eth, ip and TCP packet structure

1

ETHERNET Structure

- 6 bytes Destination Ethernet Address (All 1 if broadcast,

…)

- 6 bytes Source Ethernet Address

- 2 bytes Length or Type Field

- if IEEE 802.3 number of bytes <= 1500(05DC)

- if ethernet I or II is the packet type > 1500(05DC)

- 46 bytes until 1500 are data! Short packets filled until 46

bytes

- 4 bytes (Frame Check sequence: directly evaluated and

managed by the hardware. Not accessible via software.)

2

SAP CODES

Null LSAP

0x00

Individual LLC Sublayer Management Function

0x02

Group LLC Sublayer Management Function

0x03

IBM SNA Path Control (individual)

0x04

IBM SNA Path Control (group)

0x05

ARPANET Internet Protocol (IP)

0x06

SNA

0x08

SNA

0x0C

PROWAY (IEC955) Network Management & Initialization

0x0E

Texas Instruments

0x18

IEEE 802.1 Bridge Spanning Tree Protocol

0x42

EIA RS-511 Manufacturing Message Service

0x4E

ISO 8208 (X.25 over IEEE 802.2 Type 2 LLC)

0x7E

Xerox Network Systems (XNS)

0x80

Nestar

0x86

PROWAY (IEC 955) Active Station List Maintenance

0x8E

ARPANET Address Resolution Protocol (ARP)

0x98

Banyan VINES

0xBC

SubNetwork Access Protocol (SNAP)

0xAA

Novell NetWare

0xE0

IBM NetBIOS

0xF0

IBM LAN Management (individual)

0xF4

IBM LAN Management (group)

0xF5

IBM Remote Program Load (RPL)

0xF8

Ungermann-Bass

0xFA

ISO Network Layer Protocol

0xFE

Global LSAP

0xFF

Ethernet types

0x0000

0x05DC

IEEE 802.3 Length Fields

0x0600

Xerox XNS IDP

0x0800

DOD IP

0x0801

X.75 Internet

0x0802

NBS Internet

0x0803

ECMA Internet

0x0804

CHAOSnet

0x0805

X.25 Level 3

0x0806

ARP (for IP and CHAOS)

0x0807

Xerox XNS Compatibility

0x081C

Symbolics Private

0x0888

0x088A

Xyplex

0x0900

Ungermann-Bass network debugger

0x0A00

Xerox 802.3 PUP

0x0A01

Xerox 802.3 PUP Address Translation

0x0A02

Xerox PUP CAL Protocol (unused)

0x0BAD

Banyan Systems, Inc.

0x1000

Berkeley Trailer negotiation

0x1001

0x100F

Berkeley Trailer encapsulation for IP

0x1066

VALIS Systems

0x1600

VALID Systems

3

0x3C01

0x3C0D

3Com Corporation

0x3C10

0x3C14

3Com Corporation

0x4242

PCS Basic Block Protocol

0x5208

BBN Simnet Private

0x6000

DEC Unassigned

0x6001

DEC MOP Dump/Load Assistance

0x6002

DEC MOP Remote Console

0x6003

DEC DECnet Phase IV

0x6004

DEC LAT

0x6005

DEC DECnet Diagnostic Protocol: DECnet Customer Use

0x6007

DEC DECnet LAVC

0x6008

DEC Amber

0x6009

DEC MUMPS

0x6010

0x6014

3Com Corporation

0x7000

Ungermann-Bass download

0x7001

Ungermann-Bass NIU

0x7002

Ungermann-Bass diagnostic/loopback

0x7007

OS/9 Microware

0x7020

0x7028

LRT (England)

0x7030

Proteon

0x7034

Cabletron

0x8003

Cronus VLN

0x8004

Cronus Direct

0x8005

HP Probe protocol

0x8006

Nestar

0x8008

AT&T

0x8010

Excelan

0x8013

SGI diagnostic type (obsolete)

0x8014

SGI network games (obsolete)

0x8015

SGI reserved type (obsolete)

0x8016

SGI bounce server (obsolete)

0x8019

Apollo

0x802E

Tymshare

0x802F

Tigan, Inc.

0x8035

Reverse ARP (RARP)

0x8036

Aeonic Systems

0x8038

DEC LANBridge

0x8039

DEC DSM

0x803A

DEC Aragon

0x803B

DEC VAXELN

0x803C

DEC NSMV

0x803D

DEC Ethernet CSMA/CD Encryption Protocol

0x803E

DEC DNA

0x803F

DEC LAN Traffic Monitor

0x8040

DEC NetBIOS

0x8041

DEC MS/DOS

0x8042

DEC Unassigned

0x8044

Planning Research Corporation

0x8046

AT&T

0x8047

AT&T

0x8049

ExperData (France)

0x805B

VMTP (Versatile Message Transaction Protocol, RFC-1045,

Stanford)

0x805C

Stanford V Kernel production, Version 6.0

0x805D

Evans & Sutherland

0x8060

Little Machines

0x8062

Counterpoint Computers

0x8065

University of Massachusetts, Amherst

0x8066

University of Massachusetts, Amherst

4

0x8067

Veeco Integrated Automation

0x8068

General Dynamics

0x8069

AT&T

0x806A

Autophon (Switzerland)

0x806C

ComDesign

0x806D

Compugraphic Corporation

0x806E

0x8077

Landmark Graphics Corporation

0x807A

Matra (France)

0x807B

Dansk Data Elektronic A/S (Denmark)

0x807C

Merit Intermodal

0x807D

VitaLink Communications

0x807E

VitaLink Communications

0x807F

VitaLink Communications

0x8080

VitaLink Communications bridge

0x8081

Counterpoint Computers

0x8082

Counterpoint Computers

0x8083

Counterpoint Computers

0x8088

Xyplex

0x8089

Xyplex

0x808A

Xyplex

0x809B

AppleTalk and Kinetics AppleTalk over Ethernet

0x809C

Datability

0x809D

Datability

0x809E

Datability

0x809F

Spider Systems, Ltd. (England)

0x80A3

Nixdorf Computer (West Germany)

0x80A4

0x80B3

Siemens Gammasonics, Inc.

0x80C0

Digital Communication Associates

0x80C1

Digital Communication Associates

0x80C2

Digital Communication Associates

0x80C3

Digital Communication Associates

0x80C6

Pacer Software

0x80C7

Applitek Corporation

0x80C8

0x80CC

Intergraph Corporation

0x80CD

Harris Corporation

0x80CE

Harris Corporation

0x80CF

0x80D2

Taylor Inst.

0x80D3

Rosemount Corporation

0x80D4

Rosemount Corporation

0x80D5

IBM SNA Services over Ethernet

0x80DD

Varian Associates

0x80DE

Integrated Solutions TRFS (Transparent Remote File System)

0x80DF

Integrated Solutions

0x80E0

0x80E3

Allen-Bradley

0x80E4

0x80F0

Datability

0x80F2

Retix

0x80F3

Kinetics, AppleTalk ARP (AARP)

0x80F4

Kinetics

0x80F5

Kinetics

0x80F7

Apollo Computer

0x80FF

0x8103

Wellfleet Communications

0x8107

Symbolics Private

0x8108

Symbolics Private

0x8109

Symbolics Private

0x8130

Waterloo Microsystems

0x8131

VG Laboratory Systems

0x8137

Novell (old) NetWare IPX

0x8138

Novell

0x8139

0x813D

KTI

5

0x9000

Loopback (Configuration Test Protocol)

0x9001

Bridge Communications XNS Systems Management

0x9002

Bridge Communications TCP/IP Systems Management

0x9003

Bridge Communications

0xFF00

BBN VITAL LANBridge cache wakeup

IP Protocols

0

Reserved

1

ICMP

Internet Control Message

2

IGMP

Internet Group Management

3

GGP

Gateway-to-Gateway

4

IP

IP in IP (encasulation)

5

ST

Stream

6

TCP

Transmission Control

7

UCL

8

EGP

Exterior Gateway Protocol

9

IGP

any private interior gateway

10

BBN-RCC-MON

BBN RCC Monitoring

11

NVP-II

Network Voice Protocol

12

PUP

13

ARGUS

14

EMCON

15

XNET

Cross Net Debugger

16

CHAOS

Chaos

17

UDP

User Datagram

18

MUX

Multiplexing

19

DCN-MEAS

DCN Measurement Subsystems

20

HMP

Host Monitoring

21

PRM

Packet Radio Measurement

22

XNS-IDP

XEROX NS IDP

23

TRUNK-1

Trunk-1

24

TRUNK-2

Trunk-2

25

LEAF-1

Leaf-1

26

LEAF-2

Leaf-2

27

RDP

Reliable Data Protocol

28

IRTP

Internet Reliable Transaction

29

ISO-TP4

ISO Transport Protocol Class 4

30

NETBLT

Bulk Data Transfer Protocol

31

MFE-NSP

MFE Network Services Protocol

32

MERIT-INP

MERIT Internodal Protocol

33

SEP

Sequential Exchange Protocol

34

3PC

Third Party Connect Protocol

35

IDPR

Inter-Domain Policy Routing Protocol

36

XTP

37

DDP

Datagram Delivery Protocol

38

IDPR-CMTP

IDPR Control Message Transport Protocol

39

TP++

TP++ Transport Protocol

40

IL

IL Transport Protocol

41

SIP

Simple Internet Protocol

42

SDRP

Source Demand Routing Protocol

43

SIP-SR

SIP Source Route

44

SIP-FRAG

SIP Fragment

45

IDRP

Inter-Domain Routing Protocol

46

RSVP

Reservation Protocol

47

GRE

General Routing Encapsulation

48

MHRP

Mobile Host Routing Protocol

6

49

BNA

50

SIPP-ESP

SIPP Encap Security Payload

51

SIPP-AH

SIPP Authentication Header

52

I-NLSP

Integrated Net Layer Security TUBA

53

SWIPE

IP with Encryption

54

NHRP

NBMA Next Hop Resolution Protocol

61

any host

any host internal protocol

62

CFTP

63

any net

local network

64

SAT-EXPAK

SATNET and Backroom EXPAK

65

KRYPTOLAN

Kryptolan

66

RVD

MIT Remote Virtual Disk Protocol

67

IPPC

Internet Pluribus Packet Core

68

any file

distributed file system

69

SAT-MON

SATNET Monitoring

70

VISA

VISA Protocol

71

IPCV

Internet Packet Core Utility

72

CPNX

Computer Protocol Network Executive

73

CPHB

Computer Protocol Heart Beat

74

WSN

Wang Span Network

75

PVP

Packet Video Protocol

76

BR-SAT-MON

Backroom SATNET Monitoring

77

SUN-ND

SUN ND PROTOCOL-Temporary

78

WB-MON

WIDEBAND Monitoring

79

WB-EXPAK

WIDEBAND EXPAK

80

ISO-IP

ISO Internet Protocol

81

VMTP

82

SECURE-VMTP

83

VINES

84

TTP

85

NSFNET-IGP

86

DGP

Dissimilar Gateway Protocol

87

TCF

88

IGRP

89

OSPFIGP

90

Sprite-RPC

Sprite RPC Protocol

91

LARP

Locus Address Resolution Protocol

92

MTP

Multicast Transport Protocol

93

AX.25

AX.25 Frames

94

IPIP

IP-within-IP Encapsulation Protocol

95

MICP

Mobile Internetworking Control Pro.

96

SCC-SP

Semaphore Communications Sec. Pro.

97

ETHERIP

Ethernet-within-IP Encapsulation

98

ENCAP

Encapsulation Header

99

any scheme

any private encryption scheme

100

GMTP

255

Reserved

IP version numbers

0

Reserved

1

Unassigned

2

Unassigned

3

Unassigned

4

IP: Internet Protocol

5

ST: ST Datagram Mode

6

SIP: Simple Internet Protocol

7

TP/IX: The Next Internet

8

PIP: The P Internet Protocol

9

TUBA

10

Unassigned

11

Unassigned

12

Unassigned

13

Unassigned

14

Unassigned

15

Reserved

8

DOD IP (from the byte 14 of ETHERNET)

RFC791, www.protocols.com

0 1 2 3

0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| Identification |Flags| Fragment Offset |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| Time to Live | Protocol | Header Checksum |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| Source Address |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| Destination Address |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| Options | Padding |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

4

8

16

32 bits

Ver.

