实验 2 使用网络命令 Experiment 2 uses network commands 实验目的 Experimental purpose : 掌握常见的几种 TCP/IP 网络命令的使用方法。(参考 P44 中 2.3 实训) Grasp several common TCP/IP network command usage methods. (Refer to P44 2.3 Training) 实验内容和步骤: The contents and steps of the experiment are as follows: 2.1)ping ping 是 Windows 、 Unix 和 Linux 系统下的一个命令。 ping 也属于一个通信协议,是 TCP/IP 协议的一部分。利用“ ping ”命令可以检查网络是否连通,可以很好地帮助我们 分析和判定网络故障 。应用格式: Ping 空格 IP 地址。 Ping is a command under Windows, Unix and Linux systems. Ping is also a communication protocol, which is part of TCP/IP protocol. The "ping" command can be used to check whether the network is connected or not, which can help us to yze and determine the network fault . Application Format: Ping Spatial IP Address. ping 202.119.168.68 ping www.cztgi.edu.cn ping www.baidu.com 2.2)ipconfig/all ipconfig 实用程序可用于显示当前的 TCP/IP 配置的设置值。这些信息一般用来检验人工配置的 TCP/IP 设置是否正确。 IPConfig 可以让你了解你的计算机是否成功的租用到一个 IP 地址,如果租用到则可以了解它分配到的是什么地址。此命令也可以清空 DNS 缓存( DNS cache )。了解计算机当前的 IP 地址、子网掩码和缺省网关实际上是进行测试和故障分析的必要项目。 The ipconfig utility can be used to display the settings for the current TCP/IP configuration. This information is generally used to verify that the TCP/IP settings manually configured are correct. IPConfig lets you know if your computer has successfully rented an IP address, and if you rent it, you can know what address it is assigned to. This command also clears the DNS cache. Understanding the computer's current IP address, subnet mask and default gateway is actually a necessary project for testing and fault ysis. ipconfig /all 2.3)tracert tracert (跟踪路由)是路由跟踪实用程序,用于确定 IP 数据包访问目标所采取的路径。 Tracert 命令用 IP 生存时间 (TTL) 字段和 ICMP 错误消息来确定从一个主机到网络上其他主机的路由。 Tracert (Tracking Routing) is a routing tracking utility used to determine the path taken by an IP packet to access the target. The Tracert command uses the IP lifetime (TTL) field and ICMP error messages to determine the route from one host to another on the network. tracert www.baidu.com 2.4)arp 地址解析协议,即 ARP ( Address Resolution Protocol ),是根据 IP 地址获取物理地址的一个 TCP/IP 协议。主机发送信息时将包含目标 IP 地址的 ARP 请求广播到网络上的所有主机,并接收返回消息,以此确定目标的物理地址;收到返回消息后将该 IP 地址和物理地址存入本机 ARP 缓存中并保留一定时间,下次请求时直接查询 ARP 缓存以节约资源。地址解析协议是建立在网络中各个主机互相信任的基础上的,网络上的主机可以自主发送 ARP 应答消息,其他主机收到应答报文时不会检测该报文的真实性就会将其记入本机 ARP 缓存;由此攻击者就可以向某一主机发送伪 ARP 应答报文,使其发送的信息无法到达预期的主机或到达错误的主机,这就构成了一个 ARP 欺骗。 ARP 命令可用于查询本机 ARP 缓存中 IP 地址和 MAC 地址的对应关系、添加或删除静态对应关系等。相关协议有 RARP 、代理 ARP 。 NDP 用于在 IPv6 中代替地址解析协议。 Address Resolution Protocol (ARP) is a TCP/IP protocol that acquires physical addresses based on IP addresses. The host broadcasts the ARP request containing the destination IP address to all hosts on the network and receives the return message to determine the physical address of the target. After receiving the return message, the IP address and physical address are stored in the local ARP cache and retained for a certain period of time. The next request directly queries the ARP cache to save money. Source. Address resolution protocol is based on mutual trust between hosts in the network. Hosts on the network can send ARP reply message independently. If other hosts do not detect the authenticity of the message when receiving the reply message, they will be recorded in the local ARP cache. Thus, attackers can send pseudo-ARP reply to a host. Text, so that the information sent by it can not reach the expected host or the wrong host, which constitutes an ARP spoofing. The ARP command can be used to query the corresponding relationship between IP address and MAC address in local ARP cache, add or delete static corresponding relationship, etc. Relevant protocols include RARP and proxy ARP. NDP is used to replace address resolution protocol in IPv6. arp -a 截图:用鼠标点击当前窗口,调整到合适大小,使用 Alt+PrintScreen 截屏,在 word 中使用 Ctrl+V 粘贴截图如上所示。 Screenshot: Click on the current window with the mouse, adjust to the appropriate size, use Alt + PrintScreen screenshot, use Ctrl + V paste screenshot in word as shown above.