Networking Tips

CMD (COMMAND PROMPT) Commands for networking

nbtstat - displays protocol statistics and current tcp/ip connections using NBT (Net BIOS over TCP/IP).

netstat- Displays active connections.
example:
C:\Documents and Settings\Administrator>netstat

Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    glassxp:1764           124.40.51.152:https    ESTABLISHED
  TCP    glassxp:1769           a96-17-157-47.deploy.akamaitechnologies.com:6465
7  TIME_WAIT
Note: We can also use 'netstat -a' or 'netstat -an' commands.Here listening state represent the port as open ports.And also,we can use the command 'netstat -ano' which will list all the available active connections including the process id.For finding port usage and see how it changes over time use the command 'netstt -nao 1'.


pathping-route tracing tool that combines features of ping and tracert commands with additional information that neither of those tools provides.

ping ip address-trace route,ping to get info about transfered and received packets.It also displays a ip for that domain.

example : ping 192.168.1.1

ping -a ip address-to find packets sent and received,round trip time(time b/w send msg and comes back).We can also use the command ping localhost to check our local machine connection.

nslookup - It is used to find out all the ip addresses associated with a single url (i.e domain).
syntax: nslookup google.com
The above command displays non-authoritative answers,which mean none of those address are in charge of the domain.So to find the exact authoritative address for the corresponding domain do as follows,

• type 'nslookup' (press enter)
• now type 'set querytype=soa' (press enter)
• mention the domain name (i.e google.com).

ipconfig-it list ip address,subnet mask,gateway for available network connections.
eg : ipconfig help or ipconfig/all.

Note : 'ipconfig' command is not supported by cisco routers, instead it uses the command 'show interface' to display the ip,subnetmask addresses for the connections.

arp -a-arp(address resolution protocol ) used to convert ip address into physical address (called DLC Address)such as ethernet address.

rarp-reverse address resolution protocol ip performs reverse operation of arp.

inetcpl.cpl-It will open internet property window .

tracert web address-trace ip details and more about mentioned web address.

example : tracert www.google.in

netsh.exe-used to assign network address to a computer.For detailed explanation refer the following article,

netsh command prompt
netsh.exe diag gui-It opens network diagnostics help and support window to scan the system for network connections.
netsh wlan show setting -This command shows wireless lan settings,which includes details about auto configuration logic state enabled or not for the wireless local area network connection.
netsh advfirewall - This command is used for 'firewall rule processing'.For more about firewall rule processing refer  http://technet.microsoft.com/en-us/library/dd364378(WS.10).aspx.


Route-Manipulate network routing tables.

Rasdial- Tells Connected to what network connections.

Rasphone-A window opens with message indicated as Choose network connection for the options hang up,new,cancel,properties.

Net View - A built-in microsoft command used to scan the network.
syntax:
NET VIEW
[\\computer name [/CACHE] | [/ALL] | /DOMAIN[:domain name ]]

wfs.exe -This command helps set up your computer to send and receive faxes,which mean user can send and receive faxed documents on their computer without using a fax machine.

mstsc - This command connects remote desktop with several usage.For more about this command use mstsc /?.

netcfg -This command is used to install TCP/IP,NetBIOS and microsoft client for windows pre-installation environment.Refer netcfg.exe command options and examples.

               w32time commands for windows 7

Below are the list of commands related to configuring windows time service settings.

• w32tm  [/? | /register | /unregister ].

where,

           register - to run as a service and add default configuration to the registry(i.e regedit).

           unregister - unregister service and remove all configuration information from the registry.

• w32tm /monitor [/domain:domain name].

where,

          domain- specifies which domain to monitor.If no domain name is given, or neither the domain nor computers option is specified,then the default domain is used.This option may be used more than once.

• w32tm /monitor [/computers:name[,name[,name...]]]

where,

          computers - monitors the given list of computers.Here,computer names are seperated by commas and with no spaces.If a name is prefixed with a '*',it is treated as an AD PDC.This option may be used more than once.

• w32tm /monitor [/threads:num] [/ipprotocol:4|6] [/nowarn].

where,

          threads - how many computers to analyze simultaneously.The default value is 3.Allowed range is 1-50.

          ipprotocol - specify the ip protocol to use.The default is to use whatever is available.

          nowarn - skip warning message.

