Network Models

When dealing with networking, you may hear the terms "network model" and "network layer" used often. Network models define a set of
network layers and how they interact. There are several different network models depending on what organization or company started them.
The most important two are:

 The TCP/IP Model - This model is sometimes called the DOD model since it was designed for the department of defense It is also
called the internet model because TCP/IP is the protocol used on the internet.
 OSI Network Model - The International Standards Organization (ISO) has defined a standard called the Open Systems
Interconnection (OSI) reference model. This is a seven layer architecture listed in the next section.

Network Layers

The layered concept of networking was developed to accommodate changes in technology. Each layer of a specific network model may be
responsible for a different function of the network. Each layer will pass information up and down to the next subsequent layer as data is
processed.

The OSI Network Model Standard

The OSI network model layers are arranged here from the lower levels starting with the physical (hardware) to the higher levels.

1. Physical Layer - The actual hardware.

2. Data Link Layer - Data transfer method (802x ethernet). Puts data in frames and ensures error free transmission. Also controls
the timing of the network transmission. Adds frame type, address, and error control information. IEEE divided this layer into the
two following sublayers.
1. Logical Link control (LLC) - Maintains the Link between two computers by establishing Service Access Points (SAPs)
which are a series of interface points. IEEE 802.2.
2. Media Access Control (MAC) - Used to coordinate the sending of data between computers. The 802.3, 4, 5, and 12
standards apply to this layer. If you hear someone talking about the MAC address of a network card, they are
referring to the hardware address of the card.
3. Network Layer - IP network protocol. Routes messages using the best path available.
4. Transport Layer - TCP, UDP. Ensures properly sequenced and error free transmission.
5. Session Layer - The user's interface to the network. Determines when the session is begun or opened, how long it is used, and
when it is closed. Controls the transmission of data during the session. Supports security and name lookup enabling computers
to locate each other.
6. Presentation Layer - ASCII or EBCDEC data syntax. Makes the type of data transparent to the layers around it. Used to translate
date to computer specific format such as byte ordering. It may include compression. It prepares the data, either for the network
or the application depending on the direction it is going.
7. Application Layer - Provides services software applications need. Provides the ability for user applications to interact with the
network.

Many protocol stacks overlap the borders of the seven layer model by operating at multiple layers of the model. File Transport Protocol
(FTP) and telnet both work at the application, presentation, and the session layers.

The Internet, TCP/IP, DOD Model

This model is sometimes called the DOD model since it was designed for the department of defense It is also called the TCP/IP four layer
protocol, or the internet protocol. It has the following layers:

1. Link - Device driver and interface card which maps to the data link and physical layer of the OSI model.
2. Network - Corresponds to the network layer of the OSI model and includes the IP, ICMP, and IGMP protocols.
3. Transport - Corresponds to the transport layer and includes the TCP and UDP protocols.
4. Application - Corresponds to the OSI Session, Presentation and Application layers and includes FTP, Telnet, ping, Rlogin, rsh,
TFTP, SMTP, SNMP, DNS, your program, etc.

Please note the four layer TCP/IP protocol. Each layer has a set of data that it generates.

1. The Link layer corresponds to the hardware, including the device driver and interface card. The link layer has data packets
associated with it depending on the type of network being used such as ARCnet, Token ring or ethernet. In our case, we will be
talking about ethernet.
 2. The network layer manages the movement of packets around the network and includes IP, ICMP, and IGMP. It is responsible for
making sure that packages reach their destinations, and if they don't, reporting errors.
3. The transport layer is the mechanism used for two computers to exchange data with regards to software. The two types of
protocols that are the transport mechanisms are TCP and UDP. There are also other types of protocols for systems other than
TCP/IP but we will talk about TCP and UDP in this document.
4. The application layer refers to networking protocols that are used to support various services such as FTP, Telnet, BOOTP, etc.
Note here to avoid confusion, that the application layer is generally referring to protocols such as FTP, telnet, ping, and other
programs designed for specific purposes which are governed by a specific set of protocols defined with RFC's (request for
comments). However a program that you may write can define its own data structure to send between your client and server
program so long as the program you run on both the client and server machine understand your protocol. For example when
your program opens a socket to another machine, it is using TCP protocol, but the data you send depends on how you structure
it.

