knowledge

Overview

Network protocols define the rules and conventions for communication between devices on a network. They ensure reliable delivery, proper addressing, and standardized interactions across diverse systems. Protocols operate at different layers of the OSI model and can be connection-oriented (TCP) or connectionless (UDP).


Terminology

TermDefinition
ProtocolA set of rules governing how devices communicate on a network
Connection-OrientedCommunication that establishes a session before data transfer (e.g., TCP)
ConnectionlessCommunication that sends data without establishing a session (e.g., UDP)
ARP CacheLocal table mapping IP addresses to MAC addresses for quick lookup
DORADHCP process: Discover → Offer → Request → Acknowledge
TLS/SSLEncryption layer added to HTTP to create HTTPS
Autonomous SystemA network or group of networks under a single administrative domain (used in BGP)

Core Concepts

Transport Protocols

Full detail covered in Packets and Frames.

ProtocolTypeUse
TCP (Transmission Control Protocol)Connection-orientedReliable, ordered delivery; uses 3-way handshake
UDP (User Datagram Protocol)ConnectionlessFast, minimal overhead; suitable for streaming and gaming

Addressing Protocols

ARP (Address Resolution Protocol)

Maps IP addresses to MAC addresses on a local network.

ARP Process

  • Maintains an ARP cache for quick lookups
  • ARP Request — broadcast asking for the MAC address of a given IP
  • ARP Reply — unicast response providing the MAC address

DHCP (Dynamic Host Configuration Protocol)

Automatically assigns IP addresses and network configuration to devices.

DHCP DORA

StepNameDescription
1DiscoverClient broadcasts to find a DHCP server
2OfferServer offers an available IP address
3RequestClient requests the offered IP
4AcknowledgeServer confirms the assignment

ICMP (Internet Control Message Protocol)

Used for network diagnostics and error reporting.

  • ping — tests connectivity and round-trip time
  • traceroute — maps the path packets take across networks

Application Protocols

Web

Full detail covered in HTTP & HTTPS.

ProtocolPortDescription
HTTP80Web communication
HTTPS443Encrypted web communication via TLS/SSL

TLS Negotiation

DNS

Full detail covered in DNS (Domain Name System).

Translates human-readable domain names to IP addresses.

File Transfer

ProtocolPortDescription
FTP21Client-server file transfer; commands: USER PASS RETR STOR LIST
FTPS990FTP over TLS
SFTP22FTP tunneled over SSH

Remote Access

ProtocolPortDescription
SSH22Secure encrypted remote terminal access
RDP3389Secure graphical remote desktop access
Telnet23Insecure plaintext remote terminal; see Linux Fundamentals

File & Device Sharing

ProtocolPortDescription
SMB445File and printer sharing across networks

Email Protocols

ProtocolPortRoleKey Commands
SMTP25/465/587Sending emailHELO/EHLO MAIL FROM DATA .
POP3110/995Retrieving email (downloads and removes from server)USER PASS STAT LIST RETR DELE QUIT
IMAP143/993Syncing email (keeps mail on server)LOGIN SELECT FETCH MOVE COPY LOGOUT

Routing Protocols

Determine paths for data across networks by exchanging topology and reachability information.

ProtocolDescription
OSPF (Open Shortest Path First)Shares full network topology; computes shortest paths
RIP (Routing Information Protocol)Simple hop-count-based routing; max 15 hops
EIGRP (Enhanced Interior Gateway Routing Protocol)Cisco proprietary; shares reachability and cost metrics
BGP (Border Gateway Protocol)Internet-wide routing between autonomous systems

  • Packet Analysis
  • Packet Sniffing

References / Images

  • ARP Process
  • DHCP DORA
  • TLS Negotiation
  • Networking textbooks, RFCs, and vendor documentation