Tools of the Trade Flashcards
Which DNS tool resolves web addresses to an IP address and answers the question to ‘Is my DNS up’?
Ping
Which tool detects hosts that are connected to you?
netstat
Which tool traces the route of network connections?
tracert
Which tool resolves ethernet MAC address?
ARP (Address Resolution Protocol)
Which tool provides the IP address and ethernet tools in Windows?
ipconfig
What does ipconfig /all do?
find the MAC address
Which tool provides the IP address and ethernet tools in Linux?
ip
Which tool provides information on the DNS server for Windows?
nslookup
Which tool provides information on the DNS server for Linux?
Digg
Which tool opens and listens to ports and can be used as an aggressive tool for reconnaissance?
Netcat
Which tool is useful for hardware inventory and reconnaissance of your network and/or system?
Nmap
What is the GUI for nmap called?
Zenmap
What is any system that shouldn’t be on the network called?
Rogue system
What can be used to detect open ports, protocols, hardware, and rogue systems?
Network scans
What two functions does Protocol analyzers perform?
sniffing and analyzing the data
What does a sniffer do?
grabs all the data going in or out of a particular interface
What does a sniffer do with the data acquired?
saves to file or sends live feed into the protocol analyzer
What protocol analyzer tool allows us to filter the data by services and protocols?
Wireshark
What popular protocol analyzer can only be used on a Linux system?
TCP dump
What tool is used to administer and manage network devices from a single source?
Simple network management protocol (SNMP)
What is the SNMP program that is packaged within the network element?
Agent
In SNMP, what is the part of the network that requires some form of monitoring and management (i.e. routers, switches, workstations, etc)?
managed device
In SNMP, what is the separate entity (i.e. workstation) that is responsible for communicating with the SNMP agent implement network device?
SNMP manager
What are some of the key functions of a SNMP manager?
Queries agents, gets response from agents, set variables on the agents, acknowledges asynchronous events from agents
What is the software that runs on the SNMP manager?
Network Management Station (NMS)
What is the commonly shared database between the SNMP agent and the SNMP manager?
Management Information Base (MIB)
Which version of SNMP added basic encryption?
Version 2
What ports does SNMP use?
UDP 161 or TLS 10161
Log event data includes…
date, time, process/source, account, event number, event description
In dealing with logs, what event happens on a host even though it’s not on the network?
non-network events
In dealing with logs, what events deals with the communication between the host and something on the network?
network events