Data Encapsulation, a Critical concept to be understood

When starting with protocols that work at the upper layers of the network models, each set of data is wrapped inside the next lower layer
protocol, similar to wrapping letters inside an envelope. The application creates the data, then the transport layer wraps that data inside its
format, then the network layer wraps the data, and finally the link (ethernet) layer encapsulates the data and transmits it.

Each network layer either encapsulates the data stream with additional information, or manages data handling or come part of the connection.
Without going into a great deal of technical detail, I will describe a general example of how these layers work in real life. Assuming that the
protocol stack being used is TCP/IP and the user is going to use an FTP client program to get or send files from/to a FTP server the following will
essentially happen:

1. The user will start the FTP client program on the sending computer.
 2. The user will select the address (If the user selected a name, a description of DNS would need to be described complicating this
scenario) and port of the server.
3. The user will indicate to the FTP client program that they want to connect to the server.
4. The application layer will send information through the presentation layer to the session layer telling it to open a connection to the
other computer at a specific address and port. The presentation layer will not do much at this time, and the presentation layer is
actually handled by the FTP program.
5. The session layer will negociate through to the FTP server for a connection. There are several synchronization signals sent between
the client and server computers just to establish the connection. This is a description of the sending of a signal from the client to the
server:
1. The session layer of the client will send a data packet (SYN) signal to the transport layer.
2. The transport layer will add a header (TCP header) to the packet indicating what the source port is and what the
destination port is. There are also some other flags and information that will not be discussed here to minimize
complexity of this explanation.
3. The network layer will add source IP address and destination IP address along with other information in a IP header.
4. The datalink layer will determine (using ARP and routing information which is not discussed here for brevity) the
hardware address of the computer the data is being sent to. An additional header (ethernet) will be added at this layer
which indicates the hardware address to receive the message along with other information.
5. The information will be transmitted across the physical wire (hardware layer) until the signal reaches the network card of
the server computer. The signal may go through several hubs or repeaters.
6. The FTP server will normally only look for ethernet frames that are matching its own hardware address.
7. The FTP server will see the ethernet frame matching its address and strip the ethernet header information and send it to
the network layer.
8. The network layer will examine the IP address information, strip the IP header, and if the IP address matches its own, will
send the information to the transport layer.
9. The transport layer will look at the TCP port number and based on the port number and services being run, will strip the
TCP header and send the information to the appropriate program which is servicing the requested port.
10. At this point, the session layer in the FTP program will conduct a series of data exchanges between itself through all the
lower layers to the client computer until a session is established.
6. At this point information may be sent through several FTP commands between the client and the server. Every transmission passes
through the network layers from the application layer down to the hardware layer and back up the layers on the receiving computer.
7. When the client decides to terminate the session layer will be informed by the higher layers and will negociate for the closing of the
connection.

TCP/IP Networking Protocols

The TCP/IP suite of protocols is the set of protocols used to communicate across the internet. It is also widely used on many organizational
networks due to its flexiblity and wide array of functionality provided. Microsoft who had originally developed their own set of protocols
now is more widely using TCP/IP, at first for transport and now to support other services.