IHL

Type of service

Total length

Identification

Flags

Fragment offset

Time to

live

Protocol

Header checksum

Source address

Destination address

Option + Padding

Data

IP header structure

Version

Version field indicates the format of the Internet header.

IHL

Internet header length is the length of the Internet header in 32-

bit words. Points to the beginning of the data. The minimum value

for a correct header is 5.

Type of service

Indicates the quality of service desired. Networks may offer

service precedence, meaning that they accept traffic only above a

certain precedence at times of high load. There is a three-way

trade-off between low delay, high reliability and high throughput.

Bits 0-2: Precedence

9

111

Network control.

110

Internetwork control.

101

CRITIC/ECP.

100

Flash override.

011

Flash.

010

Immediate.

001

Priority.

000

Routine.

Bit 3: Delay

0

Normal delay.

1

Low delay.

Bit 4: Throughput

0

Normal throughput.

1

High throughput.

Bit 5: Reliability

0

Normal reliability.

1

High reliability.

Bits 6-7: Reserved for future use.

Total length

Length of the datagram measured in bytes, including the Internet

header and data. This field allows the length of a datagram to be

up to 65,535 bytes, although such long datagrams are impractical

for most hosts and networks. All hosts must be prepared to accept

datagrams of up to 576 bytes, regardless of whether they arrive

whole or in fragments. It is recommended that hosts send datagrams

larger than 576 bytes only if the destination is prepared to

accept the larger datagrams.

Identification

Identifying value assigned by the sender to aid in assembling the

fragments of a datagram.

Flags

3 bits. Control flags:

Bit 0 is reserved and must be zero.

10

Bit 1: Don’t fragment bit:

0

May fragment.

1

Don’t fragment.

Bit 2: More fragments bit:

0

Last fragment.

1

More fragments.

Fragment offset

13 bits. Indicates where this fragment belongs in the datagram.

The fragment offset is measured in units of 8 bytes (64 bits). The

first fragment has offset zero.

Time to live

Indicates the maximum time the datagram is allowed to remain in

the Internet system. If this field contains the value zero, the

datagram must be destroyed. This field is modified in Internet

header processing. The time is measured in units of seconds.

However, since every module that processes a datagram must

decrease the TTL by at least one (even if it processes the

datagram in less than 1 second), the TTL must be thought of only

as an upper limit on the time a datagram may exist. The intention

is to cause undeliverable datagrams to be discarded and to bound

the maximum datagram lifetime.

Protocol

Indicates the next level protocol used in the data portion of the

Internet datagram.

Header checksum

A checksum on the header only. Since some header fields change,

e.g., Time To Live, this is recomputed and verified at each point

that the Internet header is processed.

Source address / destination address

32 bits each. A distinction is made between names, addresses and

routes. A name indicates an object to be sought. An address

indicates the location of the object. A route indicates how to

arrive at the object. The Internet protocol deals primarily with

addresses. It is the task of higher level protocols (such as host-

to-host or application) to make the mapping from names to

addresses. The Internet module maps Internet addresses to local

net addresses. It is the task of lower level procedures (such as

local net or gateways) to make the mapping from local net

addresses to routes.

Options

Options may or may not appear in datagrams. They must be

implemented by all IP modules (host and gateways). What is

11

optional is their transmission in any particular datagram, not

their implementation. In some environments, the security option

may be required in all datagrams.

The option field is variable in length. There may be zero or more

options. There are two possible formats for an option:

• A single octet of option type.

• An option type octet, an option length octet and the actual

option data octets.

The length octet includes the option type octet and the actual

option data octets.

The option type octet has 3 fields:

1 bit: Copied flag. Indicates that this option is copied into

all fragments during fragmentation:

0

Copied.

1

Not copied.

2 bits: Option class

0

Control.

1

Reserved for future use.

2

Debugging and measurement.

3

Reserved for future use.

5 bits: Option number.

Data

IP data or higher layer protocol header.

12

TCP (data part of the IP packets)

RFC793, www.protocols.com,

http://en.wikipedia.org/wiki/Transmission_Control_Protocol,

0 1 2 3

0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| Source Port | Destination Port |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| Sequence Number |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| Acknowledgment Number |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| Data | |U|A|P|R|S|F| |

| Offset| Reserved |R|C|S|S|Y|I| Window |

| | |G|K|H|T|N|N| |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| Checksum | Urgent Pointer |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| Options | Padding |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| data |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

TCP Header Format

16

32 bits

Source port

Destination

port

Sequence number

Acknowledgement number

Offset

Resrvd

U

A

P

R

S

F

Window

Checksum

Urgent

pointer

Option + Padding

Data

TCP header structure

Source port

Source port number.

Destination port

Destination port number.

Sequence number

The sequence number of the first data octet in this segment (except when SYN is present).

If SYN is present, the sequence number is the initial sequence number (ISN) and the first

data octet is ISN+1.

13

Acknowledgment number

If the ACK control bit is set, this field contains the value of the next sequence number

which the sender of the segment is expecting to receive. Once a connection is established,

this value is always sent.

Data offset

4 bits. The number of 32-bit words in the TCP header, which indicates where the data

begins. The TCP header (even one including options) has a length which is an integral

number of 32 bits.

Reserved

6 bits. Reserved for future use. Must be zero.

Control bits

6 bits. The control bits may be (from right to left):

U (URG)

Urgent pointer field significant.

A (ACK)

Acknowledgment field significant.

P (PSH)

Push function.

R (RST)

Reset the connection.

S (SYN)

Synchronize sequence numbers.

F (FIN)

No more data from sender.

Window

16 bits. The number of data octets which the sender of this segment is willing to accept,

beginning with the octet indicated in the acknowledgment field.

Checksum

16 bits. The checksum field is the 16 bit one’s complement of the one’s complement sum

of all 16-bit words in the header and text. If a segment contains an odd number of header

and text octets to be checksummed, the last octet is padded on the right with zeros to form

a 16-bit word for checksum purposes. The pad is not transmitted as part of the segment.

While computing the checksum, the checksum field itself is replaced with zeros.

Urgent Pointer

16 bits. This field communicates the current value of the urgent pointer as a positive offset

from the sequence number in this segment. The urgent pointer points to the sequence

number of the octet following the urgent data. This field can only be interpreted in

segments for which the URG control bit has been set.

Options

Options may be transmitted at the end of the TCP header and always have a length which

is a multiple of 8 bits. All options are included in the checksum. An option may begin on

any octet boundary.

There are two possible formats for an option:

A single octet of option type.

An octet of option type, an octet of option length, and the actual option data octets.

14

The option length includes the option type and option length, as well as the option data

octets.

The list of options may be shorter than that designated by the data offset field because the

contents of the header beyond the End-of-Option option must be header padding i.e., zero.

A TCP must implement all options.

Data

TCP data or higher layer protocol.

15

UDP (data part of IP packets)

RFC768, www.protocols.com

0 1 2 3

0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| Source Port | Destination Port |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| Length | Checksum |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

| data |

+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

TCP Header Format

The User Datagram Protocol (UDP), defined by IETF RFC768, provides a simple, but

unreliable message service for transaction-oriented services. Each UDP header carries

both a source port identifier and destination port identifier, allowing high-level protocols to

target specific applications and services among hosts.

The UDP header structure is shown as follows:

16

32 bits

Source port

Destination port

Length

Checksum

Data

UDP header structure

Source port

Source port is an optional field. When used, it indicates the port of the sending process

and may be assumed to be the port to which a reply should be addressed in the absence

of any other information. If not used, a value of zero is inserted.

Destination port

Destination port has a meaning within the context of a particular Internet destination

address.

Length

The length in octets of this user datagram, including this header and the data. The

minimum value of the length is eight.

Checksum

The 16-bit one’s complement of the one’s complement sum of a pseudo header of

information from the IP header, the UDP header and the data, padded with zero octets at

the end (if necessary) to make a multiple of two octets.

Data

UDP data field.

16

17

ARP/RARP(data part of Ethernet)

RFC826, www.protocols.com

TCP/IP uses the Address Resolution Protocol (ARP) and the Reverse Address Resolution

Protocol (RARP) to initialize the use of Internet addressing on an Ethernet or other

network that uses its own media access control (MAC). ARP allows a host to communicate

with other hosts when only the Internet address of its neighbors is known. Before using IP,

the host sends a broadcast ARP request containing the Internet address of the desired

destination system.

The ARP/RARP header structure is shown in the illustration below.

16

32 bits

Hardware Type

Protocol Type

HLen (8)

Plen

(8)

Operation

Sender Hardware Address

Sender Protocol Address

Target Hardware Address

Target Protocol Address

ARP/RARP header structure

Hardware type

Specifies a hardware interface type for which the sender requires a response.

Protocol type

Specifies the type of high-level protocol address the sender has supplied.

HLen

Hardware address length.

PLen

Protocol address length.

Operation

The values are as follows:

1

ARP request.

2

ARP response.

3

RARP request.

4

RARP response.

5

Dynamic RARP request.

6

Dynamic RARP reply.

7

Dynamic RARP error.

18

8

InARP request.

9

InARP reply.

Sender hardware address

HLen bytes in length.

Sender protocol address

PLen bytes in length.

Target hardware address

HLen bytes in length.

Target protocol address

PLen bytes in length.

19

DHCP (data part of IP)

RFC1531, www.protocols.com

The Dynamic Host Configuration Protocol (DHCP) provides Internet hosts with

configuration parameters. DHCP is an extension of BOOTP. DHCP consists of two

components: a protocol for delivering host-specific configuration parameters from a DHCP

server to a host and a mechanism for allocation of network addresses to hosts.

(Compliant with IETF RFC1531.)

The format of the header is shown in the following illustration:

8

16

24

32 bits

Op (1)

Htype (1)

Hlen (1)

Hops

(1)

Xid (4 bytes)

Secs (2 bytes)

Flags (2 bytes)

Ciaddr (4 bytes)

Yiaddr (4 bytes)

Siaddr (4 bytes)

Giaddr (4 bytes)

Chaddr (16 bytes)

DHCP header structure

Op

The message operation code. Messages can be either BOOTREQUEST or BOOTREPLY.

Htype

The hardware address type.

Hlen

The hardware address length.

Xid

The transaction ID.

Secs

The seconds elapsed since the client began the address acquisition or renewal process.

Flags

The flags.

Ciaddr

The client IP address.

Yiaddr

The "Your" (client) IP address.

20

Siaddr

The IP address of the next server to use in bootstrap.

Giaddr

The relay agent IP address used in booting via a relay agent.

Chaddr

The client hardware address.

21

ICMP (data part of IP)

RFC792, www.protocols.com

IETF RFC792 defines the Internet Control Message Protocol (ICMP). ICMP messages

generally contain information about routing difficulties with IP datagrams or simple

exchanges such as time-stamp or echo transactions.

The ICMP header structure is shown as follows:

8

16

32 bits

Type

Code

Checksum

Identifier

Sequence number

Address mask

ICMP header structure

Type

Code

Description

0

Echo reply.

3

Destination unreachable.

3

0

Net unreachable.

3

1

Host unreachable.

3

2

Protocol unreachable.

3

Port unreachable.

3

4

Fragmentation needed and DF set.

3

5

Source route failed.

4

Source quench.

5

Redirect.

5

0

Redirect datagrams for the network.

5

1

Redirect datagrams for the host.

5

2

Redirect datagrams for the type of service and network.

5

3

Redirect datagrams for the type of service and host.

8

Echo.

11

Time exceeded.

11

0

Time to live exceeded in transit.

11

1

Fragment reassemble time exceeded.

12

Parameter problem.

13

Timestamp.

14

Timestamp reply.

15

Information request.

16

Information reply.

Checksum

The 16-bit one’s complement of the one’s complement sum of the ICMP message starting

with the ICMP Type. For computing the checksum, the checksum field should be zero.

22

Identifier

An identifier to aid in matching requests/replies; may be zero.

Sequence number

Sequence number to aid in matching requests/replies; may be zero.

Address mask

A 32-bit mask.

