INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

UNIT-2;

TCP;
TCP stands for Transmission Control Protocol. It is one of the main protocols in the Internet
Protocol Suite, often referred to as TCP/IP. TCP provides reliable, ordered, and error-checked
delivery of data packets over a network. It is connection-oriented, meaning that before any data
exchange occurs, a connection must be established between the sender and the receiver.

Some key features of TCP include:

1. Reliability: TCP ensures that data transmitted between two hosts arrives reliably and in
the correct order. It achieves this through mechanisms such as acknowledgments,
retransmissions, and sequence numbers.
2. Flow Control: TCP includes mechanisms to prevent a fast sender from overwhelming a
slow receiver. It dynamically adjusts the rate of data flow based on the receiver's ability to
handle it.
3. Congestion Control: TCP monitors network congestion and adjusts its transmission rate
accordingly to avoid network congestion collapse, where all network traffic comes to a
halt.
4. Connection-Oriented: TCP establishes a connection between the sender and receiver
before data transfer begins. This connection includes a handshake process involving the
exchange of control information to set up parameters for the communication session.
5. Full Duplex: TCP supports full-duplex communication, meaning that data can be
transmitted and received simultaneously in both directions.
6. Checksum: TCP employs a checksum mechanism to detect errors in transmitted data. This
allows it to identify corrupted or lost packets and request retransmissions.

TCP is widely used for applications that require reliable data transmission over the internet,
such as web browsing, email, file transfer, and online gaming. It forms the foundation of many
higher-level protocols and applications, making it one of the most important protocols in
modern networking.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

UDP and IP Protocols;

UDP stands for User Datagram Protocol, while IP stands for Internet Protocol. UDP and IP are
both integral parts of the Internet Protocol Suite (TCP/IP), but they serve different purposes.

1. Internet Protocol (IP):

- IP is a network layer protocol responsible for routing packets between devices on a
network.
- It provides the basic framework for addressing, routing, and delivering packets of data
between devices.
- IP does not guarantee reliable delivery, ordering, or error checking. It is best-effort,
meaning it tries its best to deliver packets but does not guarantee success.
- IP is connectionless, meaning each packet is treated independently and may take different
routes to reach its destination.
- IPv4 and IPv6 are the two main versions of the Internet Protocol, with IPv6 being the
newer version designed to address the limitations of IPv4, such as the exhaustion of
available addresses.

2. User Datagram Protocol (UDP):

- UDP operates at the transport layer of the Internet Protocol Suite.
- It is a simple, connectionless protocol that provides a low-overhead, lightweight
mechanism for sending datagrams (packets) between devices.
- UDP does not guarantee reliable delivery, ordering, or error checking like TCP. It is often
used for applications where speed and efficiency are prioritized over reliability, such as
real-time streaming, online gaming, DNS (Domain Name System) queries, and Voice
over IP (VoIP).
- UDP is faster than TCP because it does not have the overhead of establishing and
maintaining a connection, performing flow control, or handling retransmissions.
- Because of its simplicity and low overhead, UDP is often used in scenarios where a small
amount of lost data is acceptable, or where higher-layer protocols implement their own
error handling mechanisms.

In summary, while both UDP and IP are essential components of the Internet Protocol Suite,
they serve different functions. IP handles the routing and delivery of packets across networks,
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

while UDP provides a lightweight, connectionless transport mechanism for sending datagrams
between devices.

Port Numbers;
Port numbers are identifiers used by the Transmission Control Protocol (TCP) and the User
Datagram Protocol (UDP) to specify endpoints in networking communications. They help in
distinguishing between different services or processes running on a single host or different
hosts on a network.

Here are some key points about port numbers:

1. Range: Port numbers range from 0 to 65535. Ports from 0 to 1023 are reserved for well-
known services and protocols, while ports from 1024 to 49151 are registered ports used
by various applications. Ports from 49152 to 65535 are dynamic or private ports, which
can be used by client applications for communication.
2. Well-known Ports: Ports numbered from 0 to 1023 are well-known ports. These are
associated with standard services such as HTTP (port 80), FTP (port 21), SSH (port 22),
Telnet (port 23), SMTP (port 25), DNS (port 53), etc.
3. Registered Ports: Ports from 1024 to 49151 are registered ports. These are assigned by
the Internet Assigned Numbers Authority (IANA) to specific services upon request. They
are commonly used by applications that don't require special privileges to run.
4. Dynamic/Private Ports: Ports from 49152 to 65535 are dynamic or private ports. These
ports are used by client applications to initiate communication with servers. They are
allocated dynamically by the operating system and are not associated with any specific
service or protocol.
5. Port Numbers in TCP and UDP: Both TCP and UDP use port numbers to identify the
source and destination endpoints in a communication session. This allows multiple
services to run simultaneously on a single host and enables network devices to forward
packets to the appropriate applications.
6. Socket: In the context of TCP and UDP, a combination of IP address and port number is
called a socket. A socket uniquely identifies a communication endpoint in a network.
Port numbers play a crucial role in network communication, facilitating the routing of data
packets to the correct destination and enabling the establishment of connections between
different applications or services.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

