TCP: Transmission Control Protocol

1. CLOSED: The connection is not active, and no data can be sent or received.
2. LISTEN: The server is ready and waiting for a client to start a connection.
3. SYN_SENT: The client has initiated a connection by sending a message (with the
SYN flag). This is the first step in establishing a connection.
4. SYN_RCVD: The server has received the client's connection request (SYN) and has
replied to it. The server is now waiting for the client's acknowledgment to complete the
connection setup.
5. ESTABLISHED: The connection is fully open, and data can be sent and received
between the client and server.
6. FIN_WAIT_1: One side (client or server) wants to close the connection. It sends a
message with the FIN flag and waits for the other side to acknowledge it.
7. FIN_WAIT_2: The initiating side has received an acknowledgment (ACK) of its FIN
message and is now waiting for the other side to send its own FIN message.
8. CLOSE_WAIT: The side receiving a FIN message acknowledges it and prepares to
close the connection, typically after completing any remaining tasks.
9. CLOSING: Both sides are in the process of closing the connection. Each has sent a
FIN message, and each is waiting for the other’s final acknowledgment.
10. LAST_ACK: One side has sent its final FIN message and is waiting for an
acknowledgment from the other side to confirm the closure.
11. TIME_WAIT: After sending the final acknowledgment (ACK) for a FIN message, one
side waits a short time to ensure all packets have been received and that the other side
knows the connection is fully closed.

In summary:
• The SYN and ACK messages are used to start the connection.
• The FIN and ACK messages are used to end the connection.
• The connection is fully open in the ESTABLISHED state and is being closed in
states like FIN_WAIT_1, FIN_WAIT_2, CLOSE_WAIT, and TIME_WAIT.

UDP: User Datagram Protocol

Request

Response

Client Server

User Datagram Protocol (UDP) is one of the core protocols of the Internet Protocol (IP)
suite. It is a communication protocol used across the internet for time-sensitive
transmissions such as video playback or DNS lookups . Unlike Transmission Control
Protocol (TCP), UDP is connectionless and does not guarantee delivery, order, or error
checking, making it a lightweight and efficient option for certain types of data
transmission.
UDP Header
UDP header is an 8-byte fixed and simple header, while for TCP it may vary from 20
bytes to 60 bytes. The first 8 Bytes contain all necessary header information and the
remaining part consists of data. UDP port number fields are each 16 bits long, therefore
the range for port numbers is defined from 0 to 65535; port number 0 is reserved. Port
numbers help to distinguish different user requests or processes.

8 bytes

UDP Header UDP Data

Source Port Destination Port

Length Checksum
16 bits 16 bits

• Source Port: Source Port is a 2 Byte long field used to identify the port
number of the source.
• Destination Port: It is a 2 Byte long field, used to identify the port of the destined
packet.
• Length: Length is the length of UDP including the header and the data. It is a 16-
bits field.
• Checksum: Checksum is 2 Bytes long field. It is the 16-bit one’s complement of
the one’s complement sum of the UDP header, the pseudo-header of information
from the IP header, and the data, padded with zero octets at the end (if
necessary) to make a multiple of two octets.
Application of UDP
- Simple Communication: UDP is used for simple request-response interactions where
the amount of data is small, and there’s less need for managing flow and error control.
- Multicasting: UDP supports multicasting, which means it can send a message to
multiple recipients at once, making it useful for situations where data needs to reach
many devices.
- Routing Updates: UDP is used in certain protocols like RIP (Routing Information
Protocol) for sending routing updates.
- Real-Time Applications: Real-time apps that need consistent timing, like video or
audio streaming, use UDP because it avoids delays that can disrupt the flow of data.
- Voice Communication (VoIP): Services like Skype and WhatsApp use UDP for voice
calls. Since voice data needs to be delivered quickly, UDP is preferred because it sends
data fast without waiting for confirmation.
- DNS (Domain Name System): DNS, which translates website names into IP
addresses, uses UDP because DNS queries are small and need quick responses.
- DHCP (Dynamic Host Configuration Protocol): DHCP, which assigns IP addresses
to devices on a network, uses UDP. DHCP messages are small, so any delay caused by
packet loss is generally acceptable.
Common Protocols Using UDP: Several other protocols use UDP for data
transmission, such as:
- NTP (Network Time Protocol) – for synchronizing clocks on a network
- BOOTP and DHCP – for IP address assignment
- TFTP (Trivial File Transfer Protocol) – for simple file transfers
- RTSP (Real-Time Streaming Protocol) – for streaming media
- RIP (Routing Information Protocol) – for sharing routing info
Tools That Use UDP: Some network tools use UDP for specific tasks, such as:
- Trace Route – to trace the path data takes through the network
- Record Route – to record the route taken by a message
- Timestamp – to attach a timestamp to packets for time tracking
Fast Data Transfer: UDP is quick because it takes data from the network layer, adds a
simple header, and sends it without waiting for confirmation from the receiver.
DHCP: Dynamic Host Configuration Protocol

What is DHCP?
Dynamic Host Configuration Protocol (DHCP) is a network protocol that automatically
assigns IP addresses and other necessary network settings to devices (like computers,
smartphones, and printers) when they connect to a network. Instead of setting up each
device manually, DHCP lets a DHCP server assign network settings to devices, making
network management easier and preventing IP address conflicts.
Why is DHCP Important?
DHCP simplifies connecting and managing devices on a network. It automatically
assigns each device an IP address, subnet mask, gateway, DNS server, and other
settings, so devices can communicate with each other smoothly without conflicts. It’s
essential for managing large networks efficiently.
Key Components of DHCP
1. DHCP Server: The central server that holds a pool of IP addresses and network
settings to assign to devices.
2. DHCP Client: Any device that requests network configuration information from the
DHCP server, such as computers, phones, or printers.
3. DHCP Relay: A middleman that forwards messages between DHCP clients and
servers, often used in larger networks to connect distant clients to the server.
4. IP Address Pool: The range of IP addresses the DHCP server can assign to devices
on the network.
5. Subnets: Smaller parts of a network used to organize and control IP addresses
within a larger network.
6. Lease: The time period for which a device’s IP address and settings are valid. When
a lease expires, the client needs to renew it to keep the address.
7. DNS Servers: DHCP can also provide DNS server information so clients can resolve
website names to IP addresses.
8. Default Gateway: The device that connects a local network to external networks.
DHCP provides the gateway address to clients so they know where to send traffic that’s
outside their local network.
9. Options: Additional settings that DHCP can provide to clients, such as the subnet
mask, domain name, and time server.
10. Renewal: Clients can renew their lease before it expires to ensure their network
settings stay valid and they retain the same IP address.
11. Failover: Two DHCP servers can work together for redundancy, so if one server
fails, the other can still provide IP addresses and settings to clients.
12. Dynamic Updates: DHCP servers can update DNS records with the IP addresses
of clients, making it easier to manage and locate devices on the network.
13. Audit Logging: DHCP servers can log all transactions, giving administrators insight
into which devices are using which IP addresses, and when leases are assigned or
renewed.