Ports Flashcards

1
Q

FTP

A

TCP
21 for control
20 for file transfer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

SSH

A

TCP
22

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

DNS

A

UDP
TCP 53 for zone transfer
UDP 53 for name resolution queries

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Kerberos

A

88 UDP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

POP3

A

110 TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

IMAP4

A

143 TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

POP Secure

A

995 TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Secure IMAP

A

993 TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

SMTP

A

25 TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

SMTP-over-TLS

A

587 TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

SNMPv3

A

161, 162 UDP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

LDAP

A

389 TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

LDAPS

A

636 TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

RDP

A

3389 TCP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

NTP

A

123 UDP

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

FTPS

A

989, 990 TCP

17
Q

SFTP

A

22 TCP

18
Q

IPSec

A

Uses internet key exchange (IKE) over port 500 UDP

19
Q

TFTP

A

69 UDP

20
Q

Ipconfig

A

Ipconfig /all
Ipconfig /flushdns, flush dns cache
Ipconfig /displaydns, show dns cache

21
Q

Ifconfig

A

Ifconfig -a, similar to ipconfig /all
Ifconfig eth0, show conf. eth0
Ifconfig eth0 promisc, enable promisc mode, process all traffic
Ifconfig eth0 allmulti, enable multicast mode, process all multicast traffic
Ifconfig eth0 -allmulti, disable multicase mode

22
Q

Ip (tool)

A

Ip link show, show interfaces
Ip link set eth0 up, enable eth0
Ip -s link, show network stats

23
Q

Netstat

A

Netstat -a, show all tcp udp ports being listened on
Netstat -r, show routing table
Netstat -e, show network stats
Netstat -s, show net stats for specific protocols
Netstat -n, show addresses and ports in numerical order
Netstat -p protocol, show stats on specific protocol
Netstat, show open TCP connections

You can combine options. E.g netstat -anp tcp

24
Q

Tracert

A

Windows
tracert google.com, show hops between system and Google
racert -d google.com, don’t resolve IP addresses to host names, makes command faster

25
Q

Traceroute

A

Linux
Traceroute -n google.com, don’t resolve IPs

26
Q

Pathping

A

Sends pings to hops on routes. Computes statistics depending on responses to pings.
Pathping -n google.com

If a hop has 100% packet loss. Chances are it is just blocking icmp. If it really is bad, then all other hops from that point on in the path must also be dropping 100%.

27
Q

Arp

A

Windows and Linux
Arp, help on windows, arp cache linux
Arp -a google.com, show arp cache entry for specified ip
Arp -a, show entire cache on windows

28
Q

Journalctl

A

Linux
Query linux system logging utility called journald.
Journalctl – since “1 hour ago”, show logs only in journals.
Journalctl –list-boots, show boot logs

29
Q

PTR Record

A

Pointer record
Opposite of an A record. For when client queries DNS with an IP.

30
Q

Smb

A

Tcp
139