Format of TCP;
The Transmission Control Protocol (TCP) segment has a specific format, which includes
various fields that serve different purposes in facilitating reliable data transmission. Here's the
breakdown of the format of a TCP segment:

1. Source Port (16 bits): This field identifies the port number of the sender's application. It
helps the recipient know which application on the sender's system generated the data.
2. Destination Port (16 bits): Similar to the source port, this field identifies the port number
of the recipient's application, enabling the recipient to direct the data to the appropriate
application.
3. Sequence Number (32 bits): This field indicates the sequence number of the first data
byte in this segment. It plays a crucial role in ensuring ordered delivery of data and
detecting missing segments.
4. Acknowledgment Number (32 bits): In segments carrying acknowledgment (ACK)
flags, this field contains the sequence number of the next byte the sender expects to receive
from the recipient. It acknowledges receipt of all prior bytes up to that sequence number.
5. Data Offset (4 bits): Also known as the header length, this field specifies the size of the
TCP header in 32-bit words. It indicates where the data begins in the segment.
6. Reserved (6 bits): These bits are reserved for future use and are currently set to zero.
7. Flags (6 bits): TCP uses several control flags to indicate various conditions and actions.
The flags include:
- URG (Urgent Pointer field significant)
- ACK (Acknowledgment field significant)
- PSH (Push Function)
- RST (Reset the connection)
- SYN (Synchronize sequence numbers)
- FIN (No more data from sender)
8. Window Size (16 bits): This field specifies the size of the receive window, indicating the
number of bytes the sender is willing to accept, starting from the acknowledgment number
field. It facilitates flow control.
9. Checksum (16 bits): This field contains the checksum value computed over the entire
TCP segment, including the TCP header and data. It helps detect errors in transmission.
10. Urgent Pointer (16 bits): If the URG flag is set, this field indicates the offset from the
sequence number in this segment where urgent data ends and normal data resumes.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

11. Options (Variable): This field may include optional parameters and can vary in length.
Common options include Maximum Segment Size (MSS), Timestamps, Window Scale,
and Selective Acknowledgment (SACK) options.
12. Padding (Variable): If necessary to ensure that the header is a multiple of 32 bits, padding
bytes are added to the end of the header.

Understanding the format of TCP segments is crucial for network engineers and developers
working on networking protocols or applications that utilize TCP for reliable data transmission.

IPv4 addressing;
IPv4 (Internet Protocol version 4) is the fourth version of the Internet Protocol and the most
widely used protocol for internet communication. IPv4 addresses are 32-bit numerical
identifiers assigned to devices participating in a computer network. These addresses are used
for identifying and locating devices on a network, allowing data to be routed to the correct
destination.

IPv4 addresses are typically written in dotted-decimal notation, where each of the four octets
of the address is represented by a decimal number separated by periods. For example, an IPv4
address might look like this: [Link].

Here's a breakdown of IPv4 addressing components:

1. Network Address: This part of the address identifies the network to which the device
belongs. The network address is obtained by applying a subnet mask to the IP address.
Devices within the same network share the same network address.
2. Host Address: This part of the address identifies a specific device within the network. Each
device on a network must have a unique host address.
3. Subnet Mask: The subnet mask is used to divide the IP address into network and host
portions. It specifies which bits in the IP address represent the network portion and which
bits represent the host portion.

IPv4 addresses are divided into several classes based on the size of the network and the number
of hosts it can accommodate. The classes are A, B, C, D, and E. However, classful addressing
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

is not commonly used anymore, and instead, Classless Inter-Domain Routing (CIDR) notation
is used to represent IPv4 addresses along with their associated subnet masks.

CIDR notation represents an IPv4 address followed by a slash ("/") and a number, which
indicates the number of bits in the network portion of the address. For example,
"[Link]/24" represents the IPv4 network address "[Link]" with a subnet mask of
"[Link]", indicating that the first 24 bits represent the network portion.

IPv4 addressing has limitations due to its 32-bit address space, which allows for approximately
4.3 billion unique addresses. With the growth of the internet and the increasing number of
devices connected to it, IPv4 address exhaustion has become a significant issue. As a result,
IPv6 (Internet Protocol version 6) has been developed to address this limitation by using a 128-
bit address space, providing an almost unlimited number of unique addresses.

