Questions tagged [protocol-theory]

For questions about network protocols published in a Standard or RFC. Do not use this tag merely because the question mentions a networking protocol in it. Questions with this tag *could* be closed if they do not explain why the question is relevant and important to answer; this is necessary to avoid issues with tangential / trivial questions or help vampires.

Filter by
Sorted by
Tagged with
1
vote
1answer
34 views

IPv4 maximum datagram size

The IPv4 datagram consists of two parts:the header length and the payload. The maximum header size is 60 bytes and minimum is 20 bytes. The maximum size of the data can be 65515 bytes. So why the ...
0
votes
0answers
7 views

Why do i see only UDP and not QUIC during capture in wireshark? [duplicate]

During packet sniffing in wireshark i dont see any QUIC or GQUIC packets only UDP
4
votes
1answer
335 views

Is TCP slow start supposed to be enabled for VoIP SIP?

TCP slow start mechanism generally is pretty useful in most cases. But it is not so good and reasonable for short-lived TCP connections. Hence the question: Should TCP slow start be used with SIP-over-...
1
vote
1answer
54 views

Unexpected bytes in AS_PATH BGP attribute

I am parsing out the ASNs from several AS_PATHS. A majority of the attributes I encounter look like this one: [64, 1, 1, 0, 64, 2, 10, 2, 2, 0, 0, 23, 169, 0, 0, 50, 156, 64, 3, 4, 200, 40, 162, 202]...
4
votes
1answer
57 views

Which exact bytes are transmitted while TCP zero window probing?

I read the post about TCP zero window probe and it seems that such a probing segments transmit some payload. But I can't figure out which exactly bytes are sent in probing segments? Is it one (or more)...
1
vote
1answer
47 views

Why must host A continue to transmit after host b sends runt frame post collision on ethernet? (CSMA/CD)

Trying to understand example from computer networks: a systems approach ... -Host A sends Host B a frame at time t; Packet arrives at B at time t + d; (d = one link latency) Instant before frame ...
1
vote
1answer
28 views

Do DR-Other router forwards Type 2 LSA received by DR?

In the Diagram below when R1 is newly added to Network Topology R1 and R2 become neighbors and exchange Type 1 LSA from R2, R3, R4. But how R1 knows Network LSA created by the DR in LAN(subnet 1). ...
2
votes
1answer
54 views

How can MLDv2 work according to the RFCs 3810 and 4606?

When IPv6 Stateless Address Autoconfiguration is happening, an interface/node has to join the all-nodes multicast address and the solicited-node multicast address AFTER forming a "tentative" link-...
1
vote
1answer
1k views

Worst-case efficiency of PPP escaping mechanism

Will transferring over PPP data stream containing only reserved bytes 0x7E, 0xFF, 0x03 reduce bandwidth by 50% because of escaping? Then it seems to be very stupid if not say moronic. Such poor ...
13
votes
4answers
3k views

Difference between :: and ::1

I am confused about following netstat output. There are two kind of local ports. The first is: [::]8100 The second is: [::1]8100 I know that [::1] is a loopback address for IPv6. My question is: ...
2
votes
1answer
49 views

in 802.11, when must a station go to the “random fall back slot” mechanism?

i've been reading Michael Gast's 2005 book on 802.11, and he talks about how each station, after it has seized a channel and finished transmitting, will then have its NAV timer expire (along with all ...
31
votes
2answers
6k views

Why does the IPv6 header not include a checksum?

It is stated in Wikipedia that an IPv6 header does not include a checksum. What are the reasons that were behind this decision?
1
vote
1answer
36 views

How does triple handshake avoid establishing connection for duplicate packets(coming later down the line)

The idea behind triple handshake seems to be for duplicates to not cause issues. The way I understand it host sends a sequence x to server. Server acknowledges it and sends it's own sequence y. Host ...
1
vote
1answer
50 views

Do sequence and acknowledgment numbers treat 3-Way Handshake differently?

1- Just as the message ID that is assigned to each message in PAR, the "sequence number" is a means of providing reliability in a transfer of a byte stream. So sequence numbers are assigned to every ...
0
votes
0answers
7 views

802.11 vs MACA protocol RTS/CTS [duplicate]

im in serious doubts about how diferent are the 802.11 and the MACA protocols I can´t find a simple explanation on the internet on how these are different when it comes to their RTS/CTS parts. Are ...
4
votes
3answers
2k views

Why can a host with a single NIC and on two networks have 2 IP adresses?

