Port Number --- Description

1 TCP Port Service Multiplexer (TCPMUX)

5 Remote Job Entry (RJE)
7 ECHO
18 Message Send Protocol (MSP)
20 FTP -- Data
21 FTP -- Control
22 SSH Remote Login Protocol
23 Telnet
25 Simple Mail Transfer Protocol (SMTP)
29 MSG ICP
37 Time
42 Host Name Server (Nameserv)
43 WhoIs
49 Login Host Protocol (Login)
53 Domain Name System (DNS)
69 Trivial File Transfer Protocol (TFTP)
70 Gopher Services
79 Finger
80 HTTP
103 X.400 Standard
108 SNA Gateway Access Server
109 POP2
110 POP3
115 Simple File Transfer Protocol (SFTP)
118 SQL Services
119 Newsgroup (NNTP)
137 NetBIOS Name Service
139 NetBIOS Datagram Service
143 Interim Mail Access Protocol (IMAP)
150 NetBIOS Session Service
156 SQL Server
161 SNMP
179 Border Gateway Protocol (BGP)
190 Gateway Access Control Protocol (GACP)
194 Internet Relay Chat (IRC)
197 Directory Location Service (DLS)
389 Lightweight Directory Access Protocol (LDAP)
396 Novell Netware over IP
443 HTTPS
444 Simple Network Paging Protocol (SNPP)
445 Microsoft-DS
458 Apple QuickTime
546 DHCP Client
547 DHCP Server
563 SNEWS
569 MSN
1080 Socks

Common TCP/IP Protocols and Ports

Protocol TCP/UDP Port Number Description
File Transfer TCP 20/21 FTP is one of the most commonly used
Protocol (FTP) file transfer protocols on the Internet
and within private networks. An FTP
(RFC 959) server can easily be set up with little
networking knowledge and provides the
ability to easily relocate files from one
system to another. FTP control is
handled on TCP port 21 and its data
transfer can use TCP port 20 as well as
dynamic ports depending on the specific
configuration.
Secure Shell (SSH) TCP 22 SSH is the primary method used to
manage network devices securely at the
(RFC 4250-4256) command level. It is typically used as a
secure alternative to Telnet which does
not support secure connections.
Telnet TCP 23 Telnet is the primary method used to
manage network devices at the
(RFC 854) command level. Unlike SSH which
provides a secure connection, Telnet
does not, it simply provides a basic
unsecured connection. Many lower level
network devices support Telnet and not
SSH as it required some additional
processing. Caution should be used
when connecting to a device using
Telnet over a public network as the
login credentials will be transmitted in
the clear.
Simple Mail TCP 25 SMTP is used for two primary
Transfer Protocol functions, it is used to transfer mail
(SMTP) (email) from source to destination
between mail servers and it is used by
(RFC 5321) end users to send email to a mail
system.
Domain Name TCP/UDP 53 The DNS is used widely on the public
System (DNS) internet and on private networks to
translate domain names into IP
(RFC 1034-1035) addresses, typically for network routing.
DNS is hieratical with main root servers
that contain databases that list the
managers of high level Top Level
Domains (TLD) (such as .com). These
different TLD managers then contain
information for the second level
domains that are typically used by
individual users (for example,
cisco.com). A DNS server can also be
set up within a private network to
private naming services between the
hosts of the internal network without
being part of the global system.
Dynamic Host UDP 67/68 DHCP is used on networks that do not
Configuration use static IP address assignment (almost
Protocol (DHCP) all of them). A DHCP server can be set
up by an administrator or engineer with
(RFC 2131) a poll of addresses that are available for
assignment. When a client device is
turned on it can request an IP address
from the local DHCP server, if there is
an available address in the pool it can be
assigned to the device. This assignment
is not permanent and expires at a
configurable interval; if an address
renewal is not requested and the lease
expires the address will be put back into
the poll for assignment.
Trivial File UDP 69 TFTP offers a method of file transfer
Transfer Protocol without the session establishment
(TFTP) requirements that FTP uses. Because
TFTP uses UDP instead of TCP it has
(RFC 1350) no way of ensuring the file has been
properly transferred, the end device
must be able to check the file to ensure
proper transfer. TFTP is typically used
by devices to upgrade software and
firmware; this includes Cisco and other
network vendors’ equipment.
Hypertext Transfer TCP 80 HTTP is one of the most commonly
Protocol (HTTP) used protocols on most networks. HTTP
is the main protocol that is used by web
(RFC 2616) browsers and is thus used by any client
that uses files located on these servers.
Post Office TCP 110 POP version 3 is one of the two main
Protocol (POP) protocols used to retrieve mail from a
version 3 server. POP was designed to be very
simple by allowing a client to retrieve
(RFC 1939) the complete contents of a server
mailbox and then deleting the contents
from the server.
Network Time UDP 123 One of the most overlooked protocols is
Protocol (NTP) NTP. NTP is used to synchronize the
devices on the Internet. Even most
(RFC 5905) modern operating systems support NTP
as a basis for keeping an accurate clock.
The use of NTP is vital on networking
systems as it provides an ability to
easily interrelate troubles from one
device to another as the clocks are
precisely accurate.
NetBIOS TCP/UDP 137/138/139 NetBIOS itself is not a protocol but is
typically used in combination with IP
(RFC 1001-1002) with the NetBIOS over TCP/IP (NBT)
protocol. NBT has long been the central
protocol used to interconnect Microsoft
Windows machines.
Internet Message TCP 143 IMAP version3 is the second of the
Access Protocol main protocols used to retrieve mail
(IMAP) from a server. While POP has wider
support, IMAP supports a wider array of
(RFC 3501) remote mailbox operations which can be
helpful to users.
Simple Network TCP/UDP 161/162 SNMP is used by network
Management administrators as a method of network
Protocol (SNMP) management. SNMP has a number of
different abilities including the ability to
(RFC 1901-1908, monitor, configure and control network
3411-3418) devices. SNMP traps can also be
configured on network devices to notify
a central server when specific actions
are occurring. Typically, these are
configured to be used when an alerting
condition is happening. In this situation,
the device will send a trap to network
management stating that an event has
occurred and that the device should be
 looked at further for a source to the
event.
Border Gateway TCP 179 BGP version 4 is widely used on the
Protocol (BGP) public internet and by Internet Service
Providers (ISP) to maintain very large
(RFC 4271) routing tables and traffic processing.
BGP is one of the few protocols that
have been designed to deal with the
astronomically large routing tables that
must exist on the public Internet.
Lightweight TCP/UDP 389 LDAP provides a mechanism of
Directory Access accessing and maintaining distributed
Protocol (LDAP) directory information. LDAP is based
on the ITU-T X.500 standard but has
(RFC 4510) been simplified and altered to work over
TCP/IP networks.
Hypertext Transfer TCP 443 HTTPS is used in conjunction with
Protocol over HTTP to provide the same services but
SSL/TLS (HTTPS) doing it using a secure connection which
is provided by either SSL or TLS.
(RFC 2818)
Lightweight TCP/UDP 636 Just like HTTPS, LDAPS provides the
Directory Access same function as LDAP but over a
Protocol over secure connection which is provided by
TLS/SSL (LDAPS) either SSL or TLS.

(RFC 4513)
FTP over TLS/SSL TCP 989/990 Again, just like the previous two entries,
FTP over TLS/SSL uses the FTP
(RFC 4217) protocol which is then secured using
either SSL or TLS.