The need for IPv6;

The need for IPv6 arises primarily due to the limitations of IPv4, which has a 32-bit address
space. Some of the key reasons for transitioning to IPv6 include:

1. Address Exhaustion: IPv4 has a limited address space, allowing for approximately 4.3
billion unique addresses. With the proliferation of internet-connected devices, including
smartphones, tablets, IoT devices, and more, the available IPv4 addresses are rapidly
depleting. IPv6, with its 128-bit address space, provides an enormous pool of unique
addresses, virtually eliminating the risk of address exhaustion.
2. Addressing Hierarchy: IPv6 simplifies network administration and routing by
incorporating a hierarchical addressing structure, allowing for efficient aggregation and
summarization of routing information. This hierarchical structure enhances scalability and
performance, particularly in large networks.
3. Auto-configuration and Plug-and-Play: IPv6 includes features such as stateless address
auto-configuration, which simplifies the process of assigning IP addresses to devices on a
network. With IPv6, devices can automatically generate their own IP addresses without
requiring manual configuration, making it easier to deploy and manage networks,
especially in dynamic environments.
4. Enhanced Security: IPv6 includes built-in support for IPsec (Internet Protocol Security),
providing end-to-end encryption, authentication, and data integrity. While IPsec can be
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

implemented in IPv4 networks, it is optional and often requires additional configuration.

In IPv6, IPsec is an integral part of the protocol suite, offering enhanced security by
default.
5. Support for New Technologies: IPv6 incorporates support for emerging technologies and
protocols, such as multicast addressing, mobility, and quality of service (QoS). These
features enable more efficient and scalable deployment of new services and applications
over the internet.
6. Future-proofing: IPv6 is designed to accommodate the evolving needs of the internet and
address the shortcomings of IPv4. By adopting IPv6, organizations and service providers
can future-proof their networks and ensure long-term scalability and interoperability.

Overall, the transition to IPv6 is essential for sustaining the growth and innovation of the
internet, ensuring the availability of sufficient address space, improving network efficiency and
security, and supporting the increasing diversity of internet-connected devices and applications.
While the transition poses challenges, the benefits of IPv6 far outweigh the costs, making it a
critical evolution in the architecture of the internet.

IPv6 addressing and packet format;

IPv6 (Internet Protocol version 6) introduces significant changes compared to IPv4, both in
addressing and packet format. Here's an overview of IPv6 addressing and packet format:

IPv6 Addressing:

1. 128-bit Address Space: IPv6 addresses are 128 bits in length, providing a vastly larger
address space compared to the 32-bit address space of IPv4.
2. Hexadecimal Representation: IPv6 addresses are typically represented in hexadecimal
notation, consisting of eight groups of four hexadecimal digits separated by colons. For
example, `[Link]`.
3. Address Types:
- Unicast: Identifies a single interface. Similar to IPv4 unicast addresses.
- Multicast: Identifies a group of interfaces, allowing data to be sent to multiple
recipients simultaneously.
- Anycast: Identifies multiple interfaces, but data is routed to the nearest (in terms of
routing distance) interface with the anycast address.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

4. Address Format:
- Prefix: The first part of the address, representing the network prefix.
- Interface ID: The remaining bits identify the specific interface within the network.
5. IPv6 Address Types:
- Global Unicast: Equivalent to public IPv4 addresses, routable on the global internet.
- Link-Local: Used for communication within the same local network segment.
Equivalent to IPv4's Automatic Private IP Addressing (APIPA) addresses.
- Unique Local: Similar to IPv4 private addresses, used for local communication within
an organization.
- Loopback: Equivalent to IPv4's loopback address (`[Link]`), used for internal testing
and communication with the local host.

IPv6 Packet Format:

1. Fixed-Length Header: IPv6 packet headers are fixed at 40 bytes, unlike IPv4, where the
header length can vary.

2. Main Header Fields:

- Version (4 bits): Indicates the IP version, which is 6 for IPv6.
- Traffic Class (8 bits): Specifies the priority or class of service for the packet.
- Flow Label (20 bits): Used for flow identification and quality of service (QoS) handling.
- Payload Length (16 bits): Specifies the length of the payload (data) in the packet.
- Next Header (8 bits): Indicates the type of the next header following the IPv6 header.
- Hop Limit (8 bits): Similar to IPv4's Time-to-Live (TTL), specifies the maximum
number of hops the packet can traverse before being discarded.
- Source Address (128 bits): The IPv6 address of the packet's source.
- Destination Address (128 bits): The IPv6 address of the packet's destination.

3. Extension Headers: IPv6 supports extension headers that can be used to add additional
functionality to packets. Some common extension headers include:
- Hop-by-Hop Options: Carries optional information that must be examined by every
node along the packet's delivery path.
- Routing: Specifies intermediate routing nodes for the packet.
- Fragmentation: Used for packet fragmentation and reassembly.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

- Authentication Header (AH): Provides data integrity and authentication.

- Encapsulating Security Payload (ESP): Provides confidentiality, data integrity, and
authentication.