23

TCP – state machine (RFC793)

A connection progresses through a series of states during its lifetime. The states are: LISTEN, SYN-SENT,

SYNRECEIVED,ESTABLISHED, FIN-WAIT-1, FIN-WAIT-2, CLOSE-WAIT, CLOSING, LAST-ACK,

TIME-WAIT, and the fictional state CLOSED. CLOSED is fictional because it represents the state when there

is no TCB, and therefore, no connection. Briefly the meanings of the states are:

LISTEN represents waiting for a connection request from any remote TCP and port.

SYN-SENT represents waiting for a matching connection request after having sent a connection request.

24

SYN-RECEIVED represents waiting for a confirming connection request acknowledgment after having both

received and sent a connection request.

ESTABLISHED represents an open connection, data received can be delivered to the user. The normal

state for the data transfer phase of the connection.

FIN-WAIT-1 represents waiting for a connection termination request from the remote TCP, or an

acknowledgment of the connection termination request previously sent.

FIN-WAIT-2 represents waiting for a connection termination request from the remote TCP.

CLOSE-WAIT represents waiting for a connection termination request from the local user.

CLOSING represents waiting for a connection termination request acknowledgment from the remote TCP.

LAST-ACK represents waiting for an acknowledgment of the connection termination request previously sent

to the remote TCP (which includes an acknowledgment of its connection termination request).

TIME-WAIT represents waiting for enough time to pass to be sure the remote TCP received the

acknowledgment of its connection termination request.

CLOSED represents no connection state at all.

A TCP connection progresses from one state to another in response to events. The events are:

- the user calls

- OPEN, SEND, RECEIVE, CLOSE, ABORT, and STATUS;

- the incoming segments

- particularly those containing the SYN, ACK, RST and FIN flags

- the timeouts.

The two transitions leading to the ESTABLISHED state correspond to the opening of a connection,

and the two transitions leading from the ESTABLISHED state are for the termination of a

connection. The ESTABLISHED state is where data transfer can occur between the two ends in

both the directions.

If a connection is in the LISTEN state and a SYN segment arrives, the connection makes a

transition to the SYN_RCVD state and takes the action of replying with an ACK+SYN segment.

The client does an active open which causes its end of the connection to send a SYN segment to the

server and to move to the SYN_SENT state. The arrival of the SYN+ACK segment causes the

client to mo ve to the ESTABLISHED state and to send an ack back to the server. When this ACK

arrives the server finally moves to the ESTABLISHED state. In other words, we have just traced the

THREE-WAY HANDSHAKE.

In the process of terminating a connection, the important thing to kee p in mind is that the

application process on both sides of the connection must independently close its half of the

connection. Thus, on any one side there are three combinations of transition that get a connection

from the ESTABLISHED state to the CLOSED state:

• This side closes first:

ESTABLISHED -> FIN_WAIT_1-> FIN_WAIT_2 -> TIME_WAIT -> CLOSED.

• The other side closes first:

ESTABLISHED -> CLOSE_WAIT -> LAST_ACK -> CLOSED.

• Both sides close at the same time:

ESTABLISHED -> FIN_WAIT_1-> CLOSING ->TIME_WAIT -> CLOSED.

25

The main thing to recognize about connection teardown is that a connection in the TIME_WAIT

state cannot move to the CLOSED state until it has waited for two times the maximum amount of

time an IP datagram might live in the Inter net. The reason for this is that while the local side of the

connection has sent an ACK in response to the other side's FIN segment, it does not know that the

ACK was successfully delivered. As a consequence this other side might re transmit its FIN

segment, and this second FIN segment might be delayed in the network. If the connection were

allowed to move directly to the CLOSED state, then another pair of application processes might

come along and open the same connection, and the delayed FIN segment from the earlier

incarnation of the connection would immediately initiate the termination of the later incarnation of

that connection.

26

Well-known port numbers

The port numbers in the range from 0 to 1023 are the well-known ports. They are used by system

processes that provide widely-used types of network services. On Unix-like operating systems, a

process must execute with superuser privileges to be able to bind a network socket to an IP

address using one of the well-known ports.

Port

TCP

UDP

Description

Status

0

UDP

Reserved

Official

1

TCP

UDP

TCP Port Service Multiplexer (TCPMUX)

Official

2

TCP

UDP

CompressNET

[2]

Management Utility

[3]

Official

3

TCP

UDP

CompressNET

[2]

Compression Process

[4]

Official

4

TCP

UDP

Unassigned

Official

5

TCP

UDP

Remote Job Entry

Official

7

TCP

UDP

Echo Protocol

Official

8

TCP

UDP

Unassigned

Official

9

TCP

UDP

Discard Protocol

Official

10

TCP

UDP

Unassigned

Official

11

TCP

UDP

Active Users (systat service)

[5][6]

Official

12

TCP

UDP

Unassigned

Official

13

TCP

UDP

Daytime Protocol (RFC 867)

Official

27

Port

TCP

UDP

Description

Status

14

TCP

UDP

Unassigned

Official

15

TCP

UDP

Previously netstat service

[5]

Unofficial

16

TCP

UDP

Unassigned

Official

17

TCP

UDP

Quote of the Day

Official

18

TCP

UDP

Message Send Protocol

Official

19

TCP

UDP

Character Generator Protocol (CHARGEN)

Official

20

TCP

FTP—data transfer

Official

21

TCP

FTP—control (command)

Official

22

TCP

UDP

Secure Shell (SSH)—used for secure logins, file transfers (scp, sftp) and port

forwarding

Official

23

TCP

Telnet protocol—unencrypted text communications

Official

24

TCP

UDP

Priv-mail : any private mail system.

[citation needed]

Official

25

TCP

Simple Mail Transfer Protocol (SMTP)—used for e-mail routing between mail

servers

Official

26

TCP

UDP

Unassigned

Official

27

TCP

UDP

NSW User System FE

[citation needed]

Official

29

TCP

UDP

MSG ICP

[citation needed]

Official

28

Port

TCP

UDP

Description

Status

33

TCP

UDP

Display Support Protocol

[citation needed]

Official

34

TCP

UDP

Remote File (RF)—used to transfer files between machines

[citation needed]

Unofficial

35

TCP

UDP

Any private printer server protocol

[citation needed]

Official

37

TCP

UDP

TIME protocol

Official

39

TCP

UDP

Resource Location Protocol

[7]

(RLP)—used for determining the location of higher

level services from hosts on a network

Official

40

TCP

UDP

Unassigned

Official

42

TCP

UDP

ARPA Host Name Server Protocol

Official

42

TCP

UDP

Windows Internet Name Service

Unofficial

43

TCP

WHOIS protocol

Official

47

TCP

UDP

NI FTP

[7]

Official

49

TCP

UDP

TACACS Login Host protocol

[citation needed]

Official

50

TCP

UDP

Remote Mail Checking Protocol

[8]

Official

51

TCP

UDP

IMP Logical Address Maintenance

[citation needed]

Official

52

TCP

UDP

XNS (Xerox Network Systems) Time Protocol

Official

53

TCP

UDP

Domain Name System (DNS)

Official

54

TCP

UDP

XNS (Xerox Network Systems) Clearinghouse

Official

29

Port

TCP

UDP

Description

Status

55

TCP

UDP

ISI Graphics Language (ISI-GL)

[citation needed]

Official

56

TCP

UDP

XNS (Xerox Network Systems) Authentication

Official

56

TCP

UDP

Route Access Protocol (RAP)

[9]

Unofficial

57

TCP

Mail Transfer Protocol (RFC 780)

Unofficial

58

TCP

UDP

XNS (Xerox Network Systems) Mail

Official

67

UDP

Bootstrap Protocol (BOOTP) Server; also used by Dynamic Host Configuration

Protocol (DHCP)

Official

68

UDP

Bootstrap Protocol (BOOTP) Client; also used by Dynamic Host Configuration

Protocol (DHCP)

Official

69

UDP

Trivial File Transfer Protocol (TFTP)

Official

70

TCP

Gopher protocol

Official

71

TCP

NETRJS protocol

Official

72

TCP

NETRJS protocol

Official

73

TCP

NETRJS protocol

Official

74

TCP

NETRJS protocol

Official

79

TCP

Finger protocol

Official

80

TCP

UDP

Hypertext Transfer Protocol (HTTP)

Official

30

Port

TCP

UDP

Description

Status

81

TCP

Torpark—Onion routing

Unofficial

82

UDP

Torpark—Control

Unofficial

88

TCP

UDP

Kerberos—authentication system

[citation needed]

Official

90

TCP

UDP

dnsix (DoD Network Security for Information Exchange) Securit Attribute Token

Map

[citation needed]

Official

90

TCP

UDP

Pointcast

Unofficial

99

TCP

WIP Message protocol

Unofficial

101

TCP

NIC host name

Official

102

TCP

ISO-TSAP (Transport Service Access Point) Class 0 protocol

[10]

Official

104

TCP

UDP

ACR/NEMA Digital Imaging and Communications in Medicine

Official

105

TCP

UDP

CCSO Nameserver Protocol (Qi/Ph)

Official

107

TCP

Remote TELNET Service

[11]

protocol

Official

108

TCP

UDP

SNA Gateway Access Server

[12]

Official

109

TCP

Post Office Protocol v2 (POP2)

Official

110

TCP

Post Office Protocol v3 (POP3)

Official

111

TCP

UDP

ONC RPC (SunRPC)

Official

113

TCP

ident—Authentication Service/Identification Protocol,

[13]

used by IRC servers to

Official

31

Port

TCP

UDP

Description

Status

identify users

113

UDP

Authentication Service

[13]

(auth)

Official

115

TCP

Simple File Transfer Protocol (SFTP)

Official

117

TCP

UUCP Path Service

Official

118

TCP

UDP

SQL (Structured Query Language) Services

Official

119

TCP

Network News Transfer Protocol (NNTP)—retrieval of newsgroup messages

Official

123

UDP

Network Time Protocol (NTP)—used for time synchronization

Official

135

TCP

UDP

DCE endpoint resolution

Official

135

TCP

UDP

Microsoft EPMAP (End Point Mapper), also known as DCE/RPC Locator

service,

[14]

used to remotely manage services including DHCP server, DNS server

and WINS. Also used by DCOM

Unofficial

137

TCP

UDP

NetBIOS NetBIOS Name Service

Official

138

TCP

UDP

NetBIOS NetBIOS Datagram Service

Official

139

TCP

UDP

NetBIOS NetBIOS Session Service

Official

143

TCP

Internet Message Access Protocol (IMAP)—management of email messages

Official

152

TCP

UDP

Background File Transfer Program (BFTP)

[15]

Official

153

TCP

UDP

SGMP, Simple Gateway Monitoring Protocol

Official

156

TCP

UDP

SQL Service

Official

32

Port

TCP

UDP

Description

Status

158

TCP

UDP

DMSP, Distributed Mail Service Protocol

[16]

Unofficial

161

UDP

Simple Network Management Protocol (SNMP)

Official

162

TCP

UDP

Simple Network Management Protocol Trap (SNMPTRAP)

[17]

Official

170

TCP

Print-srv, Network PostScript

[citation needed]

Official

175

TCP

VMNET (IBM z/VM, z/OS & z/VSE - Network Job Entry(NJE))

[citation needed]

Official

177

TCP

UDP

X Display Manager Control Protocol (XDMCP)

Official

179

TCP

BGP (Border Gateway Protocol)

Official

194

TCP

UDP

Internet Relay Chat (IRC)

Official

199

TCP

UDP

SMUX, SNMP Unix Multiplexer

Official

201

TCP

UDP

AppleTalk Routing Maintenance

Official

209

TCP

UDP

The Quick Mail Transfer Protocol

Official

210

TCP

UDP

ANSI Z39.50

Official

213

TCP

UDP

Internetwork Packet Exchange (IPX)

Official

218

TCP

UDP

Message posting protocol (MPP)

Official

220

TCP

UDP

Internet Message Access Protocol (IMAP), version 3

Official

256

TCP

UDP

2DEV "2SP" Port

[citation needed]

Unofficial

33

Port

TCP

UDP

Description

Status

259

TCP

UDP

ESRO, Efficient Short Remote Operations

[citation needed]

