Chapter 17 - Supplement - Sheet1 Flashcards

1
Q

Protocol Analyzers

A

AKA sniffers / network monitors. Uysed to capture packets in their raw format as they cross the network.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Examples of protocol analyzers

A

Wireshare, OmniPeek

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Promiscuous Mode

A

NIC processes all packets that it sees

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Throughput Testers

A

Usually software based, work much like a protocol analyzer in that they measure traffic, but these measure throughput of that traffic (network speeds)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Connectivity Software

A

Designed to allow you to make a connection to a machine, its desktop, and perform any action you could perform while sitting in front of it.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Traceroute

A

(AKA trace) displays the path a packet takes to get to a remote device by using IP Packet TTL, time-outs, and ICMP error messages.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

ipconfig / ifconfig

A

Display the current configuration of TCP/IP on a given workstation. Includes IP, DNS, WINS config and default gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

OSes that use ipconfig

A

New Macs, Windows

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

ipconfig /all

A

ipconfig option that gives you hardware addresses, DHCP lease times, and DNS addresses

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

ipconfig /release & ipconfig /renew

A

Renews the IP address lease, or gets a new one if applicable.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

OSes that use ifconfig

A

Linxus, Unix, Mac

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

ifconfig

A

ipconfig equivalent. Short for interface configuration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

2 purposes to using the ping utility

A

To find out if a host is responding OR to find out if you can reach a host

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

ping -t

A

Pings the specified host until stopped

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

ping -a

A

Resolves addresses to hostnames

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

ping - n count

A

Specified the number of echo requests to send. Default is 4. (4 “Reply from…”)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

ping -w timeout

A

Set the timeout time in milliseconds. Default is 1000, which is 1 second

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

ARP

A

Address Resolutin Protocol. Used to translate TCP/IP addresses to MAC addresses using broadcasts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

ARP Table

A

Windows table that includes a list of TCP/IP addresses and their associated physical (MAC) addresses. Cached in memory to reduce the need to perform lookups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

2 Types of Entries in the ARP Table

A

Dynamic and Static

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Dynamic ARP table entries

A

Created whenever the Windows TCP/IP stack performs an ARP lookup but the MAC address isn’t found in the ARP table. When MAC address is finally resolved (via Broadcast) that info is added to the table.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Static ARP table entries

A

Manually added MAC addresses.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

arp -a

A

Dispays current ARP entries.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

arp -g

A

Dispays current ARP entries. Same as arp -a

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

arp -a -v

A

Verbose ARP entries - shows all invalid entires and regular arp -a entries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

arp -s [IP Address] [MAC Address]

A

Add a static entry into the ARP table

27
Q

Unix’s version of nslookup

A

dig

28
Q

nslookup

A

Allows you to query a name server and quickly find out which name resolves to which ip address

29
Q

Location of hosts table on Windows

A

C:\Windows\System32\drivers\etc\

30
Q

DOS Command to display the PC name

A

hostname

31
Q

mtr

A

AKA My traceroute. Computer program that c ombines the functions of the traceroute and pint utilities in a single network diagnostic tool.

32
Q

route

A

Command used to set network routing rules. Usually Windows takes care of this.

33
Q

netstat

A

Lists the inbound and outbound conections on your machine. Can also use it to view packet stats and errors

34
Q

netstat -e

A

Displays ethernet stats. Combined with -s, displays stats by protocol. Stats are for since the PC has been turned on.

35
Q

netstat -s

A

Displays ethernet stats by protocol. Stats are for since the PC has been turned on.

36
Q

netstat -r

A

Displays routing table. Same output as route print

37
Q

netstat -a

A

Displays all TCP/IP connections and UDP connections

38
Q

“bytes” in netstat -e tells you

A

Number of bytes sent or received at this PC’s NIC. Good for determining if a network connection is actually transmitting.

39
Q

“unicast packets” in netstat -e tells you

A

Number of packets sent from or received at this PC.

40
Q

“non-unicast packets” in netstat -e tells you

A

Number of packets that weren’t directly sent from a workstation to another. Example: Broadcast packets. Number of non-unicast packets should be smaller than unicase packets.

41
Q

“discards” in netstat -e tells you

A

Number of packets discarded by the NIC during transmission or reception b/c they weren’t assembled correctly

42
Q

“unknown protocols” in netstat -e tells you

A

Number of received packets that the Windows networking stat couldn’t interpret. Only in the received column. Certainly it wouldn’t send unknown protocols

43
Q

netstat -s -p

A

netstat -s but allows you to specify the protocol after the -p switch

44
Q

-n switch for netstat

A

Works with other switches. Displays the IP address instead of the hostname

45
Q

Command to start FTP session in DOS

A

ftp

46
Q

Command to open FTP server in FTP mode

A

open servername.domain.com

47
Q

Common to quit FTP from DOS

A

quit

48
Q

Commands to set file type in FTP mode in dos

A

ascii, binary

49
Q

Command to download file in FTP mode from DOS

A

get filename.exe

50
Q

Command to download multiple files in FTP mode in dos

A

mget

51
Q

Use mget to download all txt files

A

mget *.txt

52
Q

At FTP command prompt, how do you navigate to a location on the local machine to position your self to upload a file in that directory?

A

lcd c:\path\to\directory

53
Q

FTP command from DOS to upload a file

A

put local-filename.txt remote-name.txt

54
Q

Why is it not recommended that you use telnet

A

Not encrypted. Insecure.

55
Q

What command can you type from a command prompt to see the hops a packet takes
to get to a destination host?

A

Tracert

56
Q

What tool would you use to verify a complaint about a slow network?

A

Throughput tester

57
Q

You need your IP address, subnet mask, default gateway, and DNS information. What
command will you type from a Windows command prompt?

A

ipconfig /all

58
Q

You need to log in as a dumb terminal to a server or UNIX host and run programs.
What application will you use?

A

Telnet

59
Q

You need to add a route to your Windows server’s routing table. What command will
you use?

A

route

60
Q

You want to log in to a server and transfer files. What application will you use?

A

FTP

61
Q

You need to check your name-resolution information on your host. What command
will you type from the command prompt?

A

nslookup

62
Q

You want to use netstat, but you want to see only the IP address, not the names of the
hosts. Which modifier will you use?

A

-n

63
Q

You want the IP configuration on a UNIX host. What command will you type at the
command prompt?

A

ifconfig

64
Q

Which Windows command will show you the routing table of your host or server?

A

route print