The simplified and streamlined design of IPv6 addressing and packet format improves
efficiency, enhances security, and supports the increasing demands of modern networking
environments.

TCP Services;
TCP (Transmission Control Protocol) provides several key services to applications and users
of the Internet. These services ensure reliable and ordered data delivery between
communicating hosts. Here are the main TCP services:

1. Reliable Data Delivery: TCP ensures that data transmitted from one host to another arrives
reliably and intact. It achieves this by using acknowledgments and retransmissions. When
data is sent, the sender waits for acknowledgment (ACK) from the receiver. If an ACK is
not received within a specified timeout period, the sender retransmits the data. This
mechanism ensures that data is delivered reliably, even if packets are lost or corrupted
during transmission.
2. Ordered Data Delivery: TCP guarantees that data sent by an application is received by the
recipient in the same order it was sent. It achieves this through sequence numbers assigned
to each segment of data. The receiver uses these sequence numbers to reorder segments if
they arrive out of order before delivering them to the application.
3. Flow Control: TCP implements flow control mechanisms to prevent the sender from
overwhelming the receiver with data. The receiver specifies its available buffer space
(receiver window) in TCP segments, and the sender adjusts its transmission rate based on
this information. This ensures that the sender does not send data faster than the receiver
can process it, preventing packet loss due to buffer overflow.
4. Congestion Control: TCP monitors network congestion and adjusts its transmission rate to
avoid network congestion collapse, where all network traffic comes to a halt. It uses
algorithms such as Slow Start, Congestion Avoidance, and Fast Recovery to dynamically
adjust the transmission rate based on network conditions. This helps ensure fair and
efficient use of network resources and prevents congestion-related packet loss.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

5. Multiplexing and Demultiplexing: TCP supports multiplexing and demultiplexing of data

streams. Multiplexing allows multiple TCP connections to share the same network
interface, while demultiplexing ensures that data received on the same interface is correctly
routed to the appropriate TCP connection based on port numbers.
6. Connection Establishment and Termination: TCP provides mechanisms for establishing
and terminating connections between communicating hosts. The TCP handshake process
is used to establish a connection, while connection termination is achieved using a three-
way handshake. These processes ensure that both the sender and receiver agree on the
parameters of the communication session and cleanly terminate the connection when data
exchange is complete.

Overall, TCP's services play a crucial role in enabling reliable, ordered, and efficient
communication between applications and hosts over the Internet, making it one of the most
widely used protocols in modern networking.

TCP Connection Management;

TCP connection management involves the process of establishing, maintaining, and
terminating connections between communicating hosts. TCP uses a set of procedures known
as handshakes to manage these connections. Here's an overview of TCP connection
management:

1. Connection Establishment:
a. SYN: The connection establishment process begins with the client sending a SYN
(Synchronize) segment to the server. This segment contains the client's initial sequence
number and specifies the client's desired maximum segment size (MSS).
b. SYN-ACK: Upon receiving the SYN segment, if the server is willing to establish a
connection, it responds with a SYN-ACK (Synchronize-Acknowledgment) segment.
This segment acknowledges the client's SYN and contains the server's initial sequence
number. Additionally, it specifies the server's desired maximum segment size.
c. ACK: Finally, the client acknowledges the server's SYN-ACK by sending an ACK
segment. This segment acknowledges the server's SYN and completes the three-way
handshake. Both the client and server are now synchronized and can begin exchanging
data.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

2. Data Transfer:
- Once the connection is established, both the client and server can send data to each other
using TCP segments. TCP ensures reliable and ordered delivery of data between the
communicating hosts.

3. Connection Termination:

1. Normal Termination (Four-Way Handshake):

- FIN: Either the client or server initiates the termination process by sending a FIN (Finish)
segment to indicate that it has finished sending data.
- ACK: Upon receiving the FIN segment, the other party acknowledges it with an ACK.
- FIN: The acknowledging party may also send its own FIN segment if it has finished
sending data.
- ACK: Finally, the original sender acknowledges the FIN, completing the termination
process.

2. Abnormal Termination:
- If a host abruptly terminates the connection without following the four-way handshake,
TCP's reliability mechanisms may trigger timeouts and retransmissions to ensure that all
data is delivered or retransmitted if necessary.

Key Points:
- TCP connections are full-duplex, meaning data can be transmitted simultaneously in both
directions.
- Each connection is uniquely identified by a combination of source and destination IP
addresses and port numbers.
- TCP connection management ensures reliable and orderly communication between hosts
while providing mechanisms for establishing, maintaining, and terminating connections.

Overall, TCP's connection management mechanisms play a crucial role in facilitating reliable
communication between applications and hosts over the Internet.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

Remote Procedure Call;

Remote Procedure Call (RPC) is a protocol that allows a computer program to execute code or
procedures on another computer or server over a network. RPC enables communication
between distributed systems, allowing a client program to invoke procedures or functions on a
remote server as if they were local, abstracting away the underlying network details.

