Network Commands

The Network programs discussed on this page are:
NETSTAT.exe TCP/IP Network Statistics

Displays protocol statistics and current TCP/IP network connections.
NETSTAT [-a] [-e] [-n] [-s] [-p proto] [-r] [interval]
-a Displays all connections and listening ports.
-e Displays Ethernet statistics. This may be combined with the

-s option.
-n Displays addresses and port numbers in numerical form.
-p proto Shows connections for the protocol specified by proto; proto

may be TCP or UDP. If used with the -s option to display
per-protocol statistics, proto may be TCP, UDP, or IP.
-r Displays the routing table.
-s Displays per-protocol statistics. By default, statistics

are shown for TCP, UDP and IP; the -p option may be used
to specify a subset of the default.
interval Redisplays selected statistics, pausing interval seconds

between each display. Press CTRL+C to stop redisplaying
statistics. If omitted, netstat will print the current
configuration information once.
First, I would recommend that you always use the '-a' parameter so you can see UDP
'listening ports' as well (often used by trojans), and not just the active TCP connections;
then switch between using the '-a' and no parameters at all, to see the differences. When
you're offline, you normally shouldn't see any connection data! If you do see an OPEN PORT
NUMBER 'listening' for a connection (using the '-a' parameter), it may be that your
computer has been infected with a trojan! Click this link for a few more ideas on how you
can check to see if your computer is Trojan Free?
If you're running a server, such as the free XITAMI server, you might see something like
this ("My_Comp" is the name of my computer):
C:\WINDOWS>netstat -a
Active Connections
Proto Local Address Foreign Address State

TCP My_Comp:ftp localhost:0 LISTENING
TCP My_Comp:80 localhost:0 LISTENING
Or with the "-an" parameters:
C:\WINDOWS>netstat -an
Active Connections

TCP 0.0.0.0:21 0.0.0.0:0 LISTENING
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
By simply opening a browser connection to both the HTTP (port 80) and FTP (port 21)
servers (while still offline!), I saw the following:
C:\WINDOWS>netstat -a
Active Connections

TCP My_Comp:ftp localhost:0 LISTENING
TCP My_Comp:ftp localhost:1104 ESTABLISHED
TCP My_Comp:80 localhost:1111 TIME_WAIT
TCP My_Comp:1104 localhost:ftp ESTABLISHED
TCP My_Comp:1112 localhost:80 TIME_WAIT
UDP My_Comp:1102 *:*
This may be a bit confusing to some people, but remember I'm running BOTH the servers
and clients on the same machine in these examples. A little later (using both 'a' and 'n') I
got this:
Active Connections

TCP 0.0.0.0:21 0.0.0.0:0 LISTENING
TCP 0.0.0.0:80 0.0.0.0:0 LISTENING
TCP 0.0.0.0:1104 0.0.0.0:0 LISTENING
TCP 127.0.0.1:21 127.0.0.1:1104 FIN_WAIT_2
TCP 127.0.0.1:1102 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1103 0.0.0.0:0 LISTENING
TCP 127.0.0.1:1104 127.0.0.1:21 CLOSE_WAIT
TCP 127.0.0.1:1107 0.0.0.0:0 LISTENING
UDP 127.0.0.1:1102 *:*
UDP 127.0.0.1:1103 *:*
UDP 127.0.0.1:1107 *:*
After turning off my server, I ended up with this for a while:
Active Connections

TCP 127.0.0.1:80 127.0.0.1:1150 TIME_WAIT
TCP 127.0.0.1:80 127.0.0.1:1151 TIME_WAIT
PING.exe
Usage: ping [-t] [-a] [-n count] [-l size] [-f] [-i TTL] [-v TOS]
[-r count] [-s count] [[-j host-list] | [-k host-list]]
[-w timeout] destination-list
Options:
-t Ping the specifed host until interrupted.
-a Resolve addresses to hostnames.
-n count Number of echo requests to send.
-l size Send buffer size.
-f Set "Don't Fragment" flag in packet.
-i TTL Time To Live.
-v TOS Type Of Service.
-r count Record route for count hops.
-s count Timestamp for count hops.
-j host-list Loose source route along host-list.
-k host-list Strict source route along host-list.
-w timeout Timeout in milliseconds to wait for each reply.
There's one special IP number everyone should know about:
127.0.0.1 - localhost (or loopback).