I understand that an IP adress refers to a NIC and not to a host, therefore a single host can have as many IP adresses as NICs. But Tannenbaum says: It really refers to a network interface, so if ...
7
votes
6answers
3k views

What happens with a ping when it enters a network? Is the router the one answering with a reply?

What happens with a ping when it enters a network? Does the router redirects it to one of the devices on the network, or it sends the reply itself? Device a1 from network A, with public IP adress P1 ...
2
votes
2answers
49 views

What is VRRP used for?

I want to understand VRRP, but most resources online use complex examples that are fairly hard to understand. I want to understand the big picture. What problem does VRRP(Virtual Router Redundancy ...
0
votes
1answer
50 views

What will be the behaviour of TCP in a case when application layer is changed to send small packets

Assume I have an application layer protocol that segments the packet itself. So if it has 100 MBytes of data, then it will divide the data into 10000 segments and send each segment individually to TCP....
1
vote
1answer
55 views

Routing protocol comparisons (with Linux) [closed]

I am doing some thesis about comparison of routing protocols, most notably how (how good, how fast) they react to changes in the underlying network. Not sure if this makes any sense, but too late to ...
2
votes
3answers
120 views

Why is DHCP client able to accept DHCP Offer packet?

I am seeing a DHCP packet flow, which consists of at least 4 packets: Discovery Offer Request ACK With the discovery packet, client tries to find DHCP server. Since client does not know his own IP ...
0
votes
1answer
80 views

How networks protocols communicate with each other?

We know that before sending information TCP has to establish connection with other host. So, does the request from TCP get encapsulated by lower levels of stack protocols or it's just directly send to ...
1
vote
4answers
86 views

Why not put unicast address in IPv6 packet containing NDP neighbor solicitation instead of solicited-node multicast address?

This is a follow-up question to Why is the NDP Neighbor Solicitation message sent to the solicited-node address?. Summary: say I would send an IPv6 packet and put the unicast address of the host I ...
1
vote
1answer
103 views

Why Do We Use STP (Spanning Tree Protocol) or RSTP (Rapid Spanning Tree Protocol) When Packets are Not Routed Optimally?

I am new to networking so this probably a naive question. I've been reading up on the spanning tree protocol and understand why it's necessary in a network (it prevents loops) and I understand that ...
1
vote
1answer
68 views

STP Convergence: How does a port initially in blocking state know it needs to change to a designated port?

I am attempting to gain a better understanding of how STP converges when certain state changes occur that affect the STP topology. In this scenario (see below) Switch A (SwA) is the root switch with ...
1
vote
1answer
107 views

Why do Designated Ports in STP still send BPDUs if the otherside of the link is blocking?

Is there a particular reason for a Designated Port to continue sending out BPDUs after convergence has occurred on a link where the other side is in a STP blocking state? I get the idea of a ...
2
votes
1answer
73 views

Confusion about IANA “Protocol Numbers” registery

In the IANA registery for "Protocol Numbers", there listed 2 IP protocol versions: IPv4 at #4 and IPv6 at #41. Their "protocol" column says IPv[46] Encapsulation, and "reference" column points to 2 ...
1
vote
2answers
87 views

Which port determines the protocol?

If we have a common protocol port on both ends.. say source point is 443 and destination port is 80 (hypothetical situation, I know this combination of ports probably makes no sense).. how do we ...
4
votes
1answer
47 views

Function of the P-bit flag in an IPv6 multicast

Currently I'm trying to learn (common) things about IPv6 and started with the address format and the address scopes. Finally I reached the multicast part where my problem with the definiton of the ...
3
votes
2answers
92 views

Is the first address in an IPv6 subnet assignable?

I am working in a lab and have configured a series of /125 subnets between routers. Lets ignore the best practice for this discussion of using /64 for everything. When I assign fd00:f9a8:ffff::257 to ...
1
vote
1answer
34 views

OSPF: What's the consequence of two nssa area translator router

If NSSA area has 2 ABR, then usually one of them will be elected to be translator by router id. But what if I have 2 translator routers and both translate the message simultaneously? How to route in ...
1
vote
2answers
146 views

Sequence numbers of segments in three way handshakes of TCP connection establishment or termination

I was trying to understand TCP connection establishment and termination steps from Forouzan's book. In third step of three way handshake of connection establishment, it says following The client ...
1
vote
1answer
55 views

Is TCP aware of MAC adress

lets say I would like to make connection between client and server on port 80. Is 3 way handshake aware of server MAC address? I mean: client send SYN data packet to specific IP:port and MAC. In ...
0
votes
1answer
63 views

Is there any fixed version of CSMA/CA?

