Essential skills for network workers

1. The most basic, the most commonly used, test the physical network

ping -t , the -t parameter is waiting for the user to break the test

2. Check DNS, IP, Mac, etc.


B.Win2000 or above: Ipconfig/all

C.NSLOOKUP: e.g. check the DNS of Hebei


Default Server:


>server changes the DNS to 41.2




Non-authoritative answer:



3. Network messenger

Net send Computer name/IP * (broadcast) Transmits the content, note that it cannot cross network segments

net stop messenger to stop the messenger service, you can also modify it in panel-services

net start messenger Start messenger service

4. detect the name of the other party’s computer, the group, domain and current user name (how the chase works)

ping -a IP -t , only the NetBios name is displayed

nbtstat -a is more complete

5. netstat -a shows all the ports currently open on your computer

netstat -s -e displays your network information in more detail, including TCP, UDP, ICMP and IP statistics, etc.

6. detect arp binding (dynamic and static) list, display all connected to my computer, display each other IP and MAC address

arp -a

7. On the proxy server side

Bundle IP and MAC addresses to solve IP theft in LAN!

ARP -s 00 -50-ff-6c-08-75

To unbind the IP and MAC addresses of the NIC.

arp -d NIC IP

8. Hide your computer on Network Neighborhood

net config server /hidden:yes

net config server /hidden:no is on

9. Several net commands

A. Show the list of current workgroup servers net view, when this command is used without options, it displays the list on the computers on the current domain or network.

For example: to see the shared resources on this IP

C:\>net view

Shared resources at

Resource Share Name Type Usage Comments


Site Services Disk

The command completes successfully.

B. View the list of user accounts on the computer net user

C. View network links net use

For example: net use z: \\movie Map the movie share directory of this IP to the local Z drive

D.Record link net session

Example: C:\>net session

Computer User Name Customer Type Open Idle Time


\ ROME Windows 2000 2195 0 00:03:12

\ ROME Windows 2000 2195 0 00:00:39

The command completes successfully.

10. Route trace command


B.pathping In addition to displaying routes, it also provides analysis of 325S and calculates the % of lost packets

11. A few commands about sharing security

A. Check your machine’s shared resources net share

B. Manually delete the share (you can make up a bat file, run it on your computer, and delete the share!

net share c$ /d

net share d$ /d

net share ipc$ /d

net share admin$ /d

Note that there are spaces after $.

C. Add a shared.

c:\net share mymovie=e:\downloads\movie /users:1

mymovie sharing was successful.

Also limit the number of linked users to 1.

12. Set static IP under DOS line

A.Set static IP





interface ip>set add “local link” static IP address mask gateway

B. Check the IP settings

interface ip>show address


Displays and modifies items in the Address Resolution Protocol (ARP) cache, which contains one or more tables that store IP addresses and their resolved Ethernet or Token Ring physical addresses. Each Ethernet or Token Ring network adapter installed on a computer has its own separate table. If used without arguments, the arp command displays help information.


arp [-a [InetAddr] [-N IfaceAddr]] [-g [InetAddr] [-N IfaceAddr]] [-d InetAddr [IfaceAddr]] [-s InetAddr EtherAddr [IfaceAddr]]


-a [InetAddr] [-N IfaceAddr]

Displays the current ARP cache table for all interfaces. To display the ARP cache entries for a specified IP address, use arp -a with the InetAddr parameter, where InetAddr represents the specified IP address. To display the ARP cache table for the specified interface, use the -N IfaceAddr parameter, where IfaceAddr represents the IP address assigned to the specified interface. The -N parameter is case-sensitive.

-g [InetAddr] [-N IfaceAddr]

Same as -a.

-d InetAddr [IfaceAddr]

Delete the specified IP address entry, where InetAddr represents the IP address. To delete an entry in the table for a specified interface, use the IfaceAddr parameter, where IfaceAddr represents the IP address assigned to the interface. To delete all entries, use the asterisk (*) wildcard character instead of InetAddr.

-s InetAddr EtherAddr [IfaceAddr]

Adds a static entry to the ARP cache that resolves the IP address InetAddr to the physical address EtherAddr. To add a static ARP cache entry to the table for a given interface, use the IfaceAddr parameter, where IfaceAddr represents the IP address assigned to the interface.


Show help at the command prompt.


The IP addresses of InetAddr and IfaceAddr are expressed in decimal notation with dots.

The physical address EtherAddr consists of six bytes expressed in hexadecimal notation and separated by hyphens (e.g., 00-AA-00-00-4F-2A-9C).

The entries added with the -s parameter are static and they do not time out in the ARP cache. If you terminate the TCP/IP protocol and then restart it, these entries will be deleted. To create permanent static ARP cache entries, use the appropriate arp command in the batch file and run the batch file at boot time via the Scheduler.

This command is only available if the Internet Protocol (TCP/IP) protocol is installed as a component of the network adapter property in the network connection.


To display the ARP cache table for all interfaces, type.

arp -a

For an interface with an assigned IP address of, to display its ARP cache table, type

arp -a -N

To add a static ARP cache entry that resolves the IP address to the physical address 00-AA-00-4F-2A-9C, type

arp -s 00-AA-00-4F-2A-9C

Schedules commands and programs to run on the computer at the specified time and date. at commands can only be used when the “scheduled” service is running. If used without arguments, at lists the scheduled commands.
at [\ComputerName] [{[ID] [/delete] /delete [/yes]}]
at [[\ComputerName] hours:minutes [/interactive] [{/every:date[,…] /next:date[,…]}] command]
Specifies the remote computer. If this parameter is omitted, commands and programs on the local computer are scheduled at.
Specifies the identifier assigned to the scheduled command.
Cancels the scheduled command. If the ID is omitted, all scheduled commands on the computer will be canceled.
When deleting scheduled events, answer “yes” to all queries from the system.
Specifies how long the command will run. The time is expressed in the hours:minutes format on a 24-hour basis (i.e., from 00:00 [midnight] to 23:59).
Allows the command to interact with the user’s desktop for users who are logged in when the command is run.
Runs the command on the specified day of the week or month (for example, every Thursday, or the third day of the month).
Specifies the date on which to run the command. You can specify one or more days of the week (i.e., type M, T, W, Th, F, S, Su) or one or more days of the month (i.e., type a number from 1 to 31). Separate multiple date entries with commas. If date is omitted, then at uses the current day of the month.
Run command on the next specified date (for example, the next Thursday).
Specifies the Windows command, program (.exe or .com file), or batch program (.bat or .cmd file) to run. When the command requires a path as an argument, use the absolute path, which is the entire path starting from the drive letter. If the command is on a remote computer, specify the Universal Naming Convention (UNC) notation for the server and share name, not the remote drive number.
at the command prompt to display help.
Schtasks is a more powerful superset of the command-line scheduling tool that contains all the features found in the at command-line tool. For all command-line scheduling tasks, schtasks can be used instead of at. For more information about schtasks, see Related Topics.
Using at
The at command requires you to be a member of the local Administrators group.

Leave a Reply

Your email address will not be published. Required fields are marked *