This is used to connect ( through a browser, for example) to a Web server on your own
computer. (127 being reserved for this purpose.) You can use this IP number at all
times. It doesn't matter if you're connected to the Internet or not.
It's also called the loopback address because you can ping it and get returns even
when you're offline (not connected to any network). If you don't get any valid replies,
then there's a problem with the computer's Network settings. Here's a typical response
to the 'ping' command:
Here's another recent example using the name of my computer which I have tied to the IP
number 127.0.0.1 in my C:\WINDOWS\HOSTS file:
C:\WINDOWS>ping My_Comp
Pinging My_Comp [127.0.0.1] with 32 bytes of data:
Reply from 127.0.0.1: bytes=32 time=1ms TTL=128

Reply from 127.0.0.1: bytes=32 time<10ms TTL=128
Ping statistics for 127.0.0.1:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 1ms, Average = 0ms
TRACERT.exe Trace Route

Usage:
tracert [-d] [-h maximum_hops] [-j host-list] [-w timeout] target_name
Options:
-d Do not resolve addresses to hostnames.
-h maximum_hops Maximum number of hops to search for target.
-j host-list Loose source route along host-list.
-w timeout Wait timeout milliseconds for each reply.
Here's an example which traces the route from some ISP in Los Angeles to the main server
at UCLA in California ( note how two computers relatively close to each other may be routed
way round about! ):
C:\WINDOWS>tracert www.ucla.edu
Tracing route to www.ucla.edu [169.232.33.129]

over a maximum of 30 hops:
1 141 ms 132 ms 140 ms wla-ca-pm6.icg.net [165.236.29.85]

2 134 ms 131 ms 139 ms whv-ca-gw1.icg.net [165.236.29.65]
3 157 ms 132 ms 143 ms f3-1-0.lai-ca-gw1.icg.net [165.236.24.89]
4 194 ms 193 ms 188 ms a0-0-0-1.dai-tx-gw1.icg.net [163.179.235.61]
5 300 ms 211 ms 214 ms a1-1-0-1.ati-ga-gw1.icg.net [163.179.235.186]
6 236 ms 237 ms 247 ms a5-0-0-1.was-dc-gw1.icg.net [163.179.235.129]
7 258 ms 236 ms 244 ms 163.179.243.205
8 231 ms 233 ms 230 ms wdc-brdr-03.inet.qwest.net [205.171.4.153]
9 240 ms 230 ms 236 ms wdc-core-03.inet.qwest.net [205.171.24.69]
10 262 ms 264 ms 263 ms hou-core-01.inet.qwest.net [205.171.5.187]
11 281 ms 263 ms 259 ms hou-core-03.inet.qwest.net [205.171.23.9]
12 272 ms 229 ms 222 ms lax-core-02.inet.qwest.net [205.171.5.163]
13 230 ms 217 ms 230 ms lax-edge-07.inet.qwest.net [205.171.19.58]
14 228 ms 219 ms 220 ms 63-145-160-42.cust.qwest.net [63.145.160.42]
15 218 ms 222 ms 218 ms ISI-7507--ISI.POS.calren2.net [198.32.248.21]
16 232 ms 222 ms 214 ms UCLA--ISI.POS.calren2.net [198.32.248.30]
17 234 ms 226 ms 226 ms cbn5-gsr.calren2.ucla.edu [169.232.1.18]
18 245 ms 227 ms 235 ms www.ucla.edu [169.232.33.129]
Trace complete.
Note: Unless you're running a network, the following

