________ and ___________.
0 and 65,535
Ports 0 to 1,023 are ______________.
Ports 1,024 to 49,151 are _________.
Ports 49,152 to 65,535 are __________.
System or well-known ports
User or registered ports
Dynamic, private, or ephemeral ports
What happens when TCP and UDP try to use the same port number simultaneously?
Nothing. There’s no conflict. e.g. One application can use TCP port 80 and another can use UDP port 80. (But wouldn’t normally see this.)
If we were to closely inspect an IP packet, what five things would we find?
Source IP Address Destination IP Address TCP/UDP Source Port (randomly selected) TCP/UDP Destination Port Application Data (e.g HTTP, VoIP, email data)
ICMP stands for ____________.
Internet Control Message Protocol
What is the purpose of ICMP?
It’s like text messaging for network devices. Devices can request and reply to administrative requests (e.g. “Hey, are you there?”). Can let other devices know things aren’t going well (e.g. trouble communicating).
Like TCP/UCP, ICMP is carried by ___________. However, it is not used for ______________.
IP
data transfer
Telnet stands for __________________.
Telecommunication Network
Telnet port?
tcp/23
What is the purpose of Telnet?
Log in to devices remotely and access via text-based console. Way to communicate to and administer servers, routers, switches, and other devices.
Why isn’t Telnet the best choice for production systems?
It’s non-encrypted (e.g. user name and password in the clear)
SSH stands for _________________.
Secure Shell
SSH port?
tcp/22
What is the purpose of SSH?
Same as Telnet, but encrypted.
DNS stands for _________________.
Domain Name System
DNS port?
udp/53
SMTP stands for _________________.
Simple Mail Transfer Protocol
What is the purpose of DNS?
Converts IP addresses to more human-friendly domain names (e.g. 162.159.246.164 = www.professormesser.com)
SMTP port?
tcp/25
What is the purpose of SMTP?
Sending email (not receiving!)
FTP stands for _________________.
File Transfer Protocol
FTP Port?
tcp/20 (active mode data - actual data transfer)
tcp/21 (control - various commands)
What is the purpose of FTP?
Transferring files between systems
SFTP stands for _________________.
Secure File Transfer Protocol
SFTP port?
tcp/22
SFTP uses __________ as its underlying protocol, and therefore uses the same port number.
SSH
SFTP stands for _________________.
Trivial File Transfer Protocol
TFTP port?
udp/69 [think promiscuous]
What are the two main difference between TFTP and FTP / SFTP?
1) TFTP only reads and writes files. Lacks all other functionality (e.g. directory listings, resuming interrupted file transfers, etc.)
2) No username / password for authentication
DHCP stands for _________________.
Dynamic Host Configuration Protocol
DHCP port?
udp/67
udp/68
[Note: I believe this is for DHCPv4 only. I think DHCPv6 uses udp/546 (client) and udp/547 (server)]
DHCP assigns a ___________ to a device when that device ___________.
IP Address
First starts up
What is the purpose of DHCP?
Automatically configure IP address, subnet mask, DNS settings, etc.
DHCP requires a _____________, which in a small organization or home is often integrated into a ________________.
DHCP server
SOHO router
What is the purpose of a subnet mask?
Divides IP address into two parts that identify host computer and network. (A host will then use the subnet mask to know if destination is on local or remote network.)
DHCP assigns __________ to devices in real-time from a _____________ as part of a ____________, which must be renewed at set intervals.
IP addresses
pool
lease
Every device has a unique identifier known as a ____________, which DHCP servers use for assigning _____________.
MAC Address
IP Addresses
HTTP stands for _________________.
Hypertext Transfer Protocol
HTTP port?
tcp/80
What is the purpose of HTTP?
Web server communication
HTTPS stands for _________________.
Hypertext Transfer Protocol Secure
HTTPS port?
tcp/443
SNMP stands for _________________.
Simple Network Management Protocol
SNMP port?
udp/161
What is the purpose of SNMP?