Here's how RPC typically works:

1. Client-Server Architecture: RPC follows a client-server architecture, where the client

program initiates a request to execute a procedure on the server, which processes the
request and sends back a response.
2. Procedure Invocation: The client program invokes a procedure or function call in a manner
similar to a local function call. However, instead of executing the procedure locally, the
RPC system intercepts the call and packages it into a message to be sent over the network
to the server.
3. Network Communication: The RPC system handles the details of network communication,
including marshalling (serialization) and sending the request message to the server using
a specific network protocol.
4. Server Execution: On the server side, the RPC system receives the request message,
unmarshals (deserializes) it to extract the procedure call parameters, and executes the
requested procedure or function.
5. Response Handling: After executing the procedure, the server generates a response
containing the return values (if any) and sends it back to the client over the network.
6. Client Response Processing: The client's RPC system receives the response message,
unmarshals it to extract the return values, and delivers them to the client program, which
continues its execution as if the procedure had been executed locally.

Key Characteristics of RPC:

- Transparency: RPC provides transparency to the client, allowing it to invoke remote

procedures without needing to know the details of network communication or server
implementation.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

- Location Independence: RPC abstracts away the physical location of the server, enabling
clients to invoke procedures on remote servers regardless of their geographical location.
- Interoperability: RPC enables communication between heterogeneous systems, as long as
they adhere to the same RPC protocol.
- Performance Considerations: RPC systems may employ optimizations such as connection
pooling, caching, and asynchronous communication to improve performance and
efficiency.

RPC is commonly used in distributed systems, client-server architectures, and networked

applications to enable seamless communication between components running on different
machines. It provides a powerful abstraction for building scalable, modular, and distributed
applications. Popular RPC frameworks include gRPC, Apache Thrift, and Java RMI (Remote
Method Invocation).

IP Address Resolution- DNS;

IP address resolution, often referred to as Domain Name System (DNS) resolution, is the
process of translating human-readable domain names into numerical IP addresses. DNS is a
distributed system that serves as the backbone of the internet's naming hierarchy, providing a
way to map domain names to IP addresses and vice versa.

Here's an overview of how IP address resolution works using DNS:

1. DNS Query Initiation: When a user or application wants to access a website or service by
its domain name (e.g., [Link]), it initiates a DNS query to resolve the domain
name to its corresponding IP address.
2. Local DNS Cache Lookup: The DNS resolver (typically provided by the user's internet
service provider or configured on their network) first checks its local cache to see if it
already has the IP address for the requested domain name. If the IP address is found in the
cache and is still valid (not expired), the resolver returns the IP address to the requesting
application.
3. Recursive DNS Resolution: If the IP address is not found in the local cache, the resolver
initiates a recursive DNS resolution process. It sends a DNS query to a recursive DNS
resolver, which is responsible for resolving domain names on behalf of the requesting
client.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

4. Root DNS Servers: If the recursive resolver doesn't have the IP address in its cache, it
starts the resolution process by querying the root DNS servers. These servers maintain a
list of authoritative DNS servers for top-level domains (TLDs) such as .com, .org, .net, etc.
5. TLD DNS Servers: The root DNS servers respond with the IP addresses of the authoritative
DNS servers responsible for the requested TLD. The recursive resolver then queries the
TLD DNS servers to obtain the authoritative DNS server for the next level of the domain
hierarchy.
6. Authoritative DNS Servers: The recursive resolver continues to query authoritative DNS
servers until it reaches the server responsible for the specific domain name requested by
the client. The authoritative DNS server maintains the mapping between the domain name
and its corresponding IP address.
7. DNS Response: Once the authoritative DNS server receives the query for the domain
name, it responds to the recursive resolver with the IP address associated with the domain
name.
8. Caching and Response: The recursive resolver caches the IP address received from the
authoritative DNS server and returns it to the client that initiated the DNS query.
Subsequent requests for the same domain name can be served from the resolver's cache,
reducing the need for repeated DNS lookups.
9. Application Communication: With the IP address obtained through DNS resolution, the
client application can establish communication with the desired server or service using the
IP address for further data exchange.

Overall, DNS resolution is a critical process that enables users and applications to access
resources on the internet using human-readable domain names, abstracting away the
complexity of dealing with numerical IP addresses. It facilitates seamless communication and
access to services across the global network.

