XK0-004 · Question #147
An administrator needs to generate a list of services that are listening on TCP and/or UDP ports. Which of the following tools should the administrator use?
The correct answer is C. netstat. netstat is the standard Linux utility for displaying active network connections, listening sockets, and the TCP/UDP ports services are bound to.
Question
An administrator needs to generate a list of services that are listening on TCP and/or UDP ports. Which of the following tools should the administrator use?
Options
- Aethtool
- Broute
- Cnetstat
- Dportmap
How the community answered
(15 responses)- A7% (1)
- C87% (13)
- D7% (1)
Why each option
netstat is the standard Linux utility for displaying active network connections, listening sockets, and the TCP/UDP ports services are bound to.
ethtool queries and configures network driver and hardware settings for a specific network interface (speed, duplex, offload features) and has no ability to report on listening services or open ports.
route displays and manipulates the kernel IP routing table, showing how traffic is forwarded between networks, and cannot report on services listening on TCP or UDP ports.
netstat displays active connections, listening sockets, routing tables, and interface statistics; flags such as -tuln specifically enumerate TCP and UDP ports currently in the LISTEN state along with the associated process, making it the correct tool for auditing which services are listening on which ports.
portmap (rpcbind) is an RPC service daemon that maps RPC program numbers to their assigned port numbers - it is not a diagnostic tool and cannot generate a list of listening services across the system