commands won't be of much use to you...
Furthermore, if you're concerned about Security, my advice is
to NEVER use NetBios on a computer that connects to the
Internet.
NBTSTAT.exe Net Bios Stats
Displays protocol statistics and current TCP/IP connections using NBT
(NetBIOS over TCP/IP).
NBTSTAT [-a RemoteName] [-A IP address] [-c] [-n] [-r] [-R] [-s] [S]
[interval]
-a (adapter status) Lists the remote machine's name table given its
name.
-A (Adapter status) Lists the remote machine's name table given its
IP address.
-c (cache) Lists the remote name cache including the IP

addresses.
-n (names) Lists local NetBIOS names.
-r (resolved) Lists names resolved by broadcast and via WINS
-R (Reload) Purges and reloads the remote cache name table
-S (Sessions) Lists sessions table with the destination IP

addresses.
-s (sessions) Lists sessions table converting destination IP

addresses to host names via the hosts file.
RemoteName Remote host machine name.

IP address Dotted decimal representation of the IP address.
interval Redisplays selected statistics, pausing interval seconds

between each display. Press Ctrl+C to stop redisplaying
statistics.
ROUTE.exe
Manipulates network routing tables.
ROUTE [-f] [command [destination] [MASK netmask] [gateway]]
-f Clears the routing tables of all gateway entries. If this is

used in conjunction with one of the commands, the tables are
cleared prior to running the command.
command Specifies one of four commands

PRINT Prints a route
ADD Adds a route
DELETE Deletes a route
CHANGE Modifies an existing route
destination Specifies the host to send command.
MASK If the MASK keyword is present, the next parameter is

interpreted as the netmask parameter.
netmask If provided, specifies a sub-net mask value to be associated

with this route entry. If not specified, if defaults to
255.255.255.255.
gateway Specifies gateway.
All symbolic names used for destination or gateway are looked up in the
network and host name database files NETWORKS and HOSTS, respectively.
If the command is print or delete, wildcards may be used for the
destination and gateway, or the gateway argument may be omitted.
ARP.exe Address Resolution Protocol

ARP -s inet_addr eth_addr [if_addr]
ARP -d inet_addr [if_addr]
ARP -a [inet_addr] [-N if_addr]
-a Displays current ARP entries by interrogating the current

protocol data. If inet_addr is specified, the IP and Physical
addresses for only the specified computer are displayed. If
more than one network interface uses ARP, entries for each ARP
table are displayed.
-g (Same as -a)
inet_addr Specifies an internet address.
-N if_addr Displays the ARP entries for the network interface

specified by if_addr.
-d Deletes the host specified by inet_addr.
-s Adds the host and associates the Internet address inet_addr

with the Physical address eth_addr. The Physical address is
given as 6 hexadecimal bytes separated by hyphens. The entry
is permanent.
eth_addr Specifies a physical address.
if_addr If present, this specifies the Internet address of the

interface whose address translation table should be
modified. If not present, the first applicable interface
will be used.
The Windows 95/98/NT Command-Line
(Console) " ftp " Client Program
[ Note: Although this program has a lot of shortcomings in comparison to either WS_FTP or
FTP Explorer which are both FREE and readily available 32-bit Windows programs, I
wanted to include the instructions for "ftp" for the sake of completeness and for those
who love playing around with the Command Line. And in some cases, it can be much
easier to query an FTP server for information using this program! For example, it can
be called from a batch file without the need for any interactive responses! ]
If you type the letters ftp at a DOS-Window (Command Line) prompt, like this:
C:\WINDOWS>ftp you will be placed into an interactive program with its own prompt:
ftp>
Entering a question mark (?) or the word "help" will output a list of commands on your screen
like this:
ftp> ?
Commands may be abbreviated. Commands are:
! delete literal prompt send

? debug ls put status
append dir mdelete pwd trace
ascii disconnect mdir quit type
bell get mget quote user
binary glob mkdir recv verbose
bye hash mls remotehelp
cd help mput rename
close lcd open rmdir
The ftp program in Windows 95 breaks the general rule of how you obtain help information
directly from the command line. In most cases, you'd type the name followed by a space, a
forward slash(/) and a question mark(?) to get it. But ftp requires a dash(-) and an (h)
instead:
C:\WINDOWS>ftp -h
Transfers files to and from a computer running an FTP server service

(sometimes called a daemon). Ftp can be used interactively.
FTP [-v] [-d] [-i] [-n] [-g] [-s:filename] [host]
-v Suppresses display of remote server responses.

