|
HAVE I HELPED? |
THE SWISS ARMY KNIFE OF IP NETWORKING
Explanation of netstat. Where should I begin..... Maybe Hal's explanation is better than I can give. Start here. I will try to simplify all this.... sometime.. Basically, use "netstat -nb" on a Windows machine, and "netstat -ap" on a UNIX/Linux/MAC machine. This will show listening ports and the processes/programs doing the listening.
http://www.linuxsecurity.com/docs/LDP/Security-Quickstart-Redhat-HOWTO/appendix.html#NETSTAT
This website article makes an extraordinary explanation of netstat and how to use it in removing Windows services. Terrific detail and explanation. Here is a Steve Gibson/Leo LaPorte discussion on netstat.
Here is another very nice explanation, windows specific and much shorter.
"Ipconfig" is another very useful little command you can use in NT/Win2K/XP. "Ipconfig /all" will give you all the network information for your NICSs. "Ipconfig /flushdns" will flush the local DNS cache [except for the static entries in the hosts file, and in the local DNS server]. This will sometimes help when a bogus address winds up in the DNS cache, preventing you from getting to the real site. "Ipconfig /displaydns" will actually display whatever is in the DNS cache on your machine.
The unix/Linux equivalent is "ifconfig -a" which lists all the network adapters in your machine and their network properties.