TCP/IP by Layer

Link Layer

 SLIP - Serial Line Internet Protocol. This protocol places data packets into data frames in preparation for transport across
network hardware media. This protocol is used for sending data across serial lines. There is no error correction, addressing or
packet identification. There is no authentication or negotiation capabilities with SLIP. SLIP will only support transport of IP
packets.
 CSLIP - Compressed SLIP is essentially data compression of the SLIP protocol. It uses Van Jacobson compression to drastically
reduce the overhead of packet overhead. This may also be used with PPP and called CPPP.
 PPP - Point to Point Protocol is a form of serial line data encapsulation that is an improvement over SLIP which provides serial
bi-directional communication. It is much like SLIP but can support AppleTalk, IPX, TCP/IP, and NetBEUI along with TCP/IP which
is supported by SLIP. It can negociate connection parameters such as speed along with the ability to support PAP and CHAP user
authentication.
 Ethernet - Ethernet is not really called a protocol. There are also many types of ethernet. The most common ethernet which is
used to control the handling of data at the lowest layer of the network model is 802.3 ethernet. 802.3 ethernet privides a
means of encapsulating data frames to be sent between computers. It specifies how network data collisions are handled along
with hardware addressing of network cards.

Network Layer

 ARP - Address Resolution Protocol enables the packaging of IP data into ethernet packages. It is the system and messaging
protocol that is used to find the ethernet (hardware) address from a specific IP number. Without this protocol, the ethernet
package could not be generated from the IP package, because the ethernet address could not be determined.
  IP - Internet Protocol. Except for ARP and RARP all protocols' data packets will be packaged into an IP data packet. IP provides
the mechanism to use software to address and manage data packets being sent to computers.
 RARP - Reverse address resolution protocol is used to allow a computer without a local permanent data storage media to
determine its IP address from its ethernet address.

Transport Layer

 TCP - A reliable connection oriented protocol used to control the management of application level services between computers.
It is used for transport by some applications.
 UDP - An unreliable connection less protocol used to control the management of application level services between computers.
It is used for transport by some applications which must provide their own reliability.
 ICMP - Internet control message protocol (ICMP) provides management and error reporting to help manage the process of
sending data between computers. (Management). This protocol is used to report connection status back to computers that are
trying to connect other computers. For example, it may report that a destination host is not reachable.
 IGMP - Internet Group Management Protocol used to support multicasting. IGMP messages are used by multicast routers to
track group memberships on each of its networks.

Application Layer

 FTP - File Transfer Protocol allows file transfer between two computers with login required.
 TFTP - Trivial File Transfer Protocol allows file transfer between two computers with no login required. It is limited, and is intended
for diskless stations.
 NFS - Network File System is a protocol that allows UNIX and Linux systems remotely mount each other's file systems.
 SNMP - Simple Network Management Protocol is used to manage all types of network elements based on various data sent and
received.
 SMTP - Simple Mail Transfer Protocol is used to transport mail. Simple Mail Transport Protocol is used on the internet, it is not a
transport layer protocol but is an application layer protocol.
 HTTP - Hypertext Transfer Protocol is used to transport HTML pages from web servers to web browsers. The protocol used to
communicate between web servers and web browser software clients.
 BOOTP - Bootstrap protocol is used to assign an IP address to diskless computers and tell it what server and file to load which will
provide it with an operating system.
 DHCP - Dynamic host configuration protocol is a method of assigning and controlling the IP addresses of computers on a given
network. It is a server based service that automatically assigns IP numbers when a computer boots. This way the IP address of a
computer does not need to be assigned manually. This makes changing networks easier to manage. DHCP can perform all the
functions of BOOTP.
 BGP - Border Gateway Protocol. When two systems are using BGP, they establish a TCP connection, then send each other their BGP
routing tables. BGP uses distance vectoring. It detects failures by sending periodic keep alive messages to its neighbors every 30
seconds. It exchanges information about reachable networks with other BGP systems including the full path of systems that are
between them. Described by RFC 1267, 1268, and 1497.
 EGP - Exterior Gateway Protocol is used between routers of different systems.
 IGP - Interior Gateway Protocol. The name used to describe the fact that each system on the internet can choose its own routing
protocol. RIP and OSPF are interior gateway protocols.
 RIP - Routing Information Protocol is used to dynamically update router tables on WANs or the internet. A distance-vector algorithm
is used to calculate the best route for a packet. RFC 1058, 1388 (RIP2).
 OSPF - Open Shortest Path First dynamic routing protocol. A link state protocol rather than a distance vector protocol. It tests the
status of its link to each of its neighbors and sends the acquired information to them.
 POP3 - Post Office Protocol version 3 is used by clients to access an internet mail server to get mail. It is not a transport layer
protocol.
 IMAP4 - Internet Mail Access Protocol version 4 is the replacement for POP3.
 Telnet is used to remotely open a session on another computer. It relies on TCP for transport and is defined by RFC854.

