267 TCP/IP Unix 1 Local Area Network LAN Mbps 11-2 IEEE 1 Casting the Net: From ARPANET to INTERNET and Beyond... Peter H. Salus Addis

Size: px

Start display at page:

Download "267 TCP/IP Unix 1 Local Area Network LAN Mbps 11-2 IEEE 1 Casting the Net: From ARPANET to INTERNET and Beyond... Peter H. Salus Addis"

示郗
5 years ago
Views:

1 267 TCP/IP Unix 1 Local Area Network LAN Mbps 11-2 IEEE 1 Casting the Net: From ARPANET to INTERNET and Beyond...Peter H. Salus Addison-Wesley

2 PC Base-T Base-T Wide Area Network WAN LAN WAN Kbps Gbps WAN 2 WAN 2 Virtual Private Network VPN WAN VPN Internet VPN VPN

3 269 TCP/IP 249 Enterprise Network Metropolitan Network MAN LAN WAN LAN WAN LAN Internet ARPA ARPANET Department of Defense's Advanced Research Projects Agency ARPA DARPA ARPA NSFNET National Science Foundation NSF NSFNET Internet ARPA Internet Internet IP 3 FTP Internet ARPA Internet Internet network weaving connection laundering 3 IP Internet Protocol

4 Unix Unix IP Internet Protocol Internet Unix Unix telnet ssh ftp scp NFS http gopher postfix qmail sendmail finger whois ph LDAP ntpdate ntpd Remote Procedure Call RPC IP IP Internet 4

5 271 TCP/IP 251 IPv Internet IPv4 IPv5 IPv6 IPv6 Internet IPv6 IPv4 Internet Internet datagram package head 11-3 Internet packet-switching network IHL IP IP IP Vint Cerf ARPA IP

6 IP LAN Internet LAN 5 IP SLIP Serial Line Internet Protocol Internet CSLIP Compressed SLIP SLIP PPP Point-to-Point Protocol LAN IP IP Frame Relay ATM Asynchronous Transfer Mode, ATM SLIP PPP LAN 11-4 IP 10 6IP host 5 LAN IP Novell IPX Appletalk IP 6 IP NAT IPv6 IP

7 273 TCP/IP 253 LAN T1 LAN PC PC 11-5 IP Internet IPv4 32 Octet IP IP 7 32 IP 2 32 = Internet 2 32 IP IP Internet IP ii.jj.kk.ll ii jj kk ll IP IP Internet IP Internet AT&T 7 LAN

8 WorldCom Sprint Internet LAN Internet CIDR Classless InterDomain Routing IP A A N.a.b.c N a.b.c N 0 A Internet A MIT BBN Bolt Beranek and Newman B C subnetting B B N.M.a.b a.b N 10 B C C N.M.O.a a N Unix IP IP C D D N.M.O.a N 1110 E E N.M.O.P N 1111

9 275 TCP/IP 255 CIDR CIDR k 32-k CIDR IP bit / IP k bit / j CIDR k.j.l.(m...n) CIDR A /8B /16 Internet 8 Internet Internet IP Internet 8

10 Internet 32 IPv4 LAN PPP IP 9 Internet IP IP IP IP IP - 10 tock.cerias.purdue.edu RFC 1122 RFC1 123 tock cerias.purdue.edu cerias.purdue.edu CERIAS Purdue whitehouse.gov next.cambridge.ma.us 9 10 _ IP RFC

11 278 TCP/IP 257 jade.tufts.edu IP /etc/hosts Unix /etc/hosts Internet LAN IP /etc/hosts # /etc/hosts # server art science sci engineering eng server engineering science sci Internet Internet DNS Name Service Internet 11 ICMP Internet Control Message Protocol Internet IP TCP Transmission Control Protocol 11 Internet IP VPN

12 UDP User Datagram Protocol 12 best-effort IGMP Internet Group Management Protocol Internet Internet MBONE IGMP MBONE ICMP ICMP Internet ping ICMP Echo ICMP Echo ICMP Echo Reply ICMP ICMP Destination Unreachable ICMP ICMP TCP/IP Internet 11-1 ICMP ICMP 0 Echo Reply Echo ping 3 Destination Unreachable Echo ping 9 12 UDP Unreliable Datagram Protocol best-effort UDP

13 280 TCP/IP ICMP ICMP ICMP ICMP ICMP ICMP ICMP TCP TCP TCP TCP 16 TCP 13 HTTP 80 SMTP 25 TCP TCP IP Unix root 1024 root

14 TCP TCP TCP TCP TCP Internet IPv IP TCP IP TCP 11-6 ssh TCP Internet 14

15 282 TCP/IP TPC SYN ACK TCP SYN ACK SYN ACK SYN TCP three-way handshake ACK A B ACK SYN ( = x) SYN, ACK ( =y) ACK ACK ACK ACK ACK ACK 11-7 TCP/IP TCP Internet TCP HTTP X Window TCP 11-2 Unix TCP /etc/services Unix Unix Unix 15

