GROUP3_AMAK: Network protocol analysis

Network protocols defines a language of rules and conventions for communication between network devices.

List of Protocols with examples of each : -

1 Layer 1 protocols (Physical Layer)

• ADSL Asymmetric digital subscriber line
• ISDN Integrated Services Digital Network

2 Layer 2 protocols (Data Link Layer)

• Ethernet
• IEEE 802.11
• IEEE 802.16

Layer 3 protocols (Network Layer)

• IPv4 Internet Protocol version 4
• IPv6 Internet Protocol version 6

Layer 4 protocols (Transport Layer)

• TCP Transmission Control Protocol
• UDP User Datagram Protocol

Layer 5 protocols (Session Layer)

• NCP NetWare Core Protocol
• NFS Network File System

Layer 7 protocols (Application Layer)

• FTP, File Transfer Protocol
• HTTP, HyperText Transfer Protocol
• IMAP, Internet Message Access Protocol
• POP3 Post Office Protocol Version 3
• Telnet, a remote terminal access protocol
• SOAP, Simple Object Access Protocol

What is Network Protocol Analysis and Protocol Analyzer?

The packet analyzer (also known as a network protocol) is computer software or computer hardware that can intercept and log traffic passing over a digital network or part of a network.

Network protocol analysis is a process for a program or a device to decode network protocol headers and trailers to understand the data and information inside the packet encapsulated by the protocol. To conduct protocol analysis, packets must be captured at real time for line speed analysis or later analysis. Such program or device is called a Protocol Analyzer.

The uses of network analysers :

• Analyze network problems
• Detect network intrusion attempts
• Gain information for effecting a network intrusion
• Monitor network usage
• Gather and report network statistics
• Filter suspect content from network traffic
• Spy on other network users and collect sensitive information such as passwords
• Debug client/server communications
• Debug network protocol implementations

Notable Network analysis applications : -

• dSniff
• Microsoft Network Monitor
• Wireshark (formerly known as Ethereal)
• Snoop (part of Solaris)
• OPNET Technologies ACE Analyst