Networking Basics
Ric Messier · 2017
The people who are attacking networks know at least enough to make their way around the Internet and local networks so forensics investigators need to know at least as much as the adversaries do in order to determine what they are doing. Even if the adversary is a piece of malware or someone internal to the company, they need to understand how it got to the system and interacted with the applications there. This chapter discusses what a protocol is. There are two conceptual ideas for thinking about the layers of network protocols. One of them is the open systems interconnect (OSI) model, which describes some layers in its stack. The other network protocol is the transmission control protocol/internet protocol (TCP/IP) suite, which evolved into a model after it had finally stabilized in its implementation. There are two supporting protocols in network communications. These are dynamic host configuration protocol (DHCP), and address resolution protocol (ARP).