• w32tm /ntte - Convert an NT system time, in <10^-7>s intervals from 0h 1-jan 1601 into a readable format.
• w32tm /ntpte   - Convert an NTP time,in <2^-32>s intervals from 0h 1-jan 1900, into a readable format.
• w32tm /resync [/computer:computer] [/nowait] [/rediscover][/soft] - Tell a computer that it should resynchronize its clock as soon as possible, throwing out all accumulated error statistics.

where,

          computer: computer- computer that should resync.If not specified,the local computer will resync.

          nowait - do not wait for the resync to occur;return immediately.Otherwise,wait for the resync to complete before returning.

          rediscover - redetect the network configuration and rediscover network sources,then resynchronize.

          soft - resync utilizing existing error statistics.Not useful,provided for compatibility.

• w32tm /stripchart /computer:target [/period:refresh] [/dataonly] [/samples:count] [/packetinfo] [/ipprotocol:<4|6>] - Display a strip chart of the offset between this computer and another computer.

where,

         computer:target - the computer to measure the offset against.

         period:refresh - the time between samples,in seconds.The default is 2s.

         dataonly - display only the data no graphics.

         samples:count- collect samples,then stop.If not specified then samples will be collected until cntrl +c is pressed.  

        packetinfo - print out NTP packet response message.

        ipprotocol - specify the ip protocol to use.The default is to use whatever is available.

• w32tm /config [/computer:target] [/update] [/manualpeerlist:peers] [/syncfromflags:source] [/LocalClockDispersion:seconds] [/reliable:YES|NO] [/largephaseoffset:milliseconds]

where,

         computer:target - adjust the configuration of .If not specified, then default is the local computer.

         update - notifies the time service that the configuration has changed,causing the changes to take effect.

         manualpeerlist:peers- sets the manual peer list to , which is a space-delimited list of DNS and or IP addresses.When specifying multiple peers,this switch must be enclosed in quotes.
         syncfromflags:source - sets what sources the NTP client should sync from. should be a comma seperated list of these keyword:
         MANUAL - sync from peers in the manual peer list.
         DOMH I ER - sync from an AD DC in the domain hierarchy.
         NO - syn from none.
         ALL - sync from both manual and domain peers.
        LocalClockDispersion:seconds - configures the accuracy of the internal clock that w32 time will assume when it can't acquire time from its configured sources.
        reliable:YES|NO - set whether this machine is a reliable time source.This setting is only meaningful on domain controllers.Here YES indicates machine as a reliable time service and NO indicates not a reliable time service.
        largephaseoffset:milliseconds - sets the time difference between local and network time which w32 time will consider a spike.
For more list of w32tm commands type w32tm /?.   

              

            Windows Cmd (Command prompt) List

w32tm - This command configure windows time service settings and it also helps to diagnose problems regarding time service.There is also several list of w32 time commands,each with its own purpose.

perfmon/report - This command is used to run the resource and performance monitor and displays system diagnostic reports. To open resource monitor type the commandperfmon/res.

runas - It enables any user signed with any account to access administrator privileges for any programs.It is also useful to create shortcut. For more about runas command windows7

TPM.msc - A TPM (trusted platform modules) is a microchip designed to provide basic security-related functions, primarily involving encryption keys. The TPM is usually installed on the motherboard of a computer and communicates with the rest of the system by using a hardware bus.This helps to set BitLocker Drive Encryption for hard disk drives.

Sxstrace.exe - By this command we can trace the log file.To know more about this command check Winsxs tracing utility

cipher.exe-This command is used for decrypting or not encrypting the available files and folders on the path.
Example: 
D:\>cipher.exe

Listing D:\
 New files added to this directory will not be encrypted.

sc config -  SC is a command line program used for communicating with the 'service control manager' and services.By this we can start,pause,and stop the services.
Example :
sc [command] [service name] ...
For more help type sc config/?
Note :It is also recommended to visit microsoft technet for more sc commands  
http://technet.microsoft.com/en-us/library/cc754599(WS.10).aspx

RECDISC.EXE-For creating system repair disc in windows 7.