-n Suppresses auto-login upon initial connection.
-i Turns off interactive prompting during multiple file
transfers.
-d Enables debugging.
-g Disables filename globbing (see GLOB command).
-s:filename Specifies a text file containing FTP commands; the
commands will automatically run after FTP starts.
host Specifies the host name or IP address of the remote
host to connect to.
These commands show that you can run ftp "in the background" as it's called without ever
having to interact with the program yourself. For now, let's use the program interactively to
figure out what the commands actually do:
The first thing you need to be aware of is that all the commands within ftp are case-sensitive.
Commands to your own ftp program (those listed above) use only lower-case characters.
For example, entering "HELP" at the ftp prompt, outputs this on your screen: ?Invalid
command
Here's the list of commands and a brief explanation of each one taken directly from the ftp
helps within the program (and a few comments of my own):
? print local help information
help print local help information -- both do the same thing.
bell [toggle] beep when command completed

debug toggle debugging mode -- presents extra information about
the data passed between the connected computers.
glob toggle metacharacter expansion of local file names
hash toggle printing `#' for each buffer transferred
trace toggle packet tracing
verbose toggle verbose mode
status show current status
open connect to remote tftp -- you'll be asked for the URL if

you don't supply it.
user send new user information
remotehelp get help from remote server ==> Note: Becuase most of the
commands have critical timing requirements (such as the
PORT command), it's best to leave the handling of these
to the ftp program itself. However, I'd encourage you to
try the commands which do not involve the transfer of
files, such as STATS or STAT (depends upon the particular
server) or SYST, etc., so you can get more info about the
remote server you are interacting with. You will find two
examples of this instruction below; a * is usually placed
next to commands that are not active on the server.
literal send arbitrary ftp command

quote send arbitrary ftp command -- both do the same thing.
! escape to the shell -- You can carry out DOS commands on

your computer while still connected to a remote, then use
the "exit" command to return to your FTP session!
ascii set ascii transfer type

binary set binary transfer type
type set file transfer type
prompt force interactive prompting on multiple commands
Directory Commands:
pwd [display] working directory [from] remote machine
cd change remote working directory

lcd change local working directory
dir list contents of remote directory -- Use this command to

display attibutes, sizes, dates and times of files.
ls nlist contents of remote directory -- lists filenames only.
mdir list contents of multiple remote directories

mls nlist contents of multiple remote directories
mkdir make directory on the remote machine

rmdir remove directory on the remote machine
File Commands:
recv receive file
get receive file
mget get multiple files
send send one file

put send one file
mput send multiple files
append append to a file
rename rename file
delete delete remote file

mdelete delete multiple files
Ending a Session:
close terminate ftp session
disconnect terminate ftp session
bye terminate ftp session and exit
quit terminate ftp session and exit
Some Real FTP Server Examples:

