TCP/IP Detailed Flashcards

1
Q

IP Header Fields

A
Version
Header Length
TOS
Total Length
Identification
Flags
Fragment Offset
TTL
Protocol
Header Checksum
Source Address
Destination Address
IP Options
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

IP Total Length field byte offset

A

offset 2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

IP Identification field byte offset

A

offset 4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

IP Flags field byte offset

A

7th byte high order 3 bits

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Fragment Offset field byte offset

A

offset 7

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

TTL field byte offset

A

offset 8

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Protocol field byte offset

A

offset 9

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Header Checksum field byte offset

A

offset 10

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Source Address field byte offset

A

offset 12

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Destination Address field byte offset

A

offset 18

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

IP Options field byte offset

A

offset 20

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Header Length minimum value

A

5 - multiply by 4 to get byte count

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

IP Header default length

A

20 bytes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Source IP field length

A

4 bytes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Destination IP field length

A

4 bytes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

IP Flags

A

x reserved - High order 8th bit
D Do not fragment - High order 7th bit
M More fragments follow - High order 6th bit

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

IP RFC

A

791

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

IP protocol field - 0x01

A

1 - ICMP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

IP protocol field - 0x11

A

17 - UDP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

IP protocol field - 0x06

A

6 - TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

IP protocol field - 0x02

A

2 - IGMP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

TCP Header fields

A
Source Port
Destination Port
Sequence Number
Acknowledgment number
Offset
Reserved
Flags
Window
Checksum
Urgent Pointer
TCP Options
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

UDP Header fields

A

Source Port
Destination Port
Length
Checksum

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

TCP RFC

A

793

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

UDP RFC

A

768

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

ICMP Header Fields

A

Type
Code
Checksum
Other message specific info

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Source Port field byte offset

A

offset 0

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Destination Port field byte offset

A

offset 2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Sequence Number field byte offset

A

5th-8th bytes offset 4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Acknowledgment Number field byte offset

A

9th-12th bytes offset 8

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

TCP offset field byte offset

A

high order nibble; offset 12

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

TCP Flags field byte offset

A

offset 13

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Window field byte offset

A

offset 14

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

TCP Checksum field byte offset

A

offset 16

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

TCP Urgent pointer field byte offset

A

offset 18

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

TCP Flags from low byte order

A
FIN
SYN
RST
PSH
ACK
URG
ECN
CWR
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

ECN stands for?

A

Explicit Congestion Notification

38
Q

TCP Options 0

A

End of Options list

39
Q

TCP Options 1

A

No Operation, Pad

40
Q

TCP Options 2

A

Maximum Segment size

41
Q

TCP Options 3

A

Windows Scale

42
Q

TCP Options 4

A

Selective ACK ok

43
Q

TCP Options 5

A

Timestamp

44
Q

TCP Default Header Size

A

20 bytes

45
Q

UDP Source Port field byte offset

A

0 bytes

46
Q

UDP Destination Port field byte offset

A

2 bytes

47
Q

UDP Length field byte offset

A

4 bytes

48
Q

UDP Checksum field byte offset

A

6 bytes

49
Q

UDP default header length

A

8 bytes

50
Q

ICMP type field byte offset

A

0 bytes

51
Q

Code field byte offset

A

1 bytes

52
Q

ICMP Checksum field byte offset

A

2 bytes

53
Q

ICMP Other message specific info

A

4 bytes

54
Q

ICMP type code 0x00

A

0 Echo reply

55
Q

ICMP type code 0x03

A

3 Destination unreachable

56
Q

ICMP type code 0x04

A

4 Source Quench

57
Q

ICMP type code 0x05

A

5 Redirect

58
Q

ICMP type code 0x06

A

6 Echo

59
Q

ICMP type code 0x09

A

9 Router Advertisement

60
Q

ICMP type code 0x0b

A

11 Time Exceeded

61
Q

ICMP type code 0x11

A

17 Address mask request

62
Q

ICMP type code 0x12

A

18 Address mask reply

63
Q

DNS Header fields

A
Length (TCP Only)
ID
QR
Opcode
AA
TC
RD
RA
Z
RCODE
QDCOUNT
ANCOUNT
NSCOUNT
ARCOUNT
Question Section
Answer Section
Authority Section
Additional Information Section
64
Q

QR field Codes

A

0 - Query

1 - Response

65
Q

DNS Opcodes

A

0 - Standard query (Query)
1 - Inverse Query (IQuery)
2 - Server Status request (STATUS)

66
Q

AA field definition

A

1 - Authoritative Answer

67
Q

TC field definition

A

1 - Truncation

68
Q

RD field definition

A

1 - Recursion Desired

69
Q

RA field definition

A

1 - Recursion Available

70
Q

Z field definition

A

Z reserved, set to 0

71
Q

Response Codes

A
0 - No error
1 - Format error
2 - Server Failure
3 - Non-existant domain (NXDOMAIN)
4 - Query type not implemented
5 - Query refused
72
Q

QDCOUNT definition

A

Number of entries in Question section

73
Q

Ping fields

A
Type
Code
Checksum
Identifier
Sequence number
Data
74
Q

ARP header

A
Hardware Address Type
Protocol Address type
H/w Addr Len
Prot. Addr. Len
Operation
Source hardware address
Source Protocol address
Traget Hardware Address
Target Protocol Address
75
Q

tcpdump -e

A

Display data link header

76
Q

tcpdump -F

A

filter expression in file

77
Q

tcpdump -i

A

Listen on interface

78
Q

tcpdump -n

A

don’t resolve IP address

79
Q

tcpdump -r

A

read packet from file

80
Q

tcpdump -s

A

get snaplen bytes from each packet

81
Q

tcpdump -S

A

use absolute TCP sequence numbers

82
Q

tcpdump -t

A

don’t print timestamp

83
Q

tcpdump -v

A

verbose mode

84
Q

tcpdump -w

A

write packet to file

85
Q

tcpdump -x

A

display in hex

86
Q

tcpdump -X

A

display in hex and ASCII

87
Q

IPv6 Header Size

A

40 bytes

88
Q

IPv6 Address Size

A

128 bits

89
Q

IPv4 TOS field is now what in IPv6

A

Traffic Class

90
Q

IPv4 TTL field is now what in IPv6

A

HOP

91
Q

IPv4 Protocol field is now what in IPv6

A

Next Header

92
Q

IPv6 Header

A
Version    0-4 bytes
Traffic class    5-12 bytes
Flow label    12-31 bytes
Payload Length 32-47
Next Header
Hop Limit
Source Address
Target Addresss