16 TCP TCP 7 echo echo a 9 discard 13 daytime 19 chargen a 21 ftp FTP b 22 ssh shell 23 telnet b 25 smtp c 37 time 42 nameserver TCP 43 whois NIC whois 53 domain DNS d 79 finger 80 http WWW b,c 110 pop3 3 POP3 b 111 sunrpc Sun RPC d 113 auth 119 nntp NNTPUsenet b,d 143 imap b 443 https SSL HTTP 512 exec Unix 513 login Unix rlogin b,d 514 shell Unix shell rsh b,d 515 printer d 1080 socks SOCKS c 2049 NFS TCP NFS NFS over TCP d 6000~6010 X X Window b,d

17 284 TCP/IP 263 a b Internet IPv4 c SMTP CGI Internet d IP UDP UDP UDP LAN UDP 100% UDP TCP UDP TCP 10 UDP Sun NFS 16NIS rwho talk UDP UDP UDP TCP UDP Jon Postel TCP TCP TCP UPD UDP ICMP TCP UDP UDP 16 Solaris 8 NFS over TCP NFS Unix NFS over TCP

18 UDP UDP 7 echo a 9 discard 13 daytime a 19 chargen a 37 time a 53 domain DNS c 69 tftp c Trivial File Transfer Protocol TFTP 111 sunrpc Sun RPC c 123 ntp Network Time Protocol NTP 161 snmp Simple Network Management Protocol SNMP b,c 512 biff Biff 513 who 514 syslog a 517 talk talk 518 ntalk talk 520 route c Routing Information Protocol RIP 533 netwall a 2049 NFS c a b Internet c IP IP / /

19 286 TCP/IP 265 Unix daemon ssh % ssh athens.com password for simsong@athens.com:no34pass Welcome to Athens.com. FreeBSD 4.7 % ssh athens.com ssh sshd sendmail 17 telnet TCP/IP telnet telnet 25 SMTP % telnet control.mil 25 Trying Connected to hq.control.mil. Escape character is '^]'. 220 hq.control.mil ESMTP Sendmail /8.11.6; Sun, 18 Aug :21: HELO kaos.org 250 hq.control.mil Hello kaos.org, pleased to meet you MAIL FROM:<agent86@control.mil> 250 <agent86>... Sender ok RCPT TO:<agent99@control.mil> 550 <agent99>... Recipient ok DATA 354 Enter mail, end with "." on a line by itself To: agent99 From: Max <agent86> Subject: tonight 99, I know I was supposed to take you out to dinner tonight, but I have been captured by KAOS agents, and they won't let me out until they finish torturing me. I hope you understand. Love, Max. 250 UAA01441 Message accepted for delivery quit 221 hq.control.mil closing connection Connection closed by foreign host. % 17 sendmail

20 Internet /etc/hosts Internet /etc/hosts Internet Domain Name Service DNS DNS IP girigiri.gbrmpa.gov.au au au gov.au gbrmpa.gov.au gbrmpa.gov.au girigiri.gbrmpa.gov.au 11-8 girigiri.gbrmpa.gov.au au.. girigiri.gbrmpa.gov.au gov.au au au nz sg DNS girigiri.gbrmpa.gov.au gbrmpa.gov.au girigiri.gbrmpa.gov.au girigiri.gbrmpa.gov.au gov.au gbrmpa.gov.au sa gov ips edu gbrmpa DNS 11-8 DNS DNS UDP TCP

21 287 TCP/IP 267 Unix DNS Unix DNS BIND 18 Internet ISC resolver resolver DNS gethostbyname() gethostbyaddr() DNS resolver /etc/resolv.conf IP resolv.conf girigiri girigiri. gbrmpa.gov.au named in.named named DNS named boot /etc/named.conf named named named-xfer named-xfer zone named-xfer named TCP DNS BIND O Reilly DNS and BIND Albitz Cricket Liu DNS NIS NIS+ Sun Yellow PagesNIS Sun's Network Information System Sun /etc/passwd /etc/hosts NIS 18 BIND Berkeley Internet Domain/Name Deamon binding

22 NIS+ NIS NIS+ NIS NIS NIS+ NetInfo Apple NetInfo NIS+ NetInfo NeXT NeXTSTEP Apple Mac OS X Apple NetInfo DCE DCE Distributed Computing Environment DNS LDAP LDAP SSL LDAP LDAP IP Internet Internet IP IP Internet telnet

23 289 TCP/IP 269 NFS 21 DOS DOS CPU DDOS DDOS IP Internet IP IP IP IP IP IP IP IP IP IP IP

24 IP IP IP BaseT 100BaseT FDDI 19 Gene Spafford

25 291 TCP/IP IP IP RF IP IP RF IP 20 FDDI Internet Internet VPN IPsec RFC 2401 IPsec IPsec 20 Internet