Normally one would connect to a remote server by entering its URL on the same line as the
ftp command itself (this way you can skip having to use the 'open' command). Our first
fragment starts out this way ( I just thought you might like to see the header from
Microsoft's FTP server):
C:\WINDOWS>ftp ftp.microsoft.com
Connected to ftp.microsoft.com.
220 CPMSFTFTPA04 Microsoft FTP Service (Version 5.0).
User (ftp.microsoft.com:(none)): anonymous
331 Anonymous access allowed, send identity (e-mail name) as password.
Password: [ Note: Passwords are always hidden from view. ]
230-This is FTP.MICROSOFT.COM. Please see the dirmap.txt file for more
information.
230 Anonymous user logged in.
This next example is longer and contains a number of commands in action:
C:\WINDOWS>ftp ftp.simtel.net
Connected to ftp.simtel.net.
220 ftphost.simtel.net FTP server (Version wu-2.5.0(1) Wed Jun 23
00:02:55 EDT 1999) ready.
User (ftp.simtel.net:(none)): anonymous
331 Guest login ok, send your complete e-mail address as password.
Password:
230- Welcome to FTPHost.Simtel.Net,
230- the Simtel.Net primary mirror site,
230- hosted through the courtesy of pair Networks.
230-
230-You are user 190 of 300 simultaneous users allowed. Access is
230-allowed at any time. If you have any unusual problems, please
230-report them via e-mail to support@Simtel.Net
230-
230-The Simtel.Net files are located in the /pub/simtelnet directory.
230-
230-Simtel.Net is also on the Web - http://www.simtel.net/simtel.net/
230-
230 Guest login ok, access restrictions apply.
ftp> remotehelp
214-The following commands are recognized (*'s are unimplemented).
USER PORT STOR MSAM* RNTO NLST MKD CDUP
PASS PASV APPE MRSQ* ABOR SITE XMKD XCUP
ACCT* TYPE MLFL* MRCP* DELE SYST RMD STOU
SMNT* STRU MAIL* ALLO CWD STAT XRMD SIZE
REIN* MODE MSND* REST XCWD HELP PWD MDTM
QUIT RETR MSOM* RNFR LIST NOOP XPWD
214 Direct comments to support@Simtel.Net.
ftp> quote SYST
215 UNIX Type: L8 Version: BSD-199506
ftp> quote STAT
211-ftphost.simtel.net FTP server status:
Version wu-2.5.0(1) Wed Jun 23 00:02:55 EDT 1999
Connected to 63.209.86.71
Logged in anonymously
TYPE: ASCII, FORM: Nonprint; STRUcture: File; transfer MODE: Stream
No data connection
0 data bytes received in 0 files
0 data bytes transmitted in 0 files
0 data bytes total in 0 files
63 traffic bytes received in 0 transfers
1613 traffic bytes transmitted in 0 transfers
1726 traffic bytes total in 0 transfers
211 End of status
ftp> ls
200 PORT command successful.
150 Opening ASCII mode data connection for file list.
pub
dsk3
dsk4
HEADER
dsk1
dsk2
bin
etc
.message
226 Transfer complete.
57 bytes received in 3.24 seconds (0.02 Kbytes/sec)
ftp> dir
150 Opening ASCII mode data connection for /bin/ls.
total 18
-rw-r--r-- 1 root wheel 450 Jun 25 1999 .message
-rw-r--r-- 1 root wheel 423 Dec 8 1998 HEADER
d--x--x--x 2 root operator 512 Dec 15 1996 bin
drwxr-xr-x 3 root wheel 512 Dec 5 1998 dsk1
d--x--x--x 2 root operator 512 Jun 25 1999 etc
drwxr-xr-x 3 root wheel 512 Dec 5 1998 pub
ftp> debug
Debugging On.
ftp> status
Connected to ftp.simtel.net.
Type: ascii; Verbose: On; Bell: Off; Prompting: On; Globbing: On
Debugging: On; Hash mark printing: Off
ftp> dir
---> PORT 63,209,86,71,11,220
---> LIST
total 18
-rw-r--r-- 1 root wheel 450 Jun 25 1999 .message
-rw-r--r-- 1 root wheel 423 Dec 8 1998 HEADER
d--x--x--x 2 root operator 512 Dec 15 1996 bin
d--x--x--x 2 root operator 512 Jun 25 1999 etc
drwxr-xr-x 3 root wheel 512 Dec 5 1998 pub
[ I didn't get a chance to copy everything here! ]
ftp> quit
---> QUIT