Domain Name Space;

The Domain Name Space, often referred to as the Domain Name System (DNS) hierarchy, is
a hierarchical naming system used to organize domain names on the internet. It provides a way
to map human-readable domain names to numerical IP addresses, facilitating the navigation
and access of resources on the internet. The Domain Name Space is organized into a tree-like
structure, with each level of the hierarchy representing a different level of domain specificity.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

Here's an overview of the components of the Domain Name Space:

1. Root Domain: At the top of the hierarchy is the root domain, represented by a single dot
("."). The root domain contains no labels and serves as the starting point for all DNS
queries. It is managed by a set of authoritative root DNS servers distributed worldwide.
2. Top-Level Domains (TLDs): Below the root domain are the top-level domains (TLDs).
TLDs represent the highest level of domain specificity and are divided into two main
categories:
- Generic TLDs (gTLDs): These are generic domain extensions such as .com, .org, .net,
.edu, .gov, etc.
- Country-Code TLDs (ccTLDs): These are country-code domain extensions assigned
to specific countries or territories, such as .us (United States), .uk (United Kingdom),
.de (Germany), .jp (Japan), etc.
3. Second-Level Domains (SLDs): Below the TLDs are the second-level domains. These
domains are directly beneath the TLDs and are typically used to identify specific
organizations, entities, or services. Examples include [Link], [Link],
[Link], etc.
4. Subdomains: Subdomains are further subdivisions of the domain hierarchy and are used
to create additional levels of organization within a domain. Subdomains are created by
adding labels to the left of an existing domain name, separated by dots. For example,
[Link], [Link], etc.
5. Hostnames: Hostnames represent individual devices or services within a domain. They are
typically assigned to specific IP addresses and are used to identify and access resources on
the internet. Hostnames can be associated with domain names at any level of the domain
hierarchy.

The Domain Name Space provides a structured and hierarchical framework for organizing
domain names on the internet, allowing for efficient and scalable management of resources.
DNS servers are responsible for maintaining and resolving domain names within the Domain
Name Space, ensuring that users and applications can access the resources they need using
human-readable domain names.

DNS Mapping;
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

DNS mapping refers to the process of associating domain names with their corresponding IP
addresses or other types of resource records. Domain Name System (DNS) mapping plays a
crucial role in internet communication, allowing users to access websites, services, and other
resources using human-readable domain names rather than numerical IP addresses.

Here's how DNS mapping works:

1. Domain Names: Domain names are hierarchical labels used to identify resources on the
internet. They consist of multiple parts separated by dots, with the rightmost part
representing the top-level domain (TLD), followed by the second-level domain (SLD), and
potentially additional subdomains.
2. Resource Records (RRs): DNS mapping is facilitated through resource records, which
contain information about a specific domain name. Each resource record type serves a
different purpose, but the most common types include:
- Address (A) Record: Maps a domain name to an IPv4 address.
- AAAA Record: Maps a domain name to an IPv6 address.
- Canonical Name (CNAME) Record: Provides an alias for a domain name, allowing it
to be resolved to another domain name.
- Mail Exchange (MX) Record: Specifies mail servers responsible for accepting email
messages on behalf of a domain.
- Name Server (NS) Record: Specifies authoritative DNS servers for a domain.
3. DNS Servers: DNS mapping information is stored and distributed across a global network
of DNS servers. These servers are organized into a hierarchical structure and are
responsible for resolving domain names to IP addresses.
4. Resolver: When a user or application initiates a DNS query to resolve a domain name, it
sends the query to a DNS resolver, typically provided by the user's internet service provider
(ISP) or configured on their network.
5. Recursive Resolution: The resolver performs a recursive DNS resolution process, starting
with root DNS servers and querying authoritative DNS servers until it obtains the IP
address associated with the requested domain name.
6. Caching: To improve performance and reduce the load on DNS infrastructure, DNS
resolvers cache the results of DNS queries for a certain period. Cached information can be
used to quickly respond to subsequent DNS queries for the same domain name.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

7. TTL (Time-to-Live): Each resource record in DNS includes a TTL value, which specifies
how long the record can be cached by DNS resolvers. After the TTL expires, the resolver
must discard the cached record and perform a new DNS query to refresh the mapping.

By mapping domain names to IP addresses and other resource records, DNS enables users to
access websites, services, and other resources using easy-to-remember domain names,
abstracting away the complexity of numerical IP addresses. DNS mapping forms the backbone
of internet communication and is essential for the functioning of the modern internet.

Recursive and Iterative Resolution;

Recursive and iterative resolution are two methods used in the Domain Name System (DNS)
to resolve domain names to IP addresses or other resource records. These methods differ in
how they handle DNS queries and interactions between DNS servers. Here's an explanation of
each:

Recursive Resolution:
1. Client-initiated: In recursive resolution, the DNS client (typically a resolver) delegates the
entire resolution process to the DNS server it queries.
2. Full Resolution: The DNS server receiving the query performs the entire resolution process
on behalf of the client, starting from the root DNS servers and querying authoritative DNS
servers until it obtains the requested information.
3. Responsibility: The recursive DNS server is responsible for fetching the necessary
information and providing the final result to the client. The client does not need to perform
any additional queries or steps.
4. Synchronous: The resolution process is synchronous, meaning the client waits for the
recursive DNS server to complete the resolution before receiving a response.