Allows admins to monitor and configure network devices remotely. (e.g. servers, switches, routers, printers, etc.) You can gather a ton of information, like bandwidth being used, errors, device temps, even how much printer paper / toner is left.
Name two characteristics of SNMP v1
Structured tables
Unencrypted
Name three characteristics of SNMP v2
Bulk transfers (easily request and receive a lot of info) Data type enhancements Still unencrypted
Name three characteristics of SNMP v3
Message integrity
Authentication
Encryption
RDP stands for _________________.
Remote Desktop Protocol
RDP port?
tcp/3389
What is the purpose of RDP?
Share a desktop from a remote location (e.g. allow help desk technician, remote administrator, scammer to see the screen of a remote computer)
The Windows application that uses RDP is called ______________.
Remote Desktop Connection
NTP stands for _________________.
Network Time Protocol
NTP port?
udp/123
What is the purpose of NTP?
To synchronize clock across network devices
Why is clock synchronization critical?
Log files, authentication, outage details
SIP stands for _________________.
Session Initiation Protocol
SIP port?
tcp/5060
tcp/5061
What is the purpose of SIP?
Voice over IP (VoIP). Setting up and managing sessions. Calling, ringing, hanging up.
Beyond voice communication, SIP is also used for ____________, ________________, and ______________________.
Video conferencing
Instant messaging
File transfers
Like SIP, another popular VoIP protocol is ___________________.
H.323
SMB stands for _________________.
Server Message Block
SMB port?
tcp/445
What is the purpose of SMB?
Protocol used by Microsoft Windows for sharing files, printers, etc.
SMB is also called _______________, which stands for ___________________.
CIFS (Common Internet File System)
[Technically, CIFS was a particular implementation of SMB that’s now obsolete. But people often use terms interchangeably.]
When SMB runs over tcp/445, it is a direct communication that does not rely on ____________ transport (like it did in the past).
NetBIOS
[Hope I have this one right. Very confusing info out there]
POP3 stands for _________________.
Post Office Protocol version 3
POP3 port?
tcp/110
What is the purpose of POP3?
Basic email receiving functionality. (Not sending, like SMTP!)
IMAP stands for _________________.
Internet Message Access Protocol
IMAP port?
tcp/143
What is the purpose of IMAP?
More advanced email receiving functionality. (Not sending, like SMTP!)
What is the current version of IMAP?
v. 4
What’s the primary difference between POP3 and IMAP?
POP3 retrieves messages from an email server (deleting them from server in the process).
IMAP does not remove messages, and allows for synchronization of inbox among multiple clients.
LDAP stands for _________________.
Lightweight Directory Access Protocol
LDAP port?
tcp/389
What is the purpose of LDAP?
Authentication protocol for directory services. Used as database to manage user and group privileges, allowing access to network devices such as printers, etc.
[This is a really tricky one. Not sure I got that entirely right.]
LDAPS stands for _________________.
Lightweight Directory Access Protocol Secure
LDAPS port?
tcp/636
LDAPS is a ___________ implementation of LDAP over _________.
non-standard
SSL
What is the purpose of H.323?
Manages Voice over IP (VoIP) sessions (e.g. call, ring, hang up). (See also SIP)
What does OSI stand for?
Open Systems Interconnection
The OSI model describes what?
The seven layers computer systems use to communicate over a network
Mnemonic for remembering OSI Model?
A Priest Saw Two Nuns Doing Pushups
All People Seem to Need Data Processing
Reverse: Please Do Not Throw Sausage Pizza Away
What is Layer 7 of the OSI model?
Application
What is Layer 6 of the OSI model?
Presentation
What is Layer 5 of the OSI model?
Session
What is Layer 4 of the OSI model?
Transport
What is Layer 3 of the OSI model?
Network
What is Layer 2 of the OSI model?
Data Link
What is Layer 1 of the OSI model?
Physical
The highest layer of the OSI Model is ______________, and the lowest is ______________.
Application
Physical
Layer 1 (Physical) involves what?
