Network Protocols Index

What is a Network Protocol?

A network protocol is a set of rules that govern the communication between devices over a computer network. It specifies how data is transmitted over a network, how devices identify and authenticate each other, the format of the data, the order in which the data is sent, how errors are handled, and how data is recovered if it is lost or corrupted during transmission.

Network protocols define the methods by which devices communicate with each other, enabling them to send and receive data, establish connections, and manage network resources.

By using predefined protocols, devices from different manufacturers and running different software can communicate with each other seamlessly. This enables networks to function reliably and efficiently, and facilitates the exchange of information between devices across the globe.

At WireX Systems we analyze over a hundred different protocols and extract thousands of different attributes and commands from protocol payloads. Here is a sample list of protocols, describing how these protocols work, what are they used for, how they were used in an attack scenario and relevant correlation to the MITRE ATT&CK® Framework as well as sample attributes that WireX Systems is analyzing, extracting, compressing and indexing from the protocol payload.

TNS

Transparent Network Substrate (TNS) is a proprietary networking protocol developed by Oracle Corporation.

TFTP

Trivial File Transfer Protocol (TFTP) is a simple, lightweight file transfer protocol used primarily for transferring files over a network.

POP3

Post Office Protocol 3 (POP3) is a widely-used application layer protocol in the Internet suite that allows email clients to retrieve emails from a remote mail server.

SMB

SMB, (Server Message Block), is a network protocol designed to enable file and resource sharing between computers on a network.

TDS

TDS (Tabular Data Stream) is a network protocol used primarily for communication between Microsoft SQL Server and its clients.

UDP

User Datagram Protocol (UDP) is a transport layer protocol in the Internet Protocol (IP) suite, designed for simple and fast data transmission over a network.

FTP

File Transfer Protocol (FTP) is a standard network protocol used to transfer files between a client and a server over a TCP/IP-based network, such as the internet.

HTTPS

HTTPS (Hypertext Transfer Protocol Secure) is an extension of the HTTP protocol that provides secure communication over a network, such as the internet, by encrypting the data exchanged between a client (e.g., web browser) and a server (e.g., web server).

DNS

The Domain Name System (DNS) is a critical network protocol that enables the internet to function smoothly by translating human-readable domain names into IP addresses, which are numerical identifiers for devices connected to the internet.

IPSec

IPSec, short for Internet Protocol Security, is a suite of network protocols designed to secure communications over IP networks.

NAT

Network Address Translation (NAT) is a networking protocol that enables multiple devices on a private network to share a single public IP address when accessing the internet.

SSH

SSH (Secure Shell) is a cryptographic network protocol that provides secure communication channels over unsecured networks.

PPTP

PPTP, or Point-to-Point Tunneling Protocol, is a network protocol that enables the creation of virtual private networks (VPNs).

NetBios

NETBIOS (Network Basic Input/Output System) is a legacy network protocol that enables communication between computers and devices within a local area network (LAN).

SNMP

Simple Network Management Protocol (SNMP) is a widely used network protocol designed for managing and monitoring network devices such as routers, switches, servers, printers, and other network-attached devices.

DHCP

Dynamic Host Configuration Protocol (DHCP) is a network protocol that automates the process of assigning IP addresses and other network configuration information to devices on a network.

ICMP

Internet Control Message Protocol (ICMP) is an important part of the Internet Protocol (IP) suite.

SMTP

SMTP, or Simple Mail Transfer Protocol, is a fundamental network protocol that is used to facilitate the transmission of emails.

TELNET

TELNET is a network protocol that enables remote access to computers and other devices.

SIP

Session Initiation Protocol (SIP) is a network protocol that is used to establish, modify and terminate multimedia sessions over the network.

RTP

Real-time Transport Protocol (RTP) is a network protocol used for delivering audio and video over IP networks.

TCP

The Transmission Control Protocol (TCP) is a foundational network protocol that is essential for the functioning of the Internet.

CIFS

CIFS, or Common Internet File System, is a network protocol that is used to provide shared access to files, printers, and other network resources.

HTTP

HTTP (Hypertext Transfer Protocol) is the protocol used to transfer data between web browsers and web servers.

NFS

Network File System (NFS) is a network protocol that allows users to access and share files over a network.