Official

264

TCP

UDP

BGMP, Border Gateway Multicast Protocol

Official

280

TCP

UDP

http-mgmt

Official

308

TCP

Novastor Online Backup

Official

311

TCP

Mac OS X Server Admin (officially AppleShare IP Web administration)

[citation

needed]

Official

318

TCP

UDP

PKIX TSP, Time Stamp Protocol

Official

319

UDP

Precision time protocol event messages

Official

320

UDP

Precision time protocol general messages

Official

323

TCP

UDP

IMMP, Internet Message Mapping Protocol

[citation needed]

Unofficial

350

TCP

UDP

MATIP-Type A, Mapping of Airline Traffic over Internet Protocol

[citation needed]

Official

351

TCP

UDP

MATIP-Type B, Mapping of Airline Traffic over Internet Protocol

[citation needed]

Official

366

TCP

UDP

ODMR, On-Demand Mail Relay

[citation needed]

Official

369

TCP

UDP

Rpc2portmap

[citation needed]

Official

370

TCP

codaauth2—Coda authentication server

[citation needed]

Official

370

UDP

codaauth2—Coda authentication server

[citation needed]

Official

370

UDP

securecast1—Outgoing packets to NAI's servers

[18][dead link]

Unofficial

34

Port

TCP

UDP

Description

Status

371

TCP

UDP

ClearCase albd

[citation needed]

Official

383

TCP

UDP

HP data alarm manager

[citation needed]

Official

384

TCP

UDP

A Remote Network Server System

[citation needed]

Official

387

TCP

UDP

AURP, AppleTalk Update-based Routing Protocol

[19]

Official

389

TCP

UDP

Lightweight Directory Access Protocol (LDAP)

Official

401

TCP

UDP

UPS Uninterruptible Power Supply

[citation needed]

Official

402

TCP

Altiris, Altiris Deployment Client

[citation needed]

Unofficial

411

TCP

Direct Connect Hub

Unofficial

412

TCP

Direct Connect Client-to-Client

Unofficial

427

TCP

UDP

Service Location Protocol (SLP)

Official

443

TCP

HTTPS (Hypertext Transfer Protocol over SSL/TLS)

Official

444

TCP

UDP

SNPP, Simple Network Paging Protocol (RFC 1568)

Official

445

TCP

Microsoft-DS Active Directory, Windows shares

Official

445

TCP

Microsoft-DS SMB file sharing

Official

464

TCP

UDP

Kerberos Change/Set password

Official

465

TCP

Cisco protocol

[citation needed]

Unofficial

35

Port

TCP

UDP

Description

Status

465

TCP

SMTP over SSL

Unofficial

475

TCP

UDP

tcpnethaspsrv (Aladdin Knowledge Systems Hasp services, TCP/IP version)

[citation

needed]

Official

497

TCP

Dantz Retrospect

Official

500

TCP

Qmatic Qwin communication port

[citation needed]

Unofficial

500

UDP

Internet Security Association and Key Management Protocol (ISAKMP)

Official

501

TCP

STMF, Simple Transportation Management Framework—DOT NTCIP

1101

[citation needed]

Unofficial

502

TCP

UDP

asa-appl-proto, Protocol

[citation needed]

Unofficial

502

TCP

UDP

Modbus, Protocol

Unofficial

504

TCP

UDP

Citadel—multiservice protocol for dedicated clients for the Citadel groupware

system

Official

510

TCP

First Class Protocol

[citation needed]

Unofficial

512

TCP

Rexec, Remote Process Execution

Official

512

UDP

comsat, together with biff

Official

513

TCP

rlogin

Official

513

UDP

Who

[citation needed]

Official

514

TCP

Shell—used to execute non-interactive commands on a remote system (Remote

Shell, rsh, remsh)

Official

36

Port

TCP

UDP

Description

Status

514

UDP

Syslog—used for system logging

Official

515

TCP

Line Printer Daemon—print service

Official

517

UDP

Talk

[citation needed]

Official

518

UDP

NTalk

[citation needed]

Official

520

TCP

efs, extended file name server

[citation needed]

Official

520

UDP

Routing Information Protocol (RIP)

Official

524

TCP

UDP

NetWare Core Protocol (NCP) is used for a variety things such as access to

primary NetWare server resources, Time Synchronization, etc.

Official

525

UDP

Timed, Timeserver

[citation needed]

Official

530

TCP

UDP

RPC

[citation needed]

Official

531

TCP

UDP

AOL Instant Messenger

Unofficial

532

TCP

netnews

[citation needed]

Official

533

UDP

netwall, For Emergency Broadcasts

[citation needed]

Official

540

TCP

UUCP (Unix-to-Unix Copy Protocol)

Official

542

TCP

UDP

commerce (Commerce Applications)

[citation needed]

Official

543

TCP

klogin, Kerberos login

Official

544

TCP

kshell, Kerberos Remote shell

Official

37

Port

TCP

UDP

Description

Status

545

TCP

OSIsoft PI (VMS), OSISoft PI Server Client Access

Unofficial

546

TCP

UDP

DHCPv6 client

Official

547

TCP

UDP

DHCPv6 server

Official

548

TCP

Apple Filing Protocol (AFP) over TCP

Official

550

UDP

new-rwho, new-who

[citation needed]

Official

554

TCP

UDP

Real Time Streaming Protocol (RTSP)

Official

556

TCP

Remotefs, RFS, rfs_server

Official

560

UDP

rmonitor, Remote Monitor

[citation needed]

Official

561

UDP

monitor

[citation needed]

Official

563

TCP

UDP

NNTP protocol over TLS/SSL (NNTPS)

Official

587

TCP

e-mail message submission

[20]

(SMTP)

Official

591

TCP

FileMaker 6.0 (and later) Web Sharing (HTTP Alternate, also see port 80)

Official

593

TCP

UDP

HTTP RPC Ep Map, Remote procedure call over Hypertext Transfer Protocol,

often used by Distributed Component Object Model services and Microsoft

Exchange Server

Official

604

TCP

TUNNEL profile,

[21]

a protocol for BEEP peers to form an application

layer tunnel

Official

623

UDP

ASF Remote Management and Control Protocol (ASF-RMCP)

[citation needed]

Official

38

Port

TCP

UDP

Description

Status

631

TCP

UDP

Internet Printing Protocol (IPP)

Official

631

TCP

UDP

Common Unix Printing System (CUPS)

Unofficial

635

TCP

UDP

RLZ DBase

[citation needed]

Official

636

TCP

UDP

Lightweight Directory Access Protocol over TLS/SSL (LDAPS)

Official

639

TCP

UDP

MSDP, Multicast Source Discovery Protocol

Official

641

TCP

UDP

SupportSoft Nexus Remote Command (control/listening): A proxy gateway

connecting remote control traffic

[citation needed]

Official

646

TCP

UDP

LDP, Label Distribution Protocol, a routing protocol used in MPLS networks

Official

647

TCP

DHCP Failover protocol

[22]

Official

648

TCP

RRP (Registry Registrar Protocol)

[23]

Official

651

TCP

UDP

IEEE-MMS

[citation needed]

Official

652

TCP

DTCP, Dynamic Tunnel Configuration Protocol

[citation needed]

Unofficial

653

TCP

UDP

SupportSoft Nexus Remote Command (data): A proxy gateway connecting

remote control traffic

[citation needed]

Official

654

TCP

Media Management System (MMS) Media Management Protocol (MMP)

[24]

Official

657

TCP

UDP

IBM RMC (Remote monitoring and Control) protocol, used by System

p5 AIX Integrated Virtualization Manager (IVM)

[25]

and Hardware Management

Console to connect managed logical partitions (LPAR) to enable dynamic

partition reconfiguration

Official

39

Port

TCP

UDP

Description

Status

660

TCP

Mac OS X Server administration

Official

665

TCP

sun-dr, Remote Dynamic Reconfiguration

[citation needed]

Unofficial

666

UDP

Doom, first online first-person shooter

Official

674

TCP

ACAP (Application Configuration Access Protocol)

Official

691

TCP

MS Exchange Routing

Official

694

TCP

UDP

Linux-HA High availability Heartbeat

Official

695

TCP

IEEE-MMS-SSL (IEEE Media Management System over SSL)

[26]

Official

698

UDP

OLSR (Optimized Link State Routing)

Official

700

TCP

EPP (Extensible Provisioning Protocol), a protocol for communication

between domain name registries and registrars (RFC 5734)

Official

701

TCP

LMP (Link Management Protocol (Internet)),

[27]

a protocol that runs between a

pair of nodes and is used to manage traffic engineering (TE) links

Official

702

TCP

IRIS

[28][29]

(Internet Registry Information Service) over BEEP (Blocks Extensible

Exchange Protocol)

[30]

(RFC 3983)

Official

706

TCP

Secure Internet Live Conferencing (SILC)

Official

711

TCP

Cisco Tag Distribution Protocol

[31][32][33]

—being replaced by the MPLS Label

Distribution Protocol

[34]

Official

712

TCP

Topology Broadcast based on Reverse-Path Forwarding routing

protocol (TBRPF) (RFC 3684)

Official

40

Port

TCP

UDP

Description

Status

712

UDP

Promise RAID Controller

[citation needed]

Unofficial

720

TCP

SMQP, Simple Message Queue Protocol

[citation needed]

Unofficial

749

TCP

UDP

Kerberos (protocol) administration

Official

750

UDP

kerberos-iv, Kerberos version IV

Official

751

TCP

UDP

kerberos_master, Kerberos authentication

Unofficial

752

UDP

passwd_server, Kerberos Password (kpasswd) server

Unofficial

753

TCP

Reverse Routing Header (rrh)

[35]

Official

753

UDP

Reverse Routing Header (rrh)

Official

753

UDP

userreg_server, Kerberos userreg server

Unofficial

754

TCP

tell send

[citation needed]

Official

754

TCP

krb5_prop, Kerberos v5 slave propagation

Unofficial

754

UDP

tell send

[citation needed]

Official

760

TCP

UDP

krbupdate [kreg], Kerberos registration

Unofficial

782

TCP

Conserver serial-console management server

Unofficial

783

TCP

SpamAssassin spamd daemon

Unofficial

808

TCP

Microsoft Net.TCP Port Sharing Service

[citation needed]

Official

41

Port

TCP

UDP

Description

Status

829

TCP

CMP (Certificate Management Protocol)

[citation needed]

Unofficial

843

TCP

Adobe Flash

[36]

Unofficial

847

TCP

DHCP Failover protocol

Official

848

TCP

UDP

Group Domain Of Interpretation (GDOI) protocol

[citation needed]

Official

860

TCP

iSCSI (RFC 3720)

Official

873

TCP

rsync file synchronisation protocol

Official

USA only

888

TCP

cddbp, CD DataBase (CDDB) protocol (CDDBP)—unassigned but widespread

use

Unofficial

901

TCP

Samba Web Administration Tool (SWAT)

Unofficial

901

TCP

VMware Virtual Infrastructure Client (UDP from server being managed to

management console)

Unofficial

901

UDP

VMware Virtual Infrastructure Client (UDP from server being managed to

management console)

Unofficial

902

TCP

ideafarm-door

[citation needed]

Official

902

TCP

VMware Server Console (TCP from management console to server being

Managed)

Unofficial

902

UDP

ideafarm-door

[citation needed]

Official

902

UDP

VMware Server Console (UDP from server being managed to management

console)

Unofficial

42

Port

TCP

UDP

Description

Status

903

TCP

VMware Remote Console

[37]

Unofficial

904

TCP

VMware Server Alternate (if 902 is in use, i.e. SUSE linux)

Unofficial

911

TCP

Network Console on Acid (NCA)—local tty redirection over OpenSSH

Unofficial

944

UDP

Network File System (protocol) Service

Unofficial

953

TCP

UDP

Domain Name System (DNS) RNDC Service

Unofficial

973

UDP

Network File System (protocol) over IPv6 Service

Unofficial

981

TCP

SofaWare Technologies Remote HTTPS management for firewall devices

running embedded Check Point FireWall-1 software

Unofficial

987

TCP

Microsoft This Secure Hypertext Transfer Protocol (HTTPS) port makes

Windows SharePoint Services viewable through Remote Web Workplace

[citation

needed]

Unofficial

989

TCP

UDP

FTPS Protocol (data): FTP over TLS/SSL

Official

990

TCP

UDP

FTPS Protocol (control): FTP over TLS/SSL

Official

991

TCP

UDP

NAS (Netnews Administration System)

[38]

Official

992

TCP

UDP

TELNET protocol over TLS/SSL

Official

993

TCP

Internet Message Access Protocol over SSL (IMAPS)

Official

995

TCP

Post Office Protocol 3 over TLS/SSL (POP3S)

Official

999

TCP

ScimoreDB Database System

[citation needed]

Unofficial

43

Port

TCP

UDP

Description

Status

1002

TCP

Opsware agent (aka cogbot)

[citation needed]

Unofficial

1023

TCP

UDP

Reserved

[1]

Official

[edit]Registered ports

This article's use of external links may not follow Wikipedia's policies or guidelines. Please improve this

article by removing excessive or inappropriateexternal links, and converting useful links where appropriate

into footnote references (October 2011)

The range of port numbers from 1024 to 49151 are the registered ports. They are assigned by IANA

for specific service upon application by a requesting entity.