DISKPART-To deal with hard disk partition drives etc.
NOTE :Type help (i.e DISKPART>help) to know more commands under diskpart.
Hide hardisk partition drive

gpedit.msc-It opens Local Group policy editor window,where we can perform increasing the speed of internet , task manager recovery if it is disabled by virus and also for enable cmdand regedit.

gpupdate : To update or refresh the computer or user policy then use the command 'gpupdate/force'.

sysdm.cpl-Displays system properties windows.

taskmgr.exe-opens task manager.

wscui.cpl-It opens security center window.

appwiz.cpl-Displays window for add or remove programs.

inetcpl.cpl-Displays internet properties windows.

eventvwr.msc-Displays event viewer window which includes about event information.

winver.exe- Displays windows os version and available physical memory.

color help-to change background colour of command prompt window (cmd).

dir drive name-folders in the specified drives are listed.

cd turbo c enterkey tc - to open turbo c language window.
cd..-to reduce the path.
example : < c: / documents and settings / administrator >cd..
               < c: / documents and settings >cd..
                < c: >         
Note : cd.. ( two dots must have to put)

net user-for findout user account and to change user account password.
example : net user account name *
               type a password for the user :
By this command we can activate or deactivate windows admin.Select the below to view how this is.
How to activate windows administrator account

net localgroup administrators -check the local group users. 

Systeminfo-It displays full details about system os,n/w cards,bios version,product model,product id,memory etc.

tasklist - list available programs,its process id and memory usage.To know about services involved in svchost.exe process then use the command tasklist/svc.

Recover-performs recovering files
syntax : RECOVER [driv:][path]filename

Defrag-Windows disk defragmenter for optimize the files for saving free space.

Rename-rename the file or folders.
syntax: rename [original name of the file] [name for renaming]

Chkdsk - It verifies files,indexes,security descriptors,usn journal and displays details about available disk space and used disk space.
Note:chkdsk /f-it scans hard disk thoroughly and correct logical errors.Its also possible that the process may free up some of the bunch of diskspace.

Shutdown : Use shutdown -s -t 20 -c "hi" command to shutdown your computer with respect to time.
where,
          s ->shutdown
          t ->time in seconds
          c ->comments
We can also shutdown remote computer by using cmd command.
Note: for cmd command list http://en.wikipedia.org/wiki/List_of_DOS_commands
powercfg -To set power plan and to control power options like sleep,hibernate etc the command options powercfg is used.This command also helps to solve battery and power efficiency problems.

mof comp : Mof compiler to handle mof files like wdac.mof.It is useful in data access in windows.

wmic : "Windows management instrumentation control".It includes global switch commands and aliases commands which are found to be very useful.It is one of the snap-insmaintained through or under microsoft management console (mmc).It includes networkingcommands as well.

net start vss : To check whether the volume shadow copy service is started or not.Here we can also use the command NET HELPMSG message# (i.e NET HELPMSG 2182)

wevtutil : This wevtutil command  enables user to deal with activities related to event logs (event viewer).

wusa.exe - wusa.exe command is used to run windows update standalone installer.

bcdedit - In earlier versions of windows boot.ini file,which stores information about installed operating systems has been replaced with a file namely Boot Configuration Data(BCD). BCD is more versatile than boot.ini and it can apply to computer platforms that use means other than BIOS to start the computer.If it is needed to make changes to BCD such as removing entries from the list of displayed operating systems then the command 'bcdedit' is used.It lists details about boot manager and loader installed on the computer.For more sub commands type bcdedit/?.

Windows search service - To start or stop the windows search service use "net start wsearch" or "net stop wsearch"  commands.

wbadmin - is an backup command line tool used to run one time backup,stop currently running backup,to lists items contained in a backup etc.For more type wbadmin /?
For more command line commands : http://technet.microsoft.com/en-us/library/bb490890.aspx.
Note : sdclt.exe command also opens the backup and restore window and notifies about the scheduled task(i.e scheduled backup).


dism.exe - This dism.exe command is used for enumerates,installs,uninstalls,configures and updates features and packages in windows image.


certutil.exe -This command is used for managing security certificates with several tasks including renewal of certificate,validating certificate,installing CA certificate etc.For more about the command and its syntax use certutil.exe/?
Note :Refer also http://technet.microsoft.com/en-us/library/cc772898(WS.10).aspx..