Network Forensics Flashcards
1
Q
What are the layers of the TCP/IP Suite?
A
- application
- transport
- internet
- network access
- physical
2
Q
What are the primary Transport layer protocols?
A
- tcp
- udp
3
Q
What is the range for well-known ports?
A
0 to 1023
4
Q
What is the exhaustive range for ports?
A
0 to 65535
5
Q
Unicast traffic
A
- traffic going from one source to one destination
- Example: packets from a client requesting a web page from a web server
6
Q
Multicast traffic
A
- one sender to a group of receivers
- Example: updates sent from one router to the group of all routers on the network
7
Q
Broadcast traffic
A
- traffic form one sender to every other member on the network
- usually the last address in the network
- 192.168.1.0/24, broadcast = 192.168.1.255
