Task1: Information gathering using Windows Command Line

Ping is a computer network administration software utility used to test the reachability of a host on an Internet Protocol (IP) network. It measures the round-trip time for messages sent from the originating host to a destination computer that are echoed back to the source.

nslookup is a network administration command-line tool available for many computer operating systems for querying the Domain Name System (DNS) to obtain domain name or IP address mapping or for any other specific DNS record.

traceroute is a computer network diagnostic tool for displaying the route (path) and measuring transit delays of packets across an Internet Protocol (IP) network.

Type ping in the command prompt and go through the various options meanings.

Option -f means:

Option -l means:

Option -i means:

Option -n means:

Find the IP adddress of http://www.certifiedethicalhacker.com using the ping command

IP@ =

Find the maximum frame size on the network using ping -f -l. Try various sizes starting from 1500.

Tried frame sizes: .

Maximum frame size =

Find out what happens when TTL (Time To Live) expires. Every frame on the network has TTL defined. If TTL reaches 0, the router discards the packet. This mechanism prevents the loss of packets. Use ping command with options -i and -n 1.

Tried TTL values: .

Number of hops to reach the website:

Confirm the result you found in step 4) using the traceroute command: tracert.

Result verified YES or NO: .

Use nslookup command to find the name and IP address of the default DNS server.

DNS Server name: .

DNS Server IP @: .

In the nslookup interactive mode, type set type=a, and press Enter. This commande configures nslookup to query for the IP@ of a given domain. Find the IP address of www.certifiedhacker.com by typping it in the window.

IP @:

What does Non-authoritative answer mean?:

Find out the domains authoritative DNS using the command set type=HINFO. To do so, you need first to change your local DNS server to Google Public DNS addresses: 8.8.8.8 and 8.8.4.4 (see figure).

Primary DNS:

Expire in : ..

Once done change back the DNS settingt to its previous value.