Chapter 9

Protocols

SLIP (Serial Line Internet Protocol)

internet over serial ports.

 It was mainly used with dial-up connections.

 It encapsulates IP packets for transmission over serial

links.

 SLIP does not provide error checking or correction.

 It supports only IP protocol (no support for other

protocols).

 It uses a special END character to mark the end of a

packet.

 SLIP is very simple and lightweight.

 It has been mostly replaced by PPP.

 PPP is used to transmit data over serial links like

telephone lines.

 It supports multiple network layer protocols (e.g., IP,

IPX).

 It includes error detection through CRC.

 PPP supports authentication using PAP and CHAP.

 It is more reliable and feature-rich than SLIP.

 PPP breaks data into frames and reassembles it at the

other end.

 Used in DSL and VPN connections.

 IP is a core protocol in the Internet layer.

 It handles addressing and routing of packets.

 Each device on the internet has a unique IP address.

 IP is connectionless and does not guarantee delivery.

 Two versions: IPv4 (32-bit) and IPv6 (128-bit).

 IP routes packets based on destination IP address.

 Works with TCP and UDP for data transmission.

 Fragmentation and reassembly of large packets is

handled by IP.
ARP (Address Resolution Protocol)

 ARP is used to find the MAC address from an IP

address.

 It works within a local network (LAN).

 ARP sends a broadcast request to ask: “Who has this

IP?”

 The device with the IP responds with its MAC

address.

 It's essential for IP to work over Ethernet.

 ARP only works for IPv4.

 Tools like arp -a show the ARP table.

 RARP is the reverse of ARP—it finds IP from MAC

address.

 Mainly used by diskless computers at boot time.

 The client broadcasts its MAC address.

 A RARP server replies with the corresponding IP.

 RARP is now mostly replaced by BOOTP and DHCP.

 It only supports IPv4.

 RARP requires a server to maintain IP-MAC

mappings.

 Works at the network layer like ARP.

 ICMP is used for sending error messages and

diagnostics.

 Ping uses ICMP to test connectivity.

 ICMP works closely with IP but is not used to send

user data.

 It sends messages like “Destination Unreachable” or

“Time Exceeded.”

 ICMP is connectionless.

 Routers use ICMP to communicate network issues.

 ICMP packets have a type and code field for

identifying messages.
TCP (Transmission Control Protocol)

 TCP is a connection-oriented protocol.

 It ensures reliable data transmission.

 It uses a handshake to establish a connection.

 TCP provides error detection and correction.

 It ensures in-order delivery of packets.

 Used in web browsing, email, file transfer, etc.

 TCP segments are reassembled at the destination.

 It uses flow control and congestion control.

 UDP is a connectionless protocol.

 It sends data without checking for delivery.

 Faster than TCP but less reliable.

 Used in real-time apps like video streaming, VoIP.

 No handshaking, so it has less overhead.

 Messages are called datagrams.

 Suitable for applications where speed is critical.

 Does not guarantee packet order or delivery.

 FTP is used to transfer files between computers.

 It uses TCP for reliable transmission.

 Requires a client and a server.

 Uses two ports: 21 (command), 20 (data).

 Supports login and authentication.

 Can upload, download, rename, and delete files.

 Has both active and passive modes.

 Tools like FileZilla use FTP.

 HTTP is used for web communication.

 It is the foundation of the World Wide Web.

 Works on port 80 (or 443 for HTTPS).

 Uses request/response model.

 Stateless protocol—each request is independent.

 Common methods: GET, POST, PUT, DELETE.

 Delivers HTML, images, videos, etc.

 HTTPS is HTTP with SSL/TLS encryption.

 SMTP is used to send emails.

 It works on port 25 (or 587 for secure).

 Only handles sending, not receiving (uses POP/IMAP

for that).

 Uses TCP for reliable delivery.

 Mail servers communicate using SMTP.

 Messages are queued if the receiver is offline.

 Can be configured for authentication and encryption.

 Works between client and mail server, and between

servers.
TELNET

 TELNET is used for remote login over a network.

 It Works on port 23.

 Sends commands to a remote computer.

 Does not use encryption (not secure).

 Can access a server or device’s command-line

interface.

 Mostly replaced by SSH today.

 Useful for simple text-based communication.

 Allows control of devices over LAN/WAN.

 BOOTP is used by diskless computers to get IP during

boot.

 It provides IP address, gateway, and boot filename.

 Works using UDP (ports 67 for server, 68 for client).

 BOOTP uses a static mapping of MAC to IP.

 It can also provide the location of the boot file.

 Predecessor to DHCP.

 Requires a BOOTP server in the network.

 Not commonly used today.

 DHCP automatically assigns IP addresses to devices.

 It simplifies network management.

 Works using UDP (port 67 for server, 68 for client).

 Assigns IP, subnet mask, gateway, and DNS.

 Supports lease time for IP addresses.

 Devices can release and renew IPs.

 Replaces BOOTP with more features.

 Commonly used in home and enterprise networks.