[1]

On most systems registered ports can

be used by ordinary users.

Port

TCP

UDP

Description

Status

1024

TCP

UDP

Reserved

[1]

Official

1025

TCP

NFS or IIS or Teradata

Unofficial

1026

TCP

Often used by Microsoft DCOM services

Unofficial

1029

TCP

Often used by Microsoft DCOM services

Unofficial

1058

TCP

UDP

nim, IBM AIX Network Installation Manager (NIM)

Official

1059

TCP

UDP

nimreg, IBM AIX Network Installation Manager (NIM)

Official

1080

TCP

SOCKS proxy

Official

1085

TCP

UDP

WebObjects

Official

1098

TCP

UDP

rmiactivation, RMI Activation

Official

44

Port

TCP

UDP

Description

Status

1099

TCP

UDP

rmiregistry, RMI Registry

Official

1109

UDP

Reserved

[1]

Official

1109

TCP

Reserved

[1]

Official

1109

TCP

Kerberos Post Office Protocol (KPOP)

Unofficial

1110

UDP

EasyBits School network discovery protocol (for Intel's CMPC platform)

Unofficial

1140

TCP

UDP

AutoNOC protocol

Official

1167

UDP

phone, conference calling

Unofficial

1169

TCP

UDP

Tripwire

Official

1176

TCP

Perceptive Automation Indigo Home automation server

Official

1182

TCP

UDP

AcceleNet Intelligent Transfer Protocol

Official

1194

TCP

UDP

OpenVPN

Official

1198

TCP

UDP

The cajo project Free dynamic transparent distributed computing in Java

Official

1200

TCP

scol, protocol used by SCOL 3D virtual worlds server to answer world name

resolution client request

[39]

Official

1200

UDP

scol, protocol used by SCOL 3D virtual worlds server to answer world name

resolution client request

Official

1200

UDP

Steam Friends Applet

Unofficial

45

Port

TCP

UDP

Description

Status

1214

TCP

Kazaa

Official

1217

TCP

Uvora Online

Unofficial

1220

TCP

QuickTime Streaming Server administration

Official

1223

TCP

UDP

TGP, TrulyGlobal Protocol, also known as "The Gur Protocol" (named for Gur

Kimchi of TrulyGlobal)

Official

1234

UDP

VLC media player Default port for UDP/RTP stream

Unofficial

1236

TCP

Symantec BindView Control UNIX Default port for TCP management server

connections

Unofficial

1241

TCP

UDP

Nessus Security Scanner

Official

1270

TCP

UDP

Microsoft System Center Operations Manager (SCOM) (formerly Microsoft

Operations Manager (MOM)) agent

Official

1293

TCP

UDP

IPSec (Internet Protocol Security)

Official

1301

TCP

Palmer Performance OBDNet

Unofficial

1309

TCP

Altera Quartus jtagd

Unofficial

1311

TCP

Dell OpenManage HTTPS

Official

1313

TCP

Xbiim (Canvii server)

Unofficial

1319

TCP

AMX ICSP

Official

1319

UDP

AMX ICSP

Official

46

Port

TCP

UDP

Description

Status

1337

UDP

Men and Mice DNS

Official

1337

TCP

Men and Mice DNS

Official

1337

TCP

PowerFolder P2P Encrypted File Synchronization Program

Unofficial

1337

TCP

WASTE Encrypted File Sharing Program

Unofficial

1344

TCP

Internet Content Adaptation Protocol

Official

1352

TCP

IBM Lotus Notes/Domino

[40]

(RPC) protocol

Official

1387

TCP

UDP

cadsi-lm, LMS International (formerly Computer Aided Design Software, Inc.

(CADSI)) LM

Official

1414

TCP

IBM WebSphere MQ (formerly known as MQSeries)

Official

1417

TCP

UDP

Timbuktu Service 1 Port

Official

1418

TCP

UDP

Timbuktu Service 2 Port

Official

1419

TCP

UDP

Timbuktu Service 3 Port

Official

1420

TCP

UDP

Timbuktu Service 4 Port

Official

1431

TCP

Reverse Gossip Transport Protocol (RGTP), used to access a General-purpose

Reverse-Ordered Gossip Gathering System (GROGGS) bulletin board, such as

that implemented on the Cambridge University's Phoenix system

Official

1433

TCP

MSSQL (Microsoft SQL Server database management system) Server

Official

1434

TCP

UDP

MSSQL (Microsoft SQL Server database management system) Monitor

Official

47

Port

TCP

UDP

Description

Status

1470

TCP

Solarwinds Kiwi Log Server

Official

1494

TCP

Citrix XenApp Independent Computing Architecture (ICA) thin client protocol

Official

1500

TCP

NetGuard GuardianPro firewall (NT4-based) Remote Management

Unofficial

1501

UDP

NetGuard GuardianPro firewall (NT4-based) Authentication Client

Unofficial

1503

TCP

UDP

Windows Live Messenger (Whiteboard and Application Sharing)

Unofficial

1512

TCP

UDP

Microsoft Windows Internet Name Service (WINS)

Official

1513

TCP

UDP

Garena Garena Gaming Client

Official

1521

TCP

nCube License Manager

Official

1521

TCP

Oracle database default listener, in future releases official port 2483

Unofficial

1524

TCP

UDP

ingreslock, ingres

Official

1526

TCP

Oracle database common alternative for listener

Unofficial

1527

TCP

Apache Derby Network Server default port

Unofficial

1533

TCP

IBM Sametime IM—Virtual Places Chat Microsoft SQL Server

Official

1534

UDP

Eclipse Target Communication Framework (TCF) agent discovery

[41]

Unofficial

1547

TCP

UDP

Laplink

Official

1550

TCP

UDP

3m-image-lm Image Storage license manager 3M Company

Official

48

Port

TCP

UDP

Description

Status

1550

Gadu-Gadu (direct client-to-client)

Unofficial

1556

TCP

Jeex-RB (direct client-to-db.service)

Unofficial

1581

UDP

MIL STD 2045-47001 VMF

Official

1589

UDP

Cisco VQP (VLAN Query Protocol) / VMPS

Unofficial

1590

TCP

GE Smallworld Datastore Server (SWMFS/Smallworld Master Filesystem)

Unofficial

1627

iSketch

Unofficial

1645

TCP

UDP

radius auth, RADIUS authentication protocol (default for Cisco and Juniper

Networks RADIUS servers)

Unofficial

1646

TCP

UDP

radius acct, RADIUS authentication protocol (default for Cisco and Juniper

Networks RADIUS servers)

Unofficial

1666

TCP

Perforce

Unofficial

1677

TCP

UDP

Novell GroupWise clients in client/server access mode

Official

1688

TCP

Microsoft Key Management Service for KMS Windows Activation

Unofficial

1700

UDP

Cisco RADIUS Change of Authorization for TrustSec

Unofficial

1701

UDP

Layer 2 Forwarding Protocol (L2F) & Layer 2 Tunneling Protocol (L2TP)

Official

1707

TCP

UDP

Windward Studios

Official

1707

TCP

Romtoc Packet Protocol (L2F) & Layer 2 Tunneling Protocol (L2TP)

Unofficial

49

Port

TCP

UDP

Description

Status

1716

TCP

America's Army Massively multiplayer online game (MMO)

Unofficial

1719

UDP

H.323 Registration and alternate communication

Official

1720

TCP

H.323 Call signalling

Official

1723

TCP

UDP

Microsoft Point-to-Point Tunneling Protocol (PPTP)

Official

1725

UDP

Valve Steam Client

Unofficial

1755

TCP

UDP

Microsoft Media Services (MMS, ms-streaming)

Official

1761

UDP

cft-0

Official

1761

TCP

cft-0

Official

1761

TCP

Novell Zenworks Remote Control utility

Unofficial

1762–

1768

TCP

UDP

cft-1 to cft-7

Official

1792

TCP

UDP

Moby

Unofficial

1801

TCP

UDP

Microsoft Message Queuing

Official

1812

TCP

UDP

radius, RADIUS authentication protocol

Official

1813

TCP

UDP

radacct, RADIUS accounting protocol

Official

1863

TCP

MSNP (Microsoft Notification Protocol), used by the .NET Messenger

Service and a number of Instant Messaging clients

Official

50

Port

TCP

UDP

Description

Status

1883

TCP

UDP

MQ Telemetry Transport (MQTT), formerly known as MQIsdp (MQSeries

SCADA protocol)

Official

1886

TCP

Leonardo over IP Pro2col Ltd

Unofficial

1900

UDP

Microsoft SSDP Enables discovery of UPnP devices

Official

1920

TCP

IBM Tivoli Monitoring Console (https)

Unofficial

1935

TCP

Adobe Systems Macromedia Flash Real Time Messaging Protocol

(RTMP) "plain" protocol

Official

1947

TCP

UDP

SentinelSRM (hasplm), Aladdin HASP License Manager

Official

1967

UDP

Cisco IOS IP Service Level Agreements (IP SLAs) Control Protocol

Unofficial

1970

TCP

UDP

Netop Business Solutions Netop Remote Control

Official

1971

TCP

UDP

Netop Business Solutions Netop School

Official

1972

TCP

UDP

InterSystems Caché

Official

1975–

1977

UDP

Cisco TCO (Documentation)

Official

1984

TCP

Big Brother and related Xymon (formerly Hobbit) System and Network Monitor

Official

1985

UDP

Cisco HSRP

Official

1994

TCP

UDP

Cisco STUN-SDLC (Serial Tunneling—Synchronous Data Link Control) protocol

Official

1997

TCP

Chizmo Networks Transfer Tool

Unofficial

51

Port

TCP

UDP

Description

Status

1998

TCP

UDP

Cisco X.25 over TCP (XOT) service

Official

2000

TCP

UDP

Cisco SCCP (Skinny)

Official

2001

UDP

CAPTAN Test Stand System

Unofficial

2002

TCP

Secure Access Control Server (ACS) for Windows

Unofficial

2030

Oracle Services for Microsoft Transaction Server

Unofficial

2031

TCP

UDP

mobrien-chat(http://chat.mobrien.com:2031)

Official

2041

TCP

Mail.Ru Agent communication protocol

Unofficial

2049

UDP

Network File System

Official

2049

UDP

shilp

Official

2053

TCP

knetd Kerberos de-multiplexor

Unofficial

2056

UDP

Civilization 4 multiplayer

Unofficial

2074

TCP

UDP

Vertel VMF SA (i.e. App.. SpeakFreely)

Official

2082

TCP

Infowave Mobility Server

Official

2082

TCP

CPanel default

Unofficial

2083

TCP

Secure Radius Service (radsec)

Official

2083

TCP

CPanel default SSL

Unofficial

52

Port

TCP

UDP

Description

Status

2086

TCP

GNUnet

Official

2086

TCP

WebHost Manager default

Unofficial

2087

TCP

WebHost Manager default SSL

Unofficial

2095

TCP

CPanel default Web mail

Unofficial

2096

TCP

CPanel default SSL Web mail

Unofficial

2102

TCP

UDP

zephyr-srv Project Athena Zephyr Notification Service server

Official

2103

TCP

UDP

zephyr-clt Project Athena Zephyr Notification Service serv-hm connection

Official

2104

TCP

UDP

zephyr-hm Project Athena Zephyr Notification Service hostmanager

Official

2105

TCP

UDP

IBM MiniPay

Official

2105

TCP

UDP

eklogin Kerberos encrypted remote login (rlogin)