221-You have transferred 0 bytes in 0 files.
221-Total traffic for this session was 5827 bytes in 5 transfers.
This last example is even longer and contains a file download among other things. This is the
Geocities server that all the webpage authors use, so it can get pretty slow at times:
C:\WINDOWS>ftp ftp.geocities.com
Connected to ftp.geocities.com.
220-Welcome to the Yahoo! GeoCities FTP server.
220-IMPORTANT: This service has changed!
220-Get all details at:
220-http://help.yahoo.com/help/us/geo/gftp/
220-
220-No anonymous logins accepted.
220-
220-Enter new Yahoo! GeoCities member name
220
User (ftp.geocities.com:(none)): User NAME
331-Enter your Yahoo! GeoCities member password
331
Password: [ PASSWORD is always HIDDEN ]
230-Taking inventory on your homestead
230-Inventory completed
230-You are using 60.3% of your homestead.
230 You have 5.950 MB of space available.
ftp> remotehelp
214-The following commands are recognized (*'s are unimplemented).
USER QUIT MODE REST CWD STAT RMD XCUP
PASS PORT RETR RNFR XCWD HELP XRMD SIZE
ACCT* PASV STOR RNTO LIST NOOP PWD MDTM
SMNT* TYPE APPE ABOR NLST MKD XPWD
REIN* STRU ALLO DELE SYST XMKD CDUP
214 Direct comments to ftp-bugs@ftp2.
ftp> quote SYST
215 UNIX Type: L8
ftp> pwd
257 "/Athens/6939" is current directory.
---------------------------------------------------------------
[ NOTE: IF THE CONNECTION IS HAVING PROBLEMS OR IS JUST VERY
BUSY, YOU MAY GET THE FOLLOWING REPLY AT ANY TIME...]
425 Can't build data connection: Connection refused.
[ THE DATA MAY ALSO COME DOWN DURING A LATER COMMAND INSTEAD! ]
---------------------------------------------------------------
ftp> status
Connected to ftp.geocities.com.
Type: ascii; Verbose: On; Bell: Off; Prompting: On; Globbing: On
Debugging: Off; Hash mark printing: Off
ftp> cd CHI
250 CWD command successful.
ftp> dir
total 400
-rwxrw-r-x 1 webmastr webmastr 69123 May 23 1997 CG11.JPG
-rwxrw-r-x 1 webmastr webmastr 80165 Jul 21 1998 STG3.jpg
-rwxrw-r-x 1 webmastr webmastr 23615 Aug 20 23:05 SonarDiplomaASW.gif
-rwxrw-r-x 1 webmastr webmastr 2912 Feb 17 1999 bootcamp.html
-rwxrw-r-x 1 webmastr webmastr 14636 Aug 20 23:05 sonrdip.gif
226-ASCII mode
ftp> cd ..
ftp> cd XYZ
ftp> dir
total 1392
-rwxrw-r-x 1 webmastr webmastr 60793 Jul 7 1998 ATEAM.jpg
-rwxrw-r-x 1 webmastr webmastr 102535 Jul 21 1998 CircuitBoard.jpg
-rwxrw-r-x 1 webmastr webmastr 36964 Jul 21 1998 Harness.jpg
-rwxrw-r-x 1 webmastr webmastr 38442 Jul 21 1998 MTestSta.jpg
-rwxrw-r-x 1 webmastr webmastr 43535 Jul 21 1998 Monitors.jpg
-rwxrw-r-x 1 webmastr webmastr 32785 Jul 21 1998 Projectr.jpg
-rwxrw-r-x 1 webmastr webmastr 13132 Jul 21 1998 PwrTranHS.jpg
-rwxrw-r-x 1 webmastr webmastr 58725 Jul 7 1998 TWOBILLS.jpg
-rwxrw-r-x 1 webmastr webmastr 120265 Jul 21 1998 Testing.jpg
-rwxrw-r-x 1 webmastr webmastr 13174 Jul 21 1998 TimeMagGlenCa.jpg
-rwxrw-r-x 1 webmastr webmastr 67882 Jul 7 1998 WORKSTAT.jpg
-rwxrw-r-x 1 webmastr webmastr 38044 Jul 21 1998 Wiring.jpg
-rwxrw-r-x 1 webmastr webmastr 981 Jun 22 1999 XYTRON.html
-rwxrw-r-x 1 webmastr webmastr 23031 Jul 21 1998 Xfrmrs.jpg
-rwxrw-r-x 1 webmastr webmastr 957 Nov 8 1998 starman.html
-rwxrw-r-x 1 webmastr webmastr 221 Jul 19 1998 tron.html
-rwxrw-r-x 1 webmastr webmastr 1385 Nov 8 1998 twobills.html
226-ASCII mode
ftp> get Testing.jpg
150 Opening ASCII mode data connection for Testing.jpg (120265 bytes).
######################################################
226-ASCII mode
ftp> debug
Debugging On.
ftp> cd ..
---> CWD ..
ftp> close
---> QUIT
221 Goodbye.
ftp> quit
C:\WINDOWS>