Iterative Resolution:
1. Server-initiated: In iterative resolution, the DNS server receiving the query provides the
best information it has available at the time and delegates further resolution steps to the
querying client.
2. Partial Resolution: The DNS server receiving the query provides the client with the best
information it can obtain based on its cached data or available records. If the server does
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

not have the complete answer, it returns the best possible information along with a referral
to another DNS server.
3. Responsibility: The client is responsible for continuing the resolution process by querying
additional DNS servers based on the referrals provided by the initial server. The client may
need to perform multiple iterative queries until it obtains the final result.
4. Asynchronous: The resolution process is asynchronous, meaning the client can continue
querying other DNS servers while waiting for responses. It does not need to wait for each
DNS server to complete its resolution before querying the next one.

Comparison:
- Recursive resolution is typically used by DNS resolvers, such as those provided by ISPs
or configured on networks. These resolvers handle the entire resolution process on behalf
of clients.
- Iterative resolution is commonly used between DNS servers when resolving domain names
that are not cached locally. DNS servers provide referrals to other servers, allowing clients
to continue the resolution process iteratively.

In summary, recursive resolution delegates the entire resolution process to a DNS server, while
iterative resolution involves a series of partial resolutions with referrals between DNS servers
and clients. Both methods are essential components of the DNS resolution process, enabling
the translation of domain names to IP addresses on the internet.

Mapping Internet Addresses to Physical Addresses:

ARP;
Address Resolution Protocol (ARP) is a protocol used for mapping Internet Protocol (IP)
addresses to the physical hardware addresses, such as Media Access Control (MAC) addresses,
on a local network. ARP operates at the data link layer (Layer 2) of the OSI model and is
primarily used in Ethernet networks.

Here's how ARP works:

1. Address Resolution Request (ARP Request):
- When a device needs to send data to another device on the local network, it first checks
its ARP cache (a table that maps IP addresses to MAC addresses) to see if it already knows
the MAC address corresponding to the destination IP address.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

- If the MAC address is not found in the ARP cache, the device broadcasts an ARP request
packet onto the local network. The ARP request contains the IP address of the destination
device that the sender is trying to reach.
2. Address Resolution Reply (ARP Reply):
- Upon receiving the ARP request packet, all devices on the local network inspect the
destination IP address in the packet.
- The device with the matching IP address responds by sending an ARP reply packet
directly to the requester. The ARP reply packet contains the MAC address associated with
the IP address specified in the ARP request.
3. ARP Caching:
- Once the ARP reply is received, the sender updates its ARP cache with the newly learned
MAC address. This caching mechanism helps reduce ARP traffic on the network by
storing mappings temporarily.
- The ARP cache entries have a limited lifetime (time-to-live or TTL), after which they
expire and are removed from the cache. Periodically, ARP queries are sent to refresh the
cache entries.
4. Use Cases:
- ARP is commonly used when a device needs to communicate with another device on the
same local network but does not know the MAC address corresponding to the destination
IP address.
- It is also used in scenarios such as Ethernet-based network booting, where a device needs
to discover the MAC address of a remote host before initiating communication.
5. ARP Spoofing:
- ARP spoofing is a malicious technique where an attacker sends falsified ARP messages
onto the local network, typically with the aim of intercepting or redirecting network
traffic. This can lead to various security vulnerabilities and is commonly used in man-in-
the-middle (MITM) attacks.

Overall, ARP plays a critical role in local network communication by dynamically mapping IP
addresses to MAC addresses, enabling devices to communicate with each other on the same
network segment.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

RARP;
Mapping internet addresses to physical addresses is a fundamental aspect of network
communication, allowing devices to locate and communicate with each other on a network.
One method used for this purpose is Reverse Address Resolution Protocol (RARP).

RARP is a protocol used in some legacy networks, primarily Ethernet-based networks, to map
an Internet Protocol (IP) address to the corresponding Media Access Control (MAC) address.
In other words, RARP allows a device to determine its own MAC address based on its IP
address. This is the reverse of the more commonly used Address Resolution Protocol (ARP),
which maps MAC addresses to IP addresses.

In a typical RARP scenario, a network node broadcasts a RARP request packet containing its
own IP address and asks for the corresponding MAC address. A RARP server on the network,
typically located on a local subnet or network segment, receives the request and replies with
the MAC address associated with the provided IP address. Once the requesting node receives
the response, it can use the MAC address for further communication on the network.