Unofficial

2105

TCP

UDP

zephyr-hm-srv Project Athena Zephyr Notification Service hm-serv connection

(should use port 2102)

Unofficial

2121

TCP

FTP proxy

Unofficial

2144

TCP

Iron Mountain LiveVault Agent

Unofficial

2145

TCP

Iron Mountain LiveVault Agent

Unofficial

2156

UDP

Talari Reliable Protocol

Official

2160

TCP

APC Agent

Official

53

Port

TCP

UDP

Description

Status

2161

TCP

APC Agent

Official

2181

TCP

UDP

EForward-document transport system

Official

2190

UDP

TiVoConnect Beacon

Unofficial

2200

UDP

Tuxanci game server

[42]

Unofficial

2210

UDP

NOAAPORT Broadcast Network

Official

2210

TCP

NOAAPORT Broadcast Network

Official

2210

TCP

MikroTik Remote management for "The Dude"

Unofficial

2211

UDP

EMWIN

Official

2211

TCP

EMWIN

Official

2211

TCP

MikroTik Secure management for "The Dude"

Unofficial

2212

UDP

LeeCO POS Server Service

Official

2212

TCP

LeeCO POS Server Service

Official

2212

TCP

Port-A-Pour Remote WinBatch

Unofficial

2219

TCP

UDP

NetIQ NCAP Protocol

Official

2220

TCP

UDP

NetIQ End2End

Official

2221

TCP

ESET Anti-virus updates

Unofficial

54

Port

TCP

UDP

Description

Status

2222

TCP

DirectAdmin default & ESET Remote Administration

Unofficial

2223

UDP

Microsoft Office OS X antipiracy network monitor

Unofficial

2261

TCP

UDP

CoMotion Master

Official

2262

TCP

UDP

CoMotion Backup

Official

2301

TCP

HP System Management Redirect to port 2381

Unofficial

2302

UDP

ArmA multiplayer (default for game)

Unofficial

2302

UDP

Halo: Combat Evolved multiplayer

Unofficial

2303

UDP

ArmA multiplayer (default for server reporting) (default port for game +1)

Unofficial

2305

UDP

ArmA multiplayer (default for VoN) (default port for game +3)

Unofficial

2323

TCP

Philips TVs based on jointSPACE

[43]

Unofficial

2369

TCP

Default for BMC Software Control-M/Server—Configuration Agent, though often

changed during installation

Official

2370

TCP

Default for BMC Software Control-M/Server—to allow the Control-M/Enterprise

Manager to connect to the Control-M/Server, though often changed during

installation

Official

2379

TCP

KGS Go Server

Unofficial

2381

TCP

HP Insight Manager default for Web server

Unofficial

2401

TCP

CVS version control system

Unofficial

55

Port

TCP

UDP

Description

Status

2404

TCP

IEC 60870-5 -104, used to send electric power telecontrol messages between two

systems via directly connected data circuits

Official

2420

UDP

Westell Remote Access

Official

2427

UDP

Cisco MGCP

Official

2447

TCP

UDP

ovwdb—OpenView Network Node Manager (NNM) daemon

Official

2483

TCP

UDP

Oracle database listening for unsecure client connections to the listener, replaces

port 1521

Official

2484

TCP

UDP

Oracle database listening for SSL client connections to the listener

Official

2500

TCP

THEÒSMESSENGER listening for TheòsMessenger client connections

Official

2501

TCP

TheosNet-Admin listening for TheòsMessenger client connections

Official

2518

TCP

UDP

Willy

Official

2525

TCP

SMTP alternate

Unofficial

2535

TCP

MADCAP

Official

2546

TCP

UDP

EVault—Data Protection Services

Unofficial

2593

TCP

UDP

RunUO—Ultima Online server

Unofficial

2598

TCP

new ICA (Citrix) —when Session Reliability is enabled, TCP port 2598 replaces

port 1494

Unofficial

2599

TCP

SonicWALL Antispam traffic between Remote Analyzer (RA) and Control Center

(CC)

Unofficial

56

Port

TCP

UDP

Description

Status

2610

TCP

Dark Ages

Unofficial

2612

TCP

UDP

QPasa from MQSoftware

Official

2638

TCP

Sybase database listener

Unofficial

2636

TCP

Solve Service

Official

2641

TCP

UDP

HDL Server from CNRI

Official

2642

TCP

UDP

Tragic

Official

2698

TCP

UDP

Citel / MCK IVPIP

Official

2700–

2800

TCP

KnowShowGo P2P

Official

2710

TCP

XBT Bittorrent Tracker

Unofficial

2710

UDP

XBT Bittorrent Tracker experimental UDP tracker extension

Unofficial

2710

TCP

Knuddels.de

Unofficial

2735

TCP

UDP

NetIQ Monitor Console

Official

2809

TCP

corbaloc:iiop URL, per the CORBA 3.0.3 specification

Official

2809

TCP

IBM WebSphere Application Server (WAS) Bootstrap/rmi default

Unofficial

2809

UDP

corbaloc:iiop URL, per the CORBA 3.0.3 specification.

Official

2868

TCP

UDP

Norman Proprietary Event Protocol NPEP

Official

57

Port

TCP

UDP

Description

Status

2944

UDP

Megaco Text H.248

Unofficial

2945

UDP

Megaco Binary (ASN.1) H.248

Unofficial

2947

TCP

gpsd GPS daemon

Official

2948

TCP

UDP

WAP-push Multimedia Messaging Service (MMS)

Official

2949

TCP

UDP

WAP-pushsecure Multimedia Messaging Service (MMS)

Official

2967

TCP

Symantec AntiVirus Corporate Edition

Unofficial

3000

TCP

Miralix License server

Unofficial

3000

TCP

Cloud9 Integrated Development Environment server

Unofficial

3000

UDP

Distributed Interactive Simulation (DIS), modifiable default

Unofficial

3000

TCP

Ruby on Rails development default

[44]

Unofficial

3001

TCP

Miralix Phone Monitor

Unofficial

3001

TCP

Opsware server (Satellite)

Unofficial

3002

TCP

Miralix CSTA

Unofficial

3003

TCP

Miralix GreenBox API

Unofficial

3004

TCP

Miralix InfoLink

Unofficial

3005

TCP

Miralix TimeOut

Unofficial

58

Port

TCP

UDP

Description

Status

3006

TCP

Miralix SMS Client Connector

Unofficial

3007

TCP

Miralix OM Server

Unofficial

3008

TCP

Miralix Proxy

Unofficial

3017

TCP

Miralix IVR and Voicemail

Unofficial

3025

TCP

netpd.org

Unofficial

3030

TCP

UDP

NetPanzer

Unofficial

3050

TCP

UDP

gds_db (Interbase/Firebird)

Official

3051

TCP

UDP

Galaxy Server (Gateway Ticketing Systems)

Official

3052

TCP

UDP

APC PowerChute Network

[45]

Official

3074

TCP

UDP

Xbox LIVE and/or Games for Windows - LIVE

Official

3100

TCP

HTTP used by Tatsoft as the default listen port

Unofficial

3101

TCP

BlackBerry Enterprise Server communication to cloud

Unofficial

3128

TCP

HTTP used by Web caches and the default for the Squid (software)

Unofficial

3128

TCP

HTTP used by Tatsoft as the default client connection

Unofficial

3225

TCP

UDP

FCIP (Fiber Channel over Internet Protocol)

Official

3233

TCP

UDP

WhiskerControl research control protocol

Official

59

Port

TCP

UDP

Description

Status

3235

TCP

UDP

Galaxy Network Service (Gateway Ticketing Systems)

Official

3260

TCP

iSCSI target

Official

3268

TCP

UDP

msft-gc, Microsoft Global Catalog (LDAP service which contains data

from Active Directory forests)

Official

3269

TCP

UDP

msft-gc-ssl, Microsoft Global Catalog over SSL (similar to port

3268, LDAP over SSL)

Official

3283

TCP

Apple Remote Desktop reporting (officially Net Assistant, referring to an earlier

product)

Official

3299

TCP

SAP-Router (routing application proxy for SAP R/3)

Unofficial

3300

TCP

UDP

Debate Gopher backend database system

Unofficial

3305

TCP

UDP

odette-ftp, Odette File Transfer Protocol (OFTP)

Official

3306

TCP

UDP

MySQL database system

Official

3313

TCP

Verisys - File Integrity Monitoring Software

Unofficial

3333

TCP

Network Caller ID server

Unofficial

3333

TCP

CruiseControl.rb

[46]

Unofficial

3386

TCP

UDP

GTP' 3GPP GSM/UMTS CDR logging protocol

Official

3389

TCP

UDP

Microsoft Terminal Server (RDP) officially registered as Windows Based

Terminal (WBT) - Link

Official

3396

TCP

UDP

Novell NDPS Printer Agent

Official

60

Port

TCP

UDP

Description

Status

3412

TCP

UDP

xmlBlaster

Official

3455

TCP

UDP

[RSVP] Reservation Protocol

Official

3423

TCP

Xware xTrm Communication Protocol

Official

3424

TCP

Xware xTrm Communication Protocol over SSL

Official

3478

TCP

UDP

STUN, a protocol for NAT traversal

[47]

Official

3478

TCP

UDP

TURN, a protocol for NAT traversal

[48]

Official

3483

UDP

Slim Devices discovery protocol

Official

3483

TCP

Slim Devices SlimProto protocol

Official

3516

TCP

UDP

Smartcard Port

Official

3527

UDP

Microsoft Message Queuing

Official

3535

TCP

SMTP alternate

Unofficial

3537

TCP

UDP

ni-visa-remote

Unofficial

3544

UDP

Teredo tunneling

Official

3605

UDP

ComCam IO Port

Official

3606

TCP

UDP

Splitlock Server

Official

3632

TCP

distributed compiler

Official

61

Port

TCP

UDP

Description

Status

3689

TCP

Digital Audio Access Protocol (DAAP)—used by Apple’s iTunes and AirPort

Express

Official

3690

TCP

UDP

Subversion (SVN) version control system

Official

3702

TCP

UDP

Web Services Dynamic Discovery (WS-Discovery), used by various components

of Windows Vista

Official

3723

TCP

UDP

Used by many Battle.net Blizzard games (Diablo II, Warcraft II, Warcraft

III, StarCraft)

Unofficial

3724

TCP

World of Warcraft Online gaming MMORPG

Official

3724

TCP

Club Penguin Disney online game for kids

Unofficial

3724

UDP

World of Warcraft Online gaming MMORPG

Official

3784

TCP

UDP

Ventrilo VoIP program used by Ventrilo

Unofficial

3785

UDP

Ventrilo VoIP program used by Ventrilo

Unofficial

3799

UDP

IETF RADIUS Change of Authorization

Unofficial

3800

TCP

Used by HGG programs

Unofficial

3880

TCP

UDP

IGRS

Official

3868

TCP

SCTP

Diameter base protocol (RFC 3588)

Official

3872

TCP

Oracle Management Remote Agent

Unofficial

3899

TCP

Remote Administrator

Unofficial

62

Port

TCP

UDP

Description

Status

3900

TCP

udt_os, IBM UniData UDT OS

[49]

Official

3945

TCP

UDP

EMCADS service, a Giritech product used by G/On

Official

3978

TCP

UDP

OpenTTD game (masterserver and content service)

Unofficial

3979

TCP

UDP

OpenTTD game

Unofficial

3999

TCP

UDP

Norman distributed scanning service

Official

4000

TCP

UDP

Diablo II game

Unofficial

4001

TCP

Microsoft Ants game

Unofficial

4007

TCP

PrintBuzzer printer monitoring socket server

Unofficial

4018

TCP

UDP

protocol information and warnings

Official

4069

UDP

Minger Email Address Verification Protocol

[50]