Bandwidth Control

 BAP - Bandwidth Allocation Protocol is a bandwidth control protocol for PPP connections. It works with BACP.
 BACP - Bandwidth Allocation Control Protocol.
TCP/IP by Function

Packaging and Low Level

 IP - Internet Protocol. Except for ARP and RARP all protocols' data packets will be packaged into an IP data packet. IP provides the
mechanism to use software to address and manage data packets being sent to computers.
 SLIP - Serial Line Internet Protocol. This protocol places data packets into data frames in preparation for transport across network
hardware media. This protocol is used for sending data across serial lines. There is no error correction, addressing or packet
identification. There is no authentication or negotiation capabilities with SLIP. SLIP will only support transport of IP packets.
 CSLIP - Compressed SLIP is essentially data compression of the SLIP protocol. It uses Van Jacobson compression to drastically reduce
the overhead of packet overhead. This may also be used with PPP and called CPPP.
 PPP - Point to Point Protocol is a form of serial line data encapsulation that is an improvement over SLIP which provides serial bi-
directional communication. It is much like SLIP but can support AppleTalk, IPX, TCP/IP, and NetBEUI along with TCP/IP which is
supported by SLIP. It can negociate connection parameters such as speed along with the ability to support PAP and CHAP user
authentication.
 Ethernet - Ethernet is not really called a protocol. There are also many types of ethernet. The most common ethernet which is used
to control the handling of data at the lowest layer of the network model is 802.3 ethernet. 802.3 ethernet privides a means of
encapsulating data frames to be sent between computers. It specifies how network data collisions are handled along with hardware
addressing of network cards.

Transport and Basic Functions

 TCP - A reliable connection oriented protocol used to control the management of application level services between computers. It is
used for transport by some applications.
 UDP - An unreliable connection less protocol used to control the management of application level services between computers. It is
used for transport by some applications which must provide their own reliability.

Network Management

 SNMP - Simple Network Management Protocol is used to manage all types of network elements based on various data sent and
received.
 ICMP - Internet control message protocol provides management and error reporting to help manage the process of sending data
between computers. (Management). This protocol is used to report connection status back to computers that are trying to connect
other computers. For example, it may report that a destination host is not reachable. This protocol is required for basic TCP/IP
operations.
 ARP - Address Resolution Protocol enables the packaging of IP data into ethernet packages. It is the system and messaging protocol
that is used to find the ethernet (hardware) address from a specific IP number. Without this protocol, the ethernet package could
not be generated from the IP package, because the ethernet address could not be determined. protocol is used to report connection
status back to computers that are trying to connect other computers. For example, it may report that a destination host is not
reachable. This protocol is required for basic TCP/IP operations.

Host Management

 BOOTP - Bootstrap protocol is used to assign an IP address to diskless computers and tell it what server and file to load which will
provide it with an operating system.
 DHCP - Dynamic host configuration protocol is a method of assigning and controlling the IP addresses of computers on a given
network. It is a server based service that automatically assigns IP numbers when a computer boots. This way the IP address of a
computer does not need to be assigned manually. This makes changing networks easier to manage. DHCP can perform all the
functions of BOOTP.
 RARP - Reverse address resolution protocol is used to allow a computer without a local permanent data storage media to determine
its IP address from its ethernet address.

Mail Protocols

 SMTP - Simple Mail Transfer Protocol is used to transport mail. Simple Mail Transport Protocol is used on the internet, it is not a
transport layer protocol but is an application layer protocol.
 POP3 - Post Office Protocol version 3 is used by clients to access an internet mail server to get mail. It is not a transport layer
protocol.
 IMAP4 - Internet Mail Access Protocol version 4 is the replacement for POP3.
Multicasting Protocols

 IGMP - Internet Group Management Protocol used to support multicasting. IGMP messages are used by multicast routers to track
group memberships on each of its networks.