While RARP served as a useful mechanism for address resolution in the early days of
networking, it has largely been replaced by more advanced protocols such as ARP and DHCP
(Dynamic Host Configuration Protocol). ARP, in particular, is widely used for resolving IP
addresses to MAC addresses in modern Ethernet networks. However, understanding RARP
remains important for historical context and legacy system support.

DHCP;
Mapping internet addresses to physical addresses is a critical aspect of network
communication, allowing devices to communicate with each other over Ethernet networks.
DHCP (Dynamic Host Configuration Protocol) plays a significant role in this process by
dynamically assigning IP addresses and other network configuration parameters to devices on
a network.

DHCP operates based on a client-server model, where DHCP servers manage and distribute IP
addresses, subnet masks, default gateways, DNS server addresses, and other configuration
parameters to DHCP clients. When a device connects to a network, it typically sends out a
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

DHCP discovery message to locate a DHCP server. The DHCP server responds with an offer
containing available network configuration information.

Once the client receives the offer, it sends a request to the DHCP server, indicating its
acceptance of the offered configuration parameters. The DHCP server then assigns the IP
address and other configuration settings to the client, completing the process.

By automating the assignment of IP addresses and network configuration parameters, DHCP

simplifies network administration and eliminates the need for manual configuration of
individual devices. This dynamic allocation of IP addresses ensures efficient use of available
address space and enables seamless connectivity for devices joining and leaving the network.

Overall, DHCP plays a crucial role in mapping internet addresses (IP addresses) to physical
addresses (MAC addresses) by dynamically assigning and managing network configuration
parameters for devices on Ethernet networks, facilitating efficient and scalable network
communication.

ICMP;
Mapping internet addresses to physical addresses is a fundamental aspect of network
communication, especially in Ethernet-based networks. In this process, the Internet Protocol
(IP) address of a device is translated into its corresponding physical address, typically a Media
Access Control (MAC) address. This mapping is necessary for data packets to be delivered
accurately within a local network segment.

One of the protocols used for this purpose is the Internet Control Message Protocol (ICMP),
which includes a specific message type known as the Address Resolution Protocol (ARP). ARP
is responsible for dynamically mapping IP addresses to MAC addresses within a local network.

When a device needs to communicate with another device on the same network segment and
knows the IP address but not the corresponding MAC address, it sends an ARP request
broadcast packet. This packet contains the IP address for which the device is seeking the MAC
address. All devices on the network segment receive this broadcast packet, but only the device
with the matching IP address responds with its MAC address using an ARP reply packet.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

Once the requesting device receives the ARP reply containing the MAC address, it caches this
mapping in its ARP table for future use. Subsequent communications to that IP address can
then be directed using the MAC address without needing to repeat the ARP process.

ICMP plays a vital role in network troubleshooting and diagnostics by providing tools such as
the ping command. Ping uses ICMP echo request and echo reply messages to verify network
connectivity between devices by sending test packets and receiving responses. This
functionality helps network administrators identify connectivity issues and measure network
performance.

In summary, ICMP, particularly through the Address Resolution Protocol (ARP), facilitates the
mapping of IP addresses to MAC addresses, enabling efficient and accurate data transmission
within local network segments. Additionally, ICMP provides essential tools like ping for
network troubleshooting and diagnostics, enhancing the reliability and performance of network
communication.

IGMP;
Mapping internet addresses to physical addresses is a crucial aspect of networking, especially
in the context of Ethernet-based networks. This process involves translating the IP addresses
used by devices on the internet into their corresponding physical MAC (Media Access Control)
addresses used by network interfaces at the data link layer.

In Ethernet networks, devices communicate using MAC addresses, which are unique identifiers
assigned to network interfaces. When a device needs to communicate with another device on
the same network, it uses ARP (Address Resolution Protocol) to map the destination IP address
to the corresponding MAC address. ARP allows devices to dynamically discover the MAC
addresses associated with IP addresses within their local subnet.

However, in scenarios where devices need to communicate across different networks, such as
in multicast or broadcast communication, another protocol called IGMP (Internet Group
Management Protocol) comes into play. IGMP is used to manage multicast group membership
within a network. It enables hosts to inform routers about their interest in receiving multicast
traffic for specific multicast groups.
INTERNET TECHNOLOGY AND MANAGEMENT BCA-6TH

IGMP operates between hosts and routers, allowing hosts to join and leave multicast groups
dynamically. When a host wants to receive multicast traffic for a particular group, it sends an
IGMP membership report message to its local router, indicating its interest in that group. The
router then uses this information to forward multicast traffic only to those networks where there
are interested receivers, optimizing network bandwidth usage.

In summary, while ARP handles the mapping of IP addresses to MAC addresses for unicast
communication within the same network, IGMP facilitates the management of multicast group
membership, ensuring efficient distribution of multicast traffic across networks. Together, ARP
and IGMP play vital roles in enabling communication in Ethernet-based networks, both for
unicast and multicast traffic.