Official

4089

TCP

UDP

OpenCORE Remote Control Service

Official

4093

TCP

UDP

PxPlus Client server interface ProvideX

Official

4096

TCP

UDP

Ascom Timeplex BRE (Bridge Relay Element)

Official

4100

WatchGuard Authentication Applet—default

Unofficial

4111

TCP

Xgrid

Official

4116

TCP

UDP

Smartcard-TLS

Official

63

Port

TCP

UDP

Description

Status

4125

TCP

Microsoft Remote Web Workplace administration

Unofficial

4172

TCP

UDP

Teradici PCoIP

Official

4201

TCP

TinyMUD and various derivatives

Unofficial

4226

TCP

UDP

Aleph One (game)

Unofficial

4224

TCP

Cisco Audio Session Tunneling

Unofficial

4321

TCP

Referral Whois (RWhois) Protocol

[51]

Official

4323

UDP

Lincoln Electric's ArcLink/XT

Unofficial

4433-

4436

TCP

Axence nVision

Unofficial

4500

UDP

IPSec NAT Traversal (RFC 3947)

Official

4502-

4534

TCP

Microsoft Silverlight connectable ports under non-elevated trust

Official

4534

UDP

Armagetron Advanced default server port

Unofficial

4567

TCP

Sinatra default server port in development mode (HTTP)

Unofficial

4569

UDP

Inter-Asterisk eXchange (IAX2)

Official

4610–

4640

TCP

QualiSystems TestShell Suite Services

Unofficial

4662

UDP

OrbitNet Message Service

Official

64

Port

TCP

UDP

Description

Status

4662

TCP

OrbitNet Message Service

Official

4662

TCP

Default for older versions of eMule

[52]

Unofficial

4664

TCP

Google Desktop Search

Unofficial

4672

UDP

Default for older versions of eMule

[52]

Unofficial

4711

TCP

eMule optional web interface

[52]

Unofficial

4711

TCP

McAfee Web Gateway 7 - Default GUI Port HTTP

Unofficial

4712

TCP

McAfee Web Gateway 7 - Default GUI Port HTTPS

Unofficial

4728

TCP

Computer Associates Desktop and Server Management (DMP)/Port

Multiplexer

[53]

Official

4747

TCP

Apprentice

Unofficial

4750

TCP

BladeLogic Agent

Unofficial

4840

TCP

UDP

OPC UA TCP Protocol for OPC Unified Architecture from OPC Foundation

Official

4843

TCP

UDP

OPC UA TCP Protocol over TLS/SSL for OPC Unified Architecture from OPC

Foundation

Official

4847

TCP

UDP

Web Fresh Communication, Quadrion Software & Odorless Entertainment

Official

4894

TCP

UDP

LysKOM Protocol A

Official

4899

TCP

UDP

Radmin remote administration tool

Official

65

Port

TCP

UDP

Description

Status

4949

TCP

Munin Resource Monitoring Tool

Official

4950

TCP

UDP

Cylon Controls UC32 Communications Port

Official

4982

TCP

UDP

Solar Data Log (JK client app for PV solar inverters )

Unofficial

4993

TCP

UDP

Home FTP Server web Interface Default Port

Unofficial

5000

TCP

commplex-main

Official

5000

TCP

UPnP—Windows network device interoperability

Unofficial

5000

TCP

VTun—VPN Software

Unofficial

5000

UDP

FlightGear multiplayer

[54]

Unofficial

5000

UDP

VTun—VPN Software

Unofficial

5001

TCP

commplex-link

Official

5001

TCP

Slingbox and Slingplayer

Unofficial

5001

TCP

Iperf (Tool for measuring TCP and UDP bandwidth performance)

Unofficial

5001

UDP

Iperf (Tool for measuring TCP and UDP bandwidth performance)

Unofficial

5002

TCP

SOLICARD ARX

[55]

Unofficial

5003

TCP

UDP

FileMaker

Official

5004

TCP

UDP

RTP (Real-time Transport Protocol) media data (RFC 3551, RFC 4571)

Official

5004

DCCP

RTP (Real-time Transport Protocol) media data (RFC 3551, RFC 4571)

Official

5005

TCP

UDP

RTP (Real-time Transport Protocol) control protocol (RFC 3551, RFC 4571)

Official

5005

DCCP

RTP (Real-time Transport Protocol) control protocol (RFC 3551, RFC 4571)

Official

5029

TCP

Sonic Robo Blast 2 : Multiplayer

Unofficial

5031

TCP

UDP

AVM CAPI-over-TCP (ISDN over Ethernet tunneling)

Unofficial

5050

TCP

Yahoo! Messenger

Unofficial

5051

TCP

ita-agent Symantec Intruder Alert

[56]

Official

5060

TCP

UDP

Session Initiation Protocol (SIP)

Official

5061

TCP

Session Initiation Protocol (SIP) over TLS

Official

5070

TCP

Binary Floor Control Protocol (BFCP),

[57]

published as RFC 4582, is a protocol

that allows for an additional video channel (known as the content channel)

alongside the main video channel in a video-conferencing call that uses SIP. Also

used for Session Initiation Protocol (SIP) preferred port for PUBLISH on SIP

Trunk to Cisco Unified Presence Server (CUPS)

Unofficial

5082

TCP

UDP

Qpur Communication Protocol

Official

5083

TCP

UDP

Qpur File Protocol

Official

5084

TCP

UDP

EPCglobal Low Level Reader Protocol (LLRP)

Official

66

Port

TCP

UDP

Description

Status

5085

TCP

UDP

EPCglobal Low Level Reader Protocol (LLRP) over TLS

Official

5093

UDP

SafeNet, Inc Sentinel LM, Sentinel RMS, License Manager, Client-to-Server

Official

5099

TCP

UDP

SafeNet, Inc Sentinel LM, Sentinel RMS, License Manager, Server-to-Server

Official

5104

TCP

IBM Tivoli Framework NetCOOL/Impact

[58]

HTTP Service

Unofficial

5106

TCP

A-Talk Common connection

Unofficial

5107

TCP

A-Talk Remote server connection

Unofficial

5108

TCP

VPOP3 Mail Server Webmail

Unofficial

5109

TCP

UDP

VPOP3 Mail Server Status

Unofficial

5110

TCP

ProRat Server

Unofficial

5121

TCP

Neverwinter Nights

Unofficial

5150

TCP

UDP

ATMP Ascend Tunnel Management Protocol

[59]

Official

5150

TCP

UDP

Malware Cerberus RAT

Unofficial

5151

TCP

ESRI SDE Instance

Official

5151

UDP

ESRI SDE Remote Start

Official

5154

TCP

UDP

BZFlag

Official

5176

TCP

ConsoleWorks default UI interface

Unofficial

5190

TCP

ICQ and AOL Instant Messenger

Official

5222

TCP

Extensible Messaging and Presence Protocol (XMPP) client connection

[60][61]

Official

5223

TCP

Extensible Messaging and Presence Protocol (XMPP) client connection over SSL

Unofficial

5228

TCP

HP Virtual Room Service

Official

5228

TCP

Android Market

Unofficial

5246

UDP

Control And Provisioning of Wireless Access Points (CAPWAP) CAPWAP

control

[62]

Official

5247

UDP

Control And Provisioning of Wireless Access Points (CAPWAP) CAPWAP

data

[62]

Official

5269

TCP

Extensible Messaging and Presence Protocol (XMPP) server connection

[60][61]

Official

5280

TCP

Extensible Messaging and Presence Protocol (XMPP) XEP-0124: Bidirectional-

streams Over Synchronous HTTP (BOSH)

Official

5281

TCP

Undo License Manager

Official

5281

TCP

Extensible Messaging and Presence Protocol (XMPP) XEP-0124: Bidirectional-

streams Over Synchronous HTTP (BOSH) with SSL

Unofficial

5298

TCP

UDP

Extensible Messaging and Presence Protocol (XMPP) XEP-0174: Serverless

Messaging

Official

5310

TCP

UDP

Ginever.net data communication port

Unofficial

5311

TCP

UDP

Ginever.net data communication port

Unofficial

5312

TCP

UDP

Ginever.net data communication port

Unofficial

5313

TCP

UDP

Ginever.net data communication port

Unofficial

5314

TCP

UDP

Ginever.net data communication port

Unofficial

5315

TCP

UDP

Ginever.net data communication port

Unofficial

5349

TCP

STUN, a protocol for NAT traversal (UDP is reserved)

[47]

Official

5349

TCP

TURN, a protocol for NAT traversal (UDP is reserved)

[48]

Official

67

Port

TCP

UDP

Description

Status

5351

TCP

UDP

NAT Port Mapping Protocol—client-requested configuration for inbound

connections through network address translators

Official

5353

UDP

Multicast DNS (mDNS)

Official

5355

TCP

UDP

LLMNR—Link-Local Multicast Name Resolution, allows hosts to perform name

resolution for hosts on the same local link (only provided by Windows

Vista and Server 2008)

Official

5357

TCP

UDP

Web Services for Devices (WSDAPI) (only provided by Windows

Vista, Windows 7 and Server 2008)

Unofficial

5358

TCP

UDP

WSDAPI Applications to Use a Secure Channel (only provided by Windows

Vista, Windows 7 and Server 2008)

Unofficial

5402

TCP

UDP

mftp, Stratacache OmniCast content delivery system MFTP file sharing protocol

Official

5405

TCP

UDP

NetSupport Manager

Official

5412

TCP

UDP

IBM Rational Synergy (Telelogic_Synergy) (Continuus CM) Message Router

Official

5421

TCP

UDP

NetSupport Manager

Official

5432

TCP

UDP

PostgreSQL database system

Official

5433

TCP

Bouwsoft file/webserver <http://www.bouwsoft.be>

Unofficial

5445

UDP

Cisco Unified Video Advantage

Unofficial

5450

TCP

OSIsoft PI Server Client Access

Unofficial

5457

TCP

OSIsoft PI Asset Framework Client Access

Unofficial

5458

TCP

OSIsoft PI Notifications Client Access

Unofficial

5495

TCP

Applix TM1 Admin server

Unofficial

5498

TCP

Hotline tracker server connection

Unofficial

5499

UDP

Hotline tracker server discovery

Unofficial

5500

TCP

VNC remote desktop protocol—for incoming listening viewer, Hotline control

connection

Unofficial

5501

TCP

Hotline file transfer connection

Unofficial

5517

TCP

Setiqueue Proxy server client for SETI@Home project

Unofficial

5550

TCP

Hewlett-Packard Data Protector

Unofficial

5555

TCP

Freeciv versions up to 2.0, Hewlett-Packard Data Protector, McAfee EndPoint

Encryption Database Server, SAP, Default for Microsoft Dynamics CRM 4.0

Unofficial

5556

TCP

UDP

Freeciv

Official

5591

TCP

Default for Tidal Enterprise Scheduler master-Socket used for communication

between Agent-to-Master, though can be changed

Unofficial

5631

TCP

pcANYWHEREdata, Symantec pcAnywhere (version 7.52 and later

[63]

)

[64]

data

Official

5632

UDP

pcANYWHEREstat, Symantec pcAnywhere (version 7.52 and later) status

Official

5656

TCP

IBM Sametime p2p file transfer

Unofficial

5666

TCP

NRPE (Nagios)

Unofficial

5667

TCP

NSCA (Nagios)

Unofficial

5678

UDP

Mikrotik RouterOS Neighbor Discovery Protocol (MNDP)

Unofficial

5721

TCP

UDP

Kaseya

Unofficial

5723

TCP

Operations Manager

Unofficial

5741

TCP

UDP

IDA Discover Port 1

Official

68

Port

TCP

UDP

Description

Status

5742

TCP

UDP

IDA Discover Port 2

Official

5800

TCP

VNC remote desktop protocol—for use over HTTP

Unofficial

5814

TCP

UDP

Hewlett-Packard Support Automation (HP OpenView Self-Healing Services)

Official

5850

TCP

COMIT SE (PCR)

Unofficial

5852

TCP

Adeona client: communications to OpenDHT

Unofficial

5900

TCP

UDP

Virtual Network Computing (VNC) remote desktop protocol (used by Apple

Remote Desktop and others)