Routing Protocols

 BGP - Border Gateway Protocol. When two systems are using BGP, they establish a TCP connection, then send each other their BGP
routing tables. BGP uses distance vectoring. It detects failures by sending periodic keep alive messages to its neighbors every 30
seconds. It exchanges information about reachable networks with other BGP systems including the full path of systems that are
between them. Described by RFC 1267, 1268, and 1497
 EGP - Exterior Gateway Protocol is used between routers of different systems.
 IGP - Interior Gateway Protocol. The name used to describe the fact that each system on the internet can choose its own routing
protocol. RIP and OSPF are interior gateway protocols.
 RIP - Routing Information Protocol is used to dynamically update router tables on WANs or the internet.
 OSPF - Open Shortest Path First dynamic routing protocol. A link state protocol rather than a distance vector protocol. It tests the
status of its link to each of its neighbors and sends the acquired information to them.

Protocol Terms

1. ADSP - AppleTalk Data Stream Protocol is used to provide data stream service for sockets. The data stream is full duplex
meaning communication may be sent both directions at the same time. Works at the OSI network model session layer. Part of
the AppleTalk suite of protocols.
2. AEP - AppleTalk echo protocol uses echoes to tell if a computer, or node, is available. It also measures the time it takes for
eches to travel from the source computer (node) to the destination and back. Works at the OSI network model transport layer.
Part of the AppleTalk suite of protocols.
3. AFP - AppleTalk Filing protocol makes network files appear local by managing file sharing at the presentation layer. This
protocol is build to top of ASP. AFP supports communication between different types of computers. Works at the OSI network
model application and presentation layers. Part of the AppleTalk suite of protocols.
4. AppleShare - Works at the application layer to provide services. Part of the AppleTalk suite of protocols.
5. APPC - Advanced Peer-to-Peer Communications provides peer to peer services at the transport and session layer. Part of the
System Network Architecture (SNA) suite of protocols.
6. APPN - Advanced Peer-to-Peer Networking supports the computer connections at the network and transport layers. Part of the
System Network Architecture (SNA) suite of protocols.
7. ARP - Address Resolution Protocol enables the packaging of IP data into ethernet packages. It is the system and messaging
protocol that is used to find the ethernet (hardware) address from a specific IP number. Without this protocol, the ethernet
package could not be generated from the IP package, because the ethernet address could not be determined. Part of the TCP/IP
suite of protocols.
8. ARUP - AppleTalk update routing is a newer version of RTMP. Part of the AppleTalk suite of protocols.
9. ASP - AppleTalk Session Protocol. opens, maintains, and closes transactions during a session, while ADSP provides a full-duplex,
byte-stream service between any two sockets on an AppleTalk Internet. Works at the OSI network model session layer. Part of
the AppleTalk suite of protocols.
10. ATP - AppleTalk Transaction Protocol provides a Transport Layer connection between computers. This protocol guarantees
reliability by directing the transaction process and binding the request and response. Works at the OSI network model transport
layer. Part of the AppleTalk suite of protocols.
11. BACP - Bandwidth Allocation Control Protocol.
12. BAP - Bandwidth Allocation Protocol is a bandwidth control protocol for PPP connections. It works with BACP.
13. BGP - Border Gateway Protocol. When two systems are using BGP, they establish a TCP connection, then send each other their
BGP routing tables. BGP uses distance vectoring. It detects failures by sending periodic keep alive messages to its neighbors
every 30 seconds. It exchanges information about reachable networks with other BGP systems including the full path of systems
that are between them. Described by RFC 1267, 1268, and 1497.
14. BOOTP - Bootstrap protocol is used to assign an IP address to diskless computers and tell it what server and file to load which
will provide it with an operating system. Part of the TCP/IP suite of protocols.
15. CHAP - Challenge Handshake Authentication Protocol is a three way handshake protocol which is considered more secure than
PAP. Authentication Protocol.
16. CIPE - Crypto IP Encapsulation. An encryption protocol.
17. CSLIP - Compressed SLIP is essentially data compression of the SLIP protocol. It uses Van Jacobson compression to drastically
reduce the overhead of packet overhead. This may also be used with PPP and called CPPP.
18. DDP - Datagram Delivery Protocol is a routable protocol that provides for data packet (datagram) transportation. It operates at
the network layer of the OSI network model which is the same level the IP protocol in TCP/IP operates at. Works at the OSI
network model network layer. Part of the AppleTalk suite of protocols.
19. DECnet - From Digital Equipment Corporation is a suite of protocols which may be used on large networks that integrate
mainframe and minicomputer systems
20. DES - Data Encryption Standard for older clients and servers.
21. DHCP - Dynamic host configuration protocol is a method of assigning and controlling the IP addresses of computers on a given
network. It is a server based service that automatically assigns IP numbers when a computer boots. This way the IP address of a
computer does not need to be assigned manually. This makes changing networks easier to manage. DHCP can perform all the
functions of BOOTP. Part of the TCP/IP suite of protocols.
22. DLC - Data Link Control. This protocol operates at the data link layer and is designed for communications between Hewlett-
Packard network printers and IBM mainframe computers. This protocol is not routable.
23. EAP - Extensible Authentication Protocol is used between a dial-in client and server to determine what authentication protocol
will be used.
24. EGP - Exterior Gateway Protocol is used between routers of different systems.