I was trying to understand exact algorithm for Carrier Sense Multiple Access / Collision Avoidance mechanism from Forouzan's book. The book gives very detail explanation of topics. However explanation ...
0
votes
2answers
126 views

What is the difference between connect and active states of BGP?

What is the significance of having two different states in FSM when both try to establish TCP Connection?
2
votes
1answer
194 views

When TCP sender window shrinks?

I was learning TCP from Forouzan's book. It explains sender side window as follows: In that it defines size of receiver window as follows: rwnd = receiver buffer size - number of bytes waiting to ...
1
vote
1answer
90 views

ports and security

I'm thinking about how the "port" operates for the network connections and tried reading the CCNA cert. guide to understand the details, however, I need to clarify doubts: does occupying all the TCP/...
1
vote
1answer
48 views

Finding MSS for a remote connection that uses tunnelling

I'm working on a codebase where we're trying to test network health by verifying if we can ping the remote site having payload = MSS without any packet fragmentation (using -df flag). Typically, for ...
1
vote
1answer
117 views

Can communication to broadcast 224.0.0.1 be made to reach hosts outside of the local subnet?

I been asked the question if it is possible for an a IP host to use multicast to address 224.0.0.1 in order to reach (and get a response from) another host which is not on the local network segment ...
1
vote
1answer
54 views

what are Hardware size and protocol size in ARP header? Attached image

While working on packet capture for a simple scan, just had a look at packet capture and want to know what does hardware size and protocol size means in a ARP header?
0
votes
1answer
49 views

When IP header of length 22bytes is there then how padding will work?

My base IPv4 header of 20bytes + 2bytes i used for Options making it 22bytes means 176bits so padding will add 16 Zeroes to make it multiple of 32? is this correct way to understand? Boundary of ...
1
vote
1answer
28 views

Why do we need EIGRP AS numbers when we have EIGRP RID?

I understand that the EIGRP routers need to have the same AS number to peer with each other. But why can't we just use EIGRP Router ID?
1
vote
2answers
111 views

How to advertise a classless network in RIPv2?

In OSPF and EIGRP we can advertise specific networks only using wildcard masks. For example, if a router has networks 10.0.10.0/24 and 10.0.20.0/24, we can choose to advertise only 10.0.10.0/24 by ...
3
votes
2answers
3k views

Why the first octet of a MAC address always end with a binary 0?

I stumbled upon a piece of code on GitHub: https://github.com/adeverteuil/bash-ula-generator/blob/master/gen-ula.sh # Generate an EUI64 from the MAC address # as described in RFC 3513 # https://tools....
0
votes
1answer
67 views

Which IPv4 options must be copied on fragmentation and why?

In RFC 791 page 14 it says The copied flag indicates that this option is copied into all fragments on fragmentation. 0 = not copied 1 = copied If I understand correctly it is possible ...
1
vote
1answer
69 views

How to understand the Flags is IP_MF, what will happen?

For data packets whose length exceeds the MTU of the interface, fragmentation processing is required. The fields related to fragmentation in the IP header are as follows: Identification - Used to ...
0
votes
1answer
27 views

Connectivity problems in a topology [closed]

I cannot identify any network problems in the following topology. https://i.imgur.com/eyUEzvz.jpg Any help in identifying problems would be appreciated, and I would be happy to work on them.
0
votes
1answer
100 views

Scaling fragment offset

I studied that fragment offset has 13 bits. At transport layer segmentation is done considering the the MTU at lower layers (network layer, data link layer). Ethernet format says the maximum data ...
0
votes
1answer
81 views

Why Internet protocol is divided in rows?

In simple words, why IP packet is divided in rows each one is 32 bit in length? For example this attached image shows the IP packet has 32 bit in the first row then another 32 bit and so on. Is it ...
2
votes
1answer
104 views

Is OSPF router ID unique per area?

I found online that the router ID must be unique within the OSPF domain. But what exactly is an OSPF domain (an area?). Let's take the following topology: Can R1 and R5 have the same router ID, as ...

1
2 3 4 5
8