The physics of a network. The signaling, cabling, fiber optics, connectors, tools like punch-downs. Not about protocols. A physical layer problem would be something like a bad cable.
Layer 2 (Data Link) involves what?
Device-to-device data transfer within a network. Defines protocols for that communication, like DLC, LLC, PPP. Switching, bridging, or having two devices communicate using MAC addresses and Ethernet Frames.
Layer 3 (Network) involves what?
Communication between networks. This is the “routing” layer. Routers using IP addresses, fragmenting frames / data to traverse different networks
Layer 4 (Transport) involves what?
The functional and procedural means of transferring packets. This is the “post office” layer. It’s all about TCP and UDP, the most common protocols for transferring data across a network. TCP and UDP are almost synonymous with Transport Layer
Layer 5 (Session) involves what?
Connections between computers. It establishes, manages, and terminates connections between local and remote application. Establishes procedures for checkpointing, suspending, restarting, and terminating a session. In modern TCP/IP system, session layer is non-existent and simply part of the TCP protocol.
[Borrowed from Wikipedia for this. Prof. Messer was pretty unclear]
Layer 6 (Presentation) involves what?
Transforming data into a form an application accepts, or formatting application data to be sent across a network. May involve character encoding, encryption / decryption (SSL / TLS), or compression. Sometimes called “Syntax Layer.” Often combined with Layer 7 (Application).
[Odd that Presentation is not the layer involving user interaction.]
Layer 7 (Application) involves what?
Users interacting directly with software. It’s the layer we see when using a browser window, transferring a file, reading email. It’s all about “your eyes.”
Switches operate at what layer of the OSI model?
Layer 2 (Data Link)
[Intra-network]
Hubs operate at what layer of the OSI model?
Layer 1 (Physical)
[No protocols. Just raw data transfer]
Routers operate at what layer of the OSI model?
Layer 3 (Network)
[Between networks]
SOHO stands for ____________.
Small Office / Home Office
What is a SOHO Lan?
A small local area network (LAN) that typically consists of fewer than 10 computers.
What are an Ethernet Frame’s THREE most basic parts?
Header
Encapsulated Data
Trailer
What are an Ethernet Frame’s full EIGHT parts?
Header (Preamble, SFD, Destination MAC, Source MAC, and Type)
Encapsulated data (Data and Pad)
Trailer (FCS)
SFD stands for ____________.
Start Frame Delimiter
Designates end of an Ethernet Frame’s preamble
FCS stands for ____________.
Frame Check Sequence
CRC checksum of Ethernet Frame for error-checking
An Ethernet Frame is found at what layer of the OSI Model?
Layer 2 (Data Link)
An Ethernet Frame’s payload contains data from what layer of the OSI Model?
Layer 3 (Network) and higher (e.g. IP info, TCP data, browsing info)
PDU stands for ____________.
Protocol Data Unit
What is a PDU?
A specific block of information transferred over a network
A PDU is found at what layer of the OSI Model?
All layers
But it’s called different things at each layer
What is the PDU of OSI Layer 1 (Physical)?
Raw bits (1s or 0s) transmitted physically via the hardware
What is the PDU of OSI Layer 2 (Data Link)?
A frame (or series of bits)
What is the PDU of OSI Layer 3 (Network)?
A packet that contains the source and destination address
What is the PDU of OSI Layer 4 (Transport)?
A segment that includes a TCP header and data
What is the PDU of OSI Layer 5 (Session)?
The data passed to the network connection
What is the PDU of OSI Layer 6 (Presentation)?
The data formatted for presentation
What is the PDU of OSI Layer 7 (Application)?
The data received or transmitted by a software application
MAC Address stands for ____________.
Media Access Control Address
What is a MAC Address?
The unique “physical” address of a network device (also known as EUI-48)
A MAC Address is ________ bits / ________ bytes in length, and is displayed in ____________ format.
48
6
hexadecimal
(e.g. 8c:2d:aa:4b:98:a7)