Network Commands

Caricato da

Informazioni sul documento

Descrizione originale:

Titolo originale

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

Network Commands

Caricato da

Copyright:

Formati disponibili

The Network programs discussed on this page are:

NETSTAT.exe TCP/IP Network Statistics

NETSTAT [-a] [-e] [-n] [-s] [-p proto] [-r] [interval]

-a Displays all connections and listening ports.

-e Displays Ethernet statistics. This may be combined with the

-n Displays addresses and port numbers in numerical form.

-p proto Shows connections for the protocol specified by proto; proto

-r Displays the routing table.

-s Displays per-protocol statistics. By default, statistics

interval Redisplays selected statistics, pausing interval seconds

Proto Local Address Foreign Address State

Proto Local Address Foreign Address State

Proto Local Address Foreign Address State

Proto Local Address Foreign Address State

Proto Local Address Foreign Address State

There's one special IP number everyone should know about:

127.0.0.1 - localhost (or loopback).

Pinging My_Comp [127.0.0.1] with 32 bytes of data:

Reply from 127.0.0.1: bytes=32 time=1ms TTL=128

Ping statistics for 127.0.0.1:

TRACERT.exe Trace Route

Tracing route to www.ucla.edu [169.232.33.129]

1 141 ms 132 ms 140 ms wla-ca-pm6.icg.net [165.236.29.85]

Note: Unless you're running a network, the following

-c (cache) Lists the remote name cache including the IP

-n (names) Lists local NetBIOS names.

-r (resolved) Lists names resolved by broadcast and via WINS

-R (Reload) Purges and reloads the remote cache name table

-S (Sessions) Lists sessions table with the destination IP

-s (sessions) Lists sessions table converting destination IP

RemoteName Remote host machine name.

interval Redisplays selected statistics, pausing interval seconds

ROUTE [-f] [command [destination] [MASK netmask] [gateway]]

-f Clears the routing tables of all gateway entries. If this is

command Specifies one of four commands

destination Specifies the host to send command.

MASK If the MASK keyword is present, the next parameter is

netmask If provided, specifies a sub-net mask value to be associated

gateway Specifies gateway.

ARP.exe Address Resolution Protocol

-a Displays current ARP entries by interrogating the current

inet_addr Specifies an internet address.

-N if_addr Displays the ARP entries for the network interface

-d Deletes the host specified by inet_addr.

-s Adds the host and associates the Internet address inet_addr

eth_addr Specifies a physical address.

if_addr If present, this specifies the Internet address of the

! delete literal prompt send

Transfers files to and from a computer running an FTP server service

FTP [-v] [-d] [-i] [-n] [-g] [-s:filename] [host]

-v Suppresses display of remote server responses.

bell [toggle] beep when command completed

status show current status

open connect to remote tftp -- you'll be asked for the URL if

literal send arbitrary ftp command

! escape to the shell -- You can carry out DOS commands on

ascii set ascii transfer type

prompt force interactive prompting on multiple commands

cd change remote working directory

dir list contents of remote directory -- Use this command to

mdir list contents of multiple remote directories

mkdir make directory on the remote machine