Hey everybody welcome to the next video.
So in this video we're going to be talking about the counterpart of TPP VIP which is UDP now UDP or
user data.
Protocol is considered the opposite of TCB IP in the regards that it doesn't care whether the packet
is lost mangled destroyed corrupted during transit.
The data's sent Data's received whatever comes in on the other end.
It's up to the application that's requesting it to deal with what the data looks like.
This also means that it can arrive in any order.
So you could get you could send a thousand packets and get the last nine hundred you know 10 500 milliseconds
later when you're not expecting it.
And it could be in any which way it already gets set.
It could send you can send it One two three four and it receives for three or four to three one.
So it's up to the application itself to decide to determine what order it needs to be in.
Now UDP is a connection lists or stateless protocol.
The reason for that is it's much faster.
It doesn't require a three way handshake.
It just sends data and you receive data now for all the red tamers.
The reason this is important is because when you start doing port scans on UDP if depending on how the
system has been configured it might respond over UDP to every port.
So it might look like everything is open.
So you need to be aware of that.
We're gonna have to go over that during the the end map or the port scanning video itself.
But I just want you to be aware of that trip and that that pitfall for UDP now like TGP it does a three
way handshake.
It affirms the connection beforehand and then it checks and acknowledges every packet UDP does not do
that.
And it's mainly used for like web email.
I'm sorry not email movie streaming because losing a few packets or even one hundred or so packets every
now and then when you're watching a video is something you might not even see so just keep that in mind.
UDP is also important for scanning purposes because there are services like DNS that only work over
or over UDP.
And then there's also exploits on software that run over UDP.
So it's just as important to scan as TCE.
So when you're going through an engagement don't just scan to scan UDP because you're going to you might
find something or that might give you more information on UDP than you would on TCB.