Networking exam 2 part 8

utility to send U D P messages to a random port on the destination node (concept is the same as tracert), uses error messages from routers to map nodes on a route.?

tracerrotue(Linux, UNIX, OS X, mac OS) (can be used for tcp or Icmp messages)

2 difference between tracert and traceroute commands?

tracert cammand probes sent from source are icmp echo requests, the reply from the destination node is an ICMP echo reply rather than ICMP port unreachable error message. (but they both can be used using a hos tname or IP address)

difference between packet sniffer and protocol analyzer?

level of interpretation and analysis the tool provides for the data captured from the network interface.

Displays T C P/I P statistics and details about T C P/I P components/connections on a host

netstat(can be used on linux as well)

Means something Exhibits characteristics of both distance vector and link state protocols?

Hybrid Protocol

A Windows utility that combines elements of both ping and tracert to provide deeper information about network issues along a route, Sends multiple pings to each hope along a route, then compiles information into a single report

Pathping(Linux has this called mtr or mtr tiny on unix)

The only current E G P and is known as the "protocol of the Internet" Can span multiple autonomous systems across the country The most complex of the routing protocols?

B G P (Border Gateway Protocol)

To stop a command while its running press?

CTRL + C

devices—A process used by routers to learn about all of the devices on their networks: On I P v 4 networks, neighbor discovery is managed by A R P with help from I C M P?

Discovering Neighbooring (Arp helps resolve conflict in ipv4 devices, flush arp table if there is insonsistent connectivity issues

A trace test might stop before reaching the destination for one of what three reasons?

The device the trace is attempting to reach is down It's too busy to process lower-priority messages such as U D P or I C M P It does not accept the U D P or I C M P transmissions being sent because a firewall blocks these types of messages (if your tyring to trace a route to a host behind a firewall, you can try using tcp in tracerroute and use -z for delays between probe reps, only works for traceroute though)

Information that can be obtained from the netstat command includes?

The port on which a T C P/I P service is running Which network connections are currently established for a client all active tcp/ip connections How many messages have been handled by a network interface since it was activated How many data errors have occurred on a particular network interface

how to do the trace utilities have trial and error approach?

Traceroute sends udp messages to random unused port on destination node and listens for icmp prot unreachble message, tracert sends icmp echo request to destination node and listens for icmp echo reply from that node( both of them limited ttl of repeated trial messages called probes and trigger routers along route to return info about route being trans versed..

employ a trial-and-error approach to discover the nodes at each hop from source to destination?

Tracert & Traceroute

Duplicate Mac Addresses?

Two devices on the same network with the same MAC address is a problem if they are on the same netowrk.(or may not be) MAC addresses can be impersonated A security risk called spoofing Happens most often when managing multiple virtual devices on a large network(but is usually rare) Most switches will detect the problem and produce helpful error messages Then it's a matter of tracking down which virtual devices have the same MAC address and update each device's configuration

When a router, switch, N I C, or other hardware goes down during hardware failure you shoulduse ?

(Use tracert or traceroute to track down malfunctioning routers and other devices on larger networks (icmp is low priority Get more accurate trace feedback on a questionable router by targeting a node on the other side of that router, rather than aiming for that router itself, use ping utitlities)

Special characteristics of BGP?

A path-vector routing protocol that - communicates via B G P-specific messages that travel between routers (and maintains dynamic path information beyond the devices neighboring routers - Used by edge and exterior routers on the internet -Determines the best paths based on many different factors -Can be configured to follow policies that might avoid a certain router or instruct a group of routers to prefer a particular route. - hybrid routing protocol Adaptablility earned it its official classification of advanced distance vector routing protocol

utility uses I C M P echo requests to trace the path from one networked node to another, identifying all intermediate hops between the nodes?

Windows Tracert

I P v 6 devices use Neighbor Discovery Protocol (N D P) to?

automatically detect neighboring devices and automatically adjust when neighboring nodes fail or are removed (Eliminates the need for A R P and I C M P functions in I P v 6 networks)

A trace cannot detect ?

router configuration problems or predict variations of routes over a period of time(so its best used on a familiar network).

You must either use the sudo command or log in as root to access?

tcpdump

—A free, command-line packet sniffer that runs on Linux and other Unix O Ss Captures traffic that crosses a computer's network interface Output can be saved to a file that you can filter or play back?

tcpdump