 Ethernet - Ethernet is not really called a protocol. There are also many types of ethernet. The most common ethernet which is used
to control the handling of data at the lowest layer of the network model is 802.3 ethernet. 802.3 ethernet privides a means of
encapsulating data frames to be sent between computers. It specifies how network data collisions are handled along with hardware
addressing of network cards.
 FTP - File Transfer Protocol allows file transfer between two computers with login required. Part of the TCP/IP suite of protocols.
 HTTP - Hypertext Transfer Protocol is used to transport HTML pages from web servers to web browsers. Part of the TCP/IP suite of
protocols.
 ICMP - Internet control message protocol (ICMP) provides management and error reporting to help manage the process of sending
data between computers. (Management). This protocol is used to report connection status back to computers that are trying to
connect other computers. For example, it may report that a destination host is not reachable. Part of the TCP/IP suite of protocols.
 IGMP - Internet Group Management Protocol used to support multicasting. IGMP messages are used by multicast routers to track
group memberships on each of its networks. Part of the TCP/IP suite of protocols.
 IGP - Interior Gateway Protocol. The name used to describe the fact that each system on the internet can choose its own routing
protocol. RIP and OSPF are interior gateway protocols.
 IMAP4 - Internet Mail Access Protocol version 4 is the replacement for POP3.
 IP - Internet Protocol. Except for ARP and RARP all protocols' data packets will be packaged into an IP data packet. IP provides the
mechanism to use software to address and manage data packets being sent to computers. Part of the TCP/IP suite of protocols.
 IPIP tunneling - Tunneling IP packets in IP packets. Used for VPN tunneling.
 IPSec - Internet protocol security, developed by IETF, implemented at layer 3. It is a collection of security measures that address data
privacy, integrity, authentication, and key management, in addition to tunneling. Does not cover key management. A VPN tunneling
Protocol.
 IPX - Internetwork Packet Exchange supports the transport and network layers of the OSI network model. Provides for network
addressing and routing. It provides fast, unreliable, communication with network nodes using a connection less datagram service.
Part of the IPX/SPX suite of protocols.
 ISAKMP/Oakley - Internet Security Association and Key Management Protocol Authentication
 L2F - Layer2 Forwarding, works at the link layer of the OSI model. It has no encryption. It is being replaced by L2TP. A VPN tunneling
Protocol.
 L2TP - Layer2 Tunneling Protocol. (RFC 2661) Combines features of L2F and PPTP and works at the link layer. No encryption or key
management included in specifications. A VPN tunneling Protocol.
 LAP - Link-Access Protocol is a set of data link layer protocols that support LocalTalk (LLAP), EtherTalk (ELAP), TokenTalk (TLAP), and
FDDITalk. The LAP manager determines which LAP to connect for the correct upper level protocol.
 LCP - Link Control Protocol
 LDAP - Lightweight Directory Access Protocol is a standard for directory services with additional features that enhance its capabilities
being added. LDAP may allow for consolidation of directory lists to be consolidated. An LDAP server provides the directory services
and other LDAP functions.
 MHS - Message Handling Service by Novell is used for mail on Netware networks.
 MIME - Multipurpose Internet Mail Extension is the protocol that defines the way files are attached to SMTP messages.
 MS-CHAP (MD4) - Uses a Microsoft version of RSA message digest 4 challenge and reply protocol. It only works on Microsoft systems
and enables data encryption. Selecting this authentification method causes all data to be encrypted.
 MSP - Message Send Protocol
 MTP - Multicast Transport Protocol is a new transport layer protocol designed for reliable multicast network message transport.
 NBP - Name-binding protocol translates addresses into user friently three part names. Works at the OSI network model transport
layer. Part of the AppleTalk suite of protocols.
 NBT - NetBIOS over TCP/IP refers to NetBIOS being transported by TCP/IP rather than NetBEUI defined by RFC 1002.
 NCP - NetWare Core Protocol provides for client/server interactions such as file and print sharing. It works at the application,
presentation, and session levels. Part of the IPX/SPX suite of protocols.
 NetBIOS - Network Basic Input/Output allows browsing of network resources and handles basic functions of a Windows network.
Two way acknowledged data transfer is used. It is a Microsoft protocol used to support Microsoft Networking. Works at the session
layer. Controls the sessions between computers and maintains connections.
 NetBEUI - NetBIOS Extended User Interface. Microsoft Protocol used to support Microsoft Networking. Provides data transportation.
It is not a routable transport protocol which is why NBT exists on large networks to use routable TCP protocol on large networks.
This protocol may sometimes be called the NetBIOS frame (NBF) protocol. Works at the Transport and Network layers. NetBEUI -
 The main protocol used for networking in the windows environment. NetBIOS Extended User Interface works at the transport layer
and provides data transportation. It is not a routable transport protocol.
 NFS - Network File System is a protocol that allows UNIX and Linux systems remotely mount each other's file systems. Part of the
TCP/IP suite of protocols.
 NNTP - Network News Transport Protocol is used to link newsgroups for discussions on the web.
 OSI - Open Systems Interconnect. A suite of protocols developed by the International Standards Organization (ISO) which
corresponds with the layers of the OSI model. These protocols provide a number of application protocols for various functions. The
OSI protocol stack may be used to connect large systems. OSI is a routable transport protocol.
 OSPF - Open Shortest Path First dynamic routing protocol. A link state protocol rather than a distance vector protocol. It tests the
status of its link to each of its neighbors and sends the acquired information to them.
 PAP - Password Authentification Protocol is a two way handshake protocol designed for use with PPP. Authentication Protocol
Password Authentication Protocol is a plain text password used on older SLIP systems. It is not secure.
 PAP - Printer Access Protocol is a connection oriented service for managing information between workstations and printers. It is
used to send print requests to printers. Part of the AppleTalk suite of protocols.
 POP3 - Post Office Protocol version 3 is used by clients to access an internet mail server to get mail. It is not a transport layer
protocol.
 PPP - Point to Point Protocol is a form of serial line data encapsulation that is an improvement over SLIP which provides serial bi-
directional communication. It is much like SLIP but can support AppleTalk, IPX, TCP/IP, and NetBEUI along with TCP/IP which is
supported by SLIP. It can negociate connection parameters such as speed along with the ability to support PAP and CHAP user
authentication.
 PPTP - Point-to-Point Tunneling Protocol (RFC 2637) works at the link layer. No encryption or key management included in
specifications. A VPN tunneling Protocol
 Protocol - A set of standards sets of standards that define all operations within a network. There are various protocols that operate
at various levels of the OSI network model such as transport protocols include TCP, SPX.
 RADIUS - Remote Authentication Dial-In User Service used to authenticate users dialing in remotely to servers in a organization's
network.
 RARP - Reverse address resolution protocol is used to allow a computer without a local permanent data storage media to determine
its IP address from its ethernet address. Part of the TCP/IP suite of protocols.
 RIP - Routing Information Protocol is used to dynamically update router tables on WANs or the internet. A distance-vector algorithm
is used to calculate the best route for a packet. RFC 1058, 1388 (RIP2)
 RTMP - Routing Table Maintenance Protocol is used to update routers with information about network status and address tables.
The whole address table is sent across the network. This protocol sends its information as broadcasts across the network every 10
seconds. Works at the OSI network model transport layer. Part of the AppleTalk suite of protocols.
 SAP - Service Advertising Protocol packets are used by file and print servers to periodically advertise the address of the server and
the services available. It works at the application, presentation, and session levels. Part of the IPX/SPX suite of protocols.
 S/Key - A one time password system, secure against replays. RFC 2289. Authentication Protocol.
 SLIP - Serial Line Internet Protocol. This protocol places data packets into data frames in preparation for transport across network
hardware media. This protocol is used for sending data across serial lines. There is no error correction, addressing or packet
identification. There is no authentication or negotiation capabilities with SLIP. SLIP will only support transport of IP packets.
 SMB - Microsoft Protocol used to support Microsoft Networking by providing redirector client to server communication. Works at
the presentation layer..
 SMTP - Simple Mail Transfer Protocol is used to transport mail. Simple Mail Transport Protocol is used on the internet, it is not a
transport layer protocol but is an application layer protocol. Part of the TCP/IP suite of protocols.
 SNAP - Sub Network Access Protocol.
 SNMP - Simple Network Management Protocol is used to manage all types of network elements based on various data sent and
received. Part of the TCP/IP suite of protocols.
 Socks - handled at the application layer.
 SPAP - Shiva PAP. Only NT RAS server supports this for clients dialing in.
 SPX - Sequenced Packet Exchange operates at the transport layer providing connection oriented communication on top of IPX. Part
of the IPX/SPX suite of protocols.
 SSL - Secure sockets layer. An encryption protocol.
 TACACS - Offers authentication, accounting, and authorization. Authentication Protocol.
 TCP - A reliable connection oriented protocol used to control the management of application level services between computers. It is
used for transport by some applications. Part of the TCP/IP suite of protocols.
 Telnet is used to remotely open a session on another computer. It relies on TCP for transport and is defined by RFC854.
 TFTP - Trivial File Transfer Protocol allows file transfer between two computers with no login required. It is limited, and is intended
for diskless stations. Part of the TCP/IP suite of protocols.
 UDP - An unreliable connection less protocol used to control the management of application level services between computers. It is
used for transport by some applications which must provide their own reliability. Part of the TCP/IP suite of protocols.
 X.25 - This is a set of protocols developed by the CCITT/ITU which specifies how to connect computer devices over a internetwork.
These protocols use a great deal of error checking for use over unreliable telephone lines.
 X.400 - International Telecommunication Union standard defines transfer protocols for sending mail between mail servers.
 X.500 - This is a recommendation outlining how an organization can share objects and names on a large network. It is hierarchical
similar to DNS, defining domains consisting of organizations, divisions, departments, and workgroups. The domains provide
 information about the users and available resources on that domain, This X.500 system is like a directory. Its recommendation
comes from the International Telegraph and Telephone Consultative Committee (CCITT).
 ZIP - Zone Information Protocol is used by AppleTalk routers co create a Zone Information Table (ZIT). The ZIT has a list of zone
names which are associated with network numbers. This list is displayed in the Apple System's file Chooser. Works at the OSI
network model session layer. Part of the AppleTalk suite of protocols.