Network Sorecery breaks down protocols by network, transport, and application layers. Network Sorcery also links to RFCs defining the protocols’ operation. The protocols are assigned EtherTypes, like 0x0806 for ARP, 0x0800 for IPv4 and 0x86DD for IPv6. Application layer protocols are also assigned one or more SCTP, TCP or UDP port numbers, like 23 for Telnet, 80 for HTTP, and so on. The resources are available in the book “Network Sorcery””]
Source: https://taosecurity.blogspot.com/2004/01/network-sorcery-protocol-reference.html

