Which Windows command shows current TCP/UDP port usage on the machine?

Study for the SANS560 GIAC Penetration Tester (GPEN) Test. Study with flashcards and multiple choice questions, each question has hints and explanations. Get ready for your exam!

Multiple Choice

Which Windows command shows current TCP/UDP port usage on the machine?

Explanation:
Netstat is the tool that reveals active network sockets, which is what “current TCP/UDP port usage” refers to. Using the numeric option keeps addresses and ports in numbers, and the all option includes both listening ports and active connections for both TCP and UDP. Netstat -na thus gives a complete, quick snapshot of what ports are open or in use on the machine and their states. If you ever need to know exactly which process owns a port, you can add the owning process flag (netstat -nao). The other commands don’t display port usage: arp -a shows the ARP table, ipconfig shows IP configuration, and tasklist lists processes.

Netstat is the tool that reveals active network sockets, which is what “current TCP/UDP port usage” refers to. Using the numeric option keeps addresses and ports in numbers, and the all option includes both listening ports and active connections for both TCP and UDP. Netstat -na thus gives a complete, quick snapshot of what ports are open or in use on the machine and their states. If you ever need to know exactly which process owns a port, you can add the owning process flag (netstat -nao). The other commands don’t display port usage: arp -a shows the ARP table, ipconfig shows IP configuration, and tasklist lists processes.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy