Scribd Logo
Upload

Welcome to Scribd!

  • 3 views

    Ex 1

    Uploaded by

    nithishkumarnc2005

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd

    Ex 1

    Uploaded by

    nithishkumarnc2005
    3 views5 pages

    Original Title

    Ex 1.docx

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    3 views5 pages

    Ex 1

    Uploaded by

    nithishkumarnc2005

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 5

    EX.NO:1 Learn to use commands like tcpdump, netstat, ifconfig, nslookup and traceroute.

    Capture ping and traceroute PDUs using a network protocol analyzer and examine.

    AIM: To Learn to use commands like tcpdump, netstat, ifconfig, nslookup and traceroute ping.

    PRE LAB DISCUSSION:

    Tcpdump:
    The tcpdump utility allows you to capture packets that flow within your network to assist in
    network troubleshooting. The following are several examples of using tcpdump with different options.
    Traffic is captured based on a specified filter.
    Netstat
    Netstat is a common command line TCP/IP networking available in most versions of
    Windows, Linux, UNIX and other operatingsystems.
    Netstat provides information and statistics about protocols in use and current TCP/IP network
    connections.
    ipconfig
    ipconfig is a console application designed to run from the Windows command prompt. This
    utility allows you to get the IP address information of a Windows computer.
    From the command prompt, type ipconfig to run the utility with default options. The output of the
    default command contains the IP address, network mask, and gateway for all physical and virtual
    network adapter.
    nslookup
    The nslookup (which stands for name server lookup) command is a network utility program used
    to obtain information about internet servers. It finds name server information for domains by querying
    the Domain Name System.
    Trace route:
    Traceroute is a network diagnostic tool used to track the pathway taken by a packet on an IP
    network from source to destination. Traceroute also records the time taken for each hop the packet
    makes during its route to the destination

    Commands:
    Tcpdump:
    Display traffic between 2 hosts:
    To display all traffic between two hosts (represented by variables host1 and host2): # tcpdump
    host host1 and host2
    Display traffic from a source or destination host only:
    To display traffic from only a source (src) or destination (dst)host:
    # tcpdump srchost
    # tcpdump dsthost
    Display traffic for a specific protocol
    Provide the protocol as an argument to display only traffic for a specific protocol, for example tcp,
    udp, icmp, arp
    # tcpdump protocol
    For example to display traffic only for the tcp traffic :
    # tcpdump tcp
    Filtering based on source or destination port
    To filter based on a source or destination port:
    # tcpdump src port ftp
    # tcpdump dst port http

    2. Netstat
    Netstat is a common command line TCP/IP networking available in most versions of
    Windows, Linux, UNIX and other operatingsystems.
    Netstat provides information and statistics about protocols in use and current TCP/IP network
    connections. The Windows help screen (analogous to a Linux or UNIX for netstat reads as follows:
    displays protocol statistics and current TCP/IP network connections.

    #netstat

    3. ipconfig

    In Windows, ipconfig is a console application designed to run from the Windows command
    prompt. This utility allows you to get the IP address information of a Windows computer.
    Using ipconfig
    From the command prompt, type ipconfig to run the utility with default options. The output of the
    default command contains the IP address, network mask, and gateway for all physical and virtual
    network adapter.

    #ipconfig
    4. nslookup
    The nslookup (which stands for name server lookup) command is a network utility program used
    to obtain information about internet servers. It finds name server information for domains by querying
    the Domain Name System.

    The nslookup command is a powerful tool for diagnosing DNS problems. You know you're
    experiencing a DNS problem when you can access a resource by specifying its IP address but not its
    DNS name.

    #nslookup

    5. Traceroute:

    Traceroute uses Internet Control Message Protocol (ICMP) echo packets with variable time to live
    (TTL) values. The response time of each hop is calculated. To guarantee accuracy, each hop is queried
    multiple times (usually three times) to better measure the response of that particular hop.
    Traceroute is a network diagnostic tool used to track the pathway taken by a packet on an IP network
    from source to destination. Traceroute also records the time taken for each hop the packet makes
    during its route to the destination. Traceroute uses Internet Control Message Protocol (ICMP) echo
    packets with variable time to live (TTL)values.

    The response time of each hop is calculated. To guarantee accuracy, each hop is queried
    multiple times (usually three times) to better measure the response of that particular hop. Traceroute
    sends packets with TTL values that gradually increase from packet to packet, starting with TTL value
    of one. Routers decrement TTL values of packets by one when routing and discard packets whoseTTL
    value has reached zero, returning the ICMP error message ICMP TimeExceeded.

    For the first set of packets, the first router receives the packet, decrements the TTL value and
    drops the packet because it then has TTL value zero. The router sends an ICMP Time Exceeded
    message back to the source. The next set of packets are given a TTL value of two, so the first router
    forwards the packets, but the second router drops them and replies with ICMP Time Exceeded.
    Proceeding in this way, traceroute uses the returned ICMP Time Exceeded messages to build a list of
    routers that packets traverse, until the destination is reached and returns an ICMP Echo
    Replymessage.

    With the tracert command shown above, we're asking tracert to show us the path from the local
    computer all the way to the network device with the hostname

    www.google.com.

    #tracertgoogle.com

    6. Ping:

    The ping command sends an echo request to a host available on the network. Using this command,
    you can check if your remote host is responding well or not. Tracking and isolating hardware and
    software problems. Determining the status of the network and various foreign hosts. The ping
    command is usually used as a simple way to verify that a computer can communicate over the network
    with another computer or network device. The ping command operates by sending Internet Control
    Message Protocol (ICMP) Echo Request messages to the destination computer and waiting for a
    response

    # ping172.16.6.2
    RESULT:
    Thus the various networks commands like tcpdump, netstat, ifconfig,
    nslookup and traceroute ping are executed successfully.

    You might also like