26 Kerberos telnet SSH Secure Shell SSH TCP/IP SSL TLS (b) WEP Wired Equivalent Privacy WEP WEP X Window 6000 TCP/IP X Window 30 X ping ping ICMP Echo ICMP Echo 21 21

27 293 TCP/IP A B Internet C 11-9 ICMP ICMP Echo SYN SYN TCP SYN SYN

28 TCP/IP TCP/IP SYN SYN Internet Windows Internet IP DNS Usernet DNS Usenet PGP

29 295 TCP/IP 275 DNS DNS DNS IP IP DNS IP Internet Berkeley Unix r rsh rlogin TCP IP DNS IP IP TCP IP 22 DNS DNS UDP DNS DNS DNS DNS IP DNS DNS DNS DNS DNS IP DNS DNS SMTP Internet 22 IP IP Internet IP IP Internet

30 SMTP SMTP SMTP SMTP Internet Internet 50% 90% SMTP 23 iapril Fools! Gene Spafford Chuq von Rospach Usenet Path:purdue!umd5!ames!mailrus!umix!uunet!seismo!sundc!pitstop!sun!moscvax!perdue!spaf From: (Gene Spafford) Newsgroups: news.announce.important Subject: Warning: April Fools Time again (forged messages on loose) Message-ID: Date: 1 Apr 88 00:00:00 GMT Expires: 1 May 88 00:00:00 GMT Followup-To: news.admin Organization: Dept. of Computer Sciences, Purdue Univ. Lines: 25 Approved: spaf@cs.purdue.edu Warning: April 1 is rapidly approaching, and with it comes a USENET tradition. On April Fools day comes a series of forged, tongue-in-cheek messages, either from non-existent sites or using the name of a Well Known USENET person. In general, these messages are harmless and meant as a joke, and people who respond to these messages without thinking, either by flaming or otherwise responding, generally end up looking rather silly when the forgery is exposed. So, for the next couple of weeks, if you see a message that seems completely out of line or is otherwise unusual, think twice before posting a followup or responding to it; it's very likely a forgery. 23 SMTP AUTH RFC 2554 SMTP SMTP

31 297 TCP/IP 277 There are a few ways of checking to see if a message is a forgery. These aren't foolproof, but since most forgery posters want people to figure it out, they will allow you to track down the vast majority of forgeries: * Russian computers. For historic reasons most forged messages have as part of their Path: a non-existent (we think!) russian computer, either kremvax or moscvax. Other possibilities are nsacyber or wobegon. Please note, however, that walldrug is a real site and isn't a forgery. * Posted dates. Almost invariably, the date of the posting is forged to be April 1. * Funky Message-ID. Subtle hints are often lodged into the Message-Id, as that field is more or less an unparsed text string and can contain random information. Common values include pi, the phone number of the red phone in the white house, and the name of the forger's parrot. * Subtle mispellings. Look for subtle misspellings of the host names in the Path: field when a message is forged in the name of a Big Name USENET person. This is done so that the person being forged actually gets a chance to see the message and wonder when he actually posted it. Forged messages, of course, are not to be condoned. But they happen, and it's important for people on the net not to over-react. They happen at this time every year, and the forger generally gets their kick from watching the novice users take the posting seriously and try to flame their tails off. If we can keep a level head and not react to these postings, they'll taper off rather quickly and we can return to the normal state of affairs: chaos. Thanks for your support. Gene Spafford, Spokeman, The Backbone Cabal. April 1 24 ident TCP/IP TCP/IP TCP IP IP 3 TCP/IP TCP/IP SMTP FTP 24 Spafford Thank you

32 Internet TCP/IP 5 fas.harvard.edu 5 fas.harvard.edu fas.harvard.edu TCP/IP ident identd TCP/IP /etc/passwd ident token ident identd ident identd Linux identd IRC ident Windows ident identd ident identd Unix Unix ident sendmail 8 tcpwrapper

33 299 TCP/IP 279 honeypots 25 Brad Spencer honeypot open relays fightrelayspam.homestead.com/files/antispam htm Internet honeypots TCP/IP Unix IP IP TCP/IP SNA IBM DECnet DEC Xerox XNS OSI 25 honeynets

34 ISO OSI X.509 TCP/IP NetBIOS Appletalk Novell Netware Internet a Packet exchangeipx Internet b TCP/IP NetBIOS NetBIOS IP NetBIOS IPX PC Unix TCP/IP NetBIOS Windows a Novell Internet Novell Internet b RFC 1234 IP IPX

9 Internet 10 Internet

1 2 3 4 5 6 Internet 7 8 9 Internet 10 Internet 11 12 1 1.1 1.2 1.3 1.4 1.5 1.6 1.1 1.1.1 20 50 20 60 ARPANET ARPANET Internet 20 70 ISO International Organization for Standardization TCP/IP 20 90 Internet