Official

5912

TCP

Default for Tidal Enterprise Scheduler agent-Socket used for communication

between Master-to-Agent, though can be changed

Unofficial

5938

TCP

UDP

TeamViewer

[65]

remote desktop protocol

Unofficial

5984

TCP

UDP

CouchDB database server

Official

5999

TCP

CVSup

[66]

file update tool

Official

6000

TCP

X11—used between an X client and server over the network

Official

6001

UDP

X11—used between an X client and server over the network

Official

6005

TCP

Default for BMC Software Control-M/Server—Socket used for communication

between Control-M processes—though often changed during installation

Official

6005

TCP

Default for Camfrog Chat & Cam Client http://www.camfrog.com

Unofficial

6050

TCP

Brightstor Arcserve Backup

Unofficial

6050

TCP

Nortel Software

Unofficial

6051

TCP

Brightstor Arcserve Backup

Unofficial

6072

TCP

iOperator Protocol Signal Port

Unofficial

6086

TCP

PDTP—FTP like file server in a P2P network

Official

6100

TCP

Vizrt System

Unofficial

6100

TCP

Ventrilo This is the authentication port that must be allowed outbound for version

3 of Ventrilo

Official

6101

TCP

Backup Exec Agent Browser

Unofficial

6110

TCP

UDP

softcm, HP Softbench CM

Official

6111

TCP

UDP

spc, HP Softbench Sub-Process Control

Official

6112

UDP

"dtspcd"—a network daemon that accepts requests from clients to execute

commands and launch applications remotely

Official

6112

TCP

"dtspcd"—a network daemon that accepts requests from clients to execute

commands and launch applications remotely

Official

6112

TCP

Blizzard's Battle.net gaming service, ArenaNet gaming service, Relic gaming

sercive

Unofficial

6112

TCP

Club Penguin Disney online game for kids

Unofficial

6113

TCP

Club Penguin Disney online game for kids

Unofficial

6129

TCP

DameWare Remote Control

Official

6257

UDP

WinMX (see also 6699)

Unofficial

6260

TCP

UDP

planet M.U.L.E.

Unofficial

6262

TCP

Sybase Advantage Database Server

Unofficial

6343

UDP

SFlow, sFlow traffic monitoring

Official

69

Port

TCP

UDP

Description

Status

6346

TCP

UDP

gnutella-svc, gnutella (FrostWire, Limewire, Shareaza, etc.)

Official

6347

TCP

UDP

gnutella-rtr, Gnutella alternate

Official

6350

TCP

UDP

App Discovery and Access Protocol

Official

6389

TCP

EMC CLARiiON

Unofficial

6432

TCP

PgBouncer - A connection pooler for PostgreSQL

Official

6444

TCP

UDP

Sun Grid Engine—Qmaster Service

Official

6445

TCP

UDP

Sun Grid Engine—Execution Service

Official

6502

TCP

UDP

Netop Business Solutions - NetOp Remote Control

Unofficial

6503

UDP

Netop Business Solutions - NetOp School

Unofficial

6522

TCP

Gobby (and other libobby-based software)

Unofficial

6523

TCP

Gobby 0.5 (and other libinfinity-based software)

Unofficial

6543

UDP

Paradigm Research & Development Jetnet

[67]

default

Unofficial

6566

TCP

SANE (Scanner Access Now Easy)—SANE network scanner daemon

Unofficial

6571

Windows Live FolderShare client

Unofficial

6600

TCP

Music Playing Daemon (MPD)

Unofficial

6619

TCP

UDP

odette-ftps, Odette File Transfer Protocol (OFTP) over TLS/SSL

Official

6646

UDP

McAfee Network Agent

Unofficial

6660–

6664

TCP

Internet Relay Chat (IRC)

Unofficial

6665–

6669

TCP

Internet Relay Chat (IRC)

Official

6679

TCP

UDP

Osorno Automation Protocol (OSAUT)

Official

6679

TCP

IRC SSL (Secure Internet Relay Chat)—often used

Unofficial

6697

TCP

IRC SSL (Secure Internet Relay Chat)—often used

Unofficial

6699

TCP

WinMX (see also 6257)

Unofficial

6702

TCP

Default for Tidal Enterprise Scheduler client-Socket used for communication

between Client-to-Master, though can be changed

Unofficial

6771

UDP

Polycom server broadcast

Unofficial

6789

TCP

Datalogger Support Software Campbell Scientific Loggernet Software

Unofficial

6881–

6887

TCP

UDP

BitTorrent part of full range of ports used most often

Unofficial

6888

TCP

UDP

MUSE

Official

6888

TCP

UDP

BitTorrent part of full range of ports used most often

Unofficial

6889–

6890

TCP

UDP

BitTorrent part of full range of ports used most often

Unofficial

6891–

6900

TCP

UDP

BitTorrent part of full range of ports used most often

Unofficial

6891–

6900

TCP

UDP

Windows Live Messenger (File transfer)

Unofficial

6901

TCP

UDP

Windows Live Messenger (Voice)

Unofficial

6901

TCP

UDP

BitTorrent part of full range of ports used most often

Unofficial

70

Port

TCP

UDP

Description

Status

6902–

6968

TCP

UDP

BitTorrent part of full range of ports used most often

Unofficial

6969

TCP

UDP

acmsoda

Official

6969

TCP

BitTorrent tracker

Unofficial

6970–

6999

TCP

UDP

BitTorrent part of full range of ports used most often

Unofficial

7000

TCP

Default for Vuze's built in HTTPS Bittorrent Tracker

Unofficial

7001

TCP

Default for BEA WebLogic Server's HTTP server, though often changed during

installation

Unofficial

7002

TCP

Default for BEA WebLogic Server's HTTPS server, though often changed during

installation

Unofficial

7005

TCP

Default for BMC Software Control-M/Server and Control-M/Agent for Agent-to-

Server, though often changed during installation

Unofficial

7006

TCP

Default for BMC Software Control-M/Server and Control-M/Agent for Server-to-

Agent, though often changed during installation

Unofficial

7010

TCP

Default for Cisco AON AMC (AON Management Console)

[68]

Unofficial

7022

TCP

Database mirroring endpoints

Unofficial

7023

UDP

Bryan Wilcutt T2-NMCS Protocol for SatCom Modems

Official

7025

TCP

Zimbra LMTP [mailbox]—local mail delivery

Unofficial

7047

TCP

Zimbra conversion server

Unofficial

7133

TCP

Enemy Territory: Quake Wars

Unofficial

7144

TCP

Peercast

Unofficial

7145

TCP

Peercast

Unofficial

7171

TCP

Tibia

Unofficial

7306

TCP

Zimbra mysql [mailbox]

Unofficial

7307

TCP

Zimbra mysql [logger]

Unofficial

7312

UDP

Sibelius License Server

Unofficial

7400

TCP

UDP

RTPS (Real Time Publish Subscribe) DDS Discovery

Official

7401

TCP

UDP

RTPS (Real Time Publish Subscribe) DDS User-Traffic

Official

7402

TCP

UDP

RTPS (Real Time Publish Subscribe) DDS Meta-Traffic

Official

7473

TCP

UDP

Rise: The Vieneo Province

Official

7547

TCP

UDP

CPE WAN Management Protocol Technical Report 069

Official

7615

TCP

ISL Online

[69]

communication protocol

Unofficial

7670

TCP

BrettspielWelt BSW Boardgame Portal

Unofficial

7676

TCP

Aqumin AlphaVision Remote Command Interface

Unofficial

7700

UDP

P2P DC (RedHub)

Unofficial

7707

UDP

Killing Floor

Unofficial

7708

UDP

Killing Floor

Unofficial

7717

UDP

Killing Floor

Unofficial

7777

TCP

iChat server file transfer proxy

Unofficial

7777

TCP

Oracle Cluster File System 2

Unofficial

71

Port

TCP

UDP

Description

Status

7777

TCP

Windows backdoor program tini.exe default

Unofficial

7777

TCP

Xivio.com Chat Server Interface

Unofficial

7777

TCP

Terraria default server

Unofficial

7778

TCP

Bad Trip MUD

Unofficial

7777-

7788

UDP

Unreal Tournament series default server

Unofficial

7777-

7788

TCP

Unreal Tournament series default server

Unofficial

7787-

7788

TCP

GFI EventsManager 7 & 8

Official

7831

TCP

Default used by Smartlaunch Internet Cafe Administration

[70]

software

Unofficial

7880

TCP

UDP

PowerSchool Gradebook Server

Unofficial

7915

TCP

Default for YSFlight server [3]

Unofficial

7935

TCP

Fixed port used for Adobe Flash Debug Player to communicate with a debugger

(Flash IDE, Flex Builder or fdb).

[71]

Unofficial

7937-

9936

TCP

UDP

EMC

2

(Legato) Networker or Sun Solcitice Backup

Official

8000

UDP

iRDMI (Intel Remote Desktop Management Interface)

[72]

—sometimes erroneously

used instead of port 8080

Official

8000

TCP

iRDMI (Intel Remote Desktop Management Interface)

[72]

—sometimes erroneously

used instead of port 8080

Official

8000

TCP

Commonly used for internet radio streams such as those using SHOUTcast

Unofficial

8001

TCP

Commonly used for internet radio streams such as those using SHOUTcast

Unofficial

8002

TCP

Cisco Systems Unified Call Manager Intercluster

Unofficial

8008

TCP

HTTP Alternate

Official

8008

TCP

IBM HTTP Server administration default

Unofficial

8009

TCP

ajp13—Apache JServ Protocol AJP Connector

Unofficial

8010

TCP

XMPP File transfers

Unofficial

8011-

8013

TCP

HTTP/TCP Symon Communications Event and Query Engine

Unofficial

8014

TCP

HTTP/TCP Symon Communications Event and Query Engine

Unofficial

8014

UDP

Perseus SDR Receiver default remote connection port

Unofficial

8020

TCP

360Works SuperContainer

Unofficial

8074

TCP

Gadu-Gadu

Unofficial

8075

TCP

Killing Floor

Unofficial

8078

TCP

UDP

Default port for most Endless Online-based servers

Unofficial

8080

TCP

HTTP alternate (http_alt)—commonly used for Web proxy and caching server, or

for running a Web server as a non-root user

Official

8080

TCP

Apache Tomcat

Unofficial

8080

UDP

FilePhile Master/Relay

Unofficial

8081

TCP

HTTP alternate, VibeStreamer, e.g. McAfee ePolicy Orchestrator (ePO)

Unofficial

8086

TCP

HELM Web Host Automation Windows Control Panel

Unofficial

72

Port

TCP

UDP

Description

Status

8086

TCP

Kaspersky AV Control Center

Unofficial

8087

TCP

Hosting Accelerator Control Panel

Unofficial

8087

TCP

Parallels Plesk Control Panel

Unofficial

8087

UDP

Kaspersky AV Control Center

Unofficial

8088

TCP

Asterisk (PBX) Web Configuration utility (GUI Addon)

Unofficial

8089

TCP

Splunk Daemon

Unofficial

8090

TCP

HTTP Alternate (http_alt_alt)—used as an alternative to port 8080

Unofficial

8100

TCP

Console Gateway License Verification

Unofficial

8116

UDP

Check Point Cluster Control Protocol

Unofficial

8118

TCP

Privoxy—advertisement-filtering Web proxy

Official

8123

TCP

Polipo Web proxy

Official

8192

TCP

Sophos Remote Management System

Unofficial

8193

TCP

Sophos Remote Management System

Unofficial

8194

TCP

Sophos Remote Management System

Unofficial

8200

TCP

GoToMyPC

Unofficial

8222

TCP

VMware Server Management User Interface

[73]

(insecure Web interface).

[74]

See

also port 8333

Unofficial

8243

TCP

UDP

HTTPS listener for Apache Synapse

[75]

Official

8280

TCP

UDP

HTTP listener for Apache Synapse

[75]

Official

8291

TCP

Winbox—Default on a MikroTik RouterOS for a Windows application used to

administer MikroTik RouterOS

Unofficial

8303

UDP

Teeworlds Server

Unofficial

8332

TCP

Bitcoin JSON-RPC server

[76]

Unofficial

8333

TCP

Bitcoin

[77]

Unofficial

8333

TCP

VMware Server Management User Interface

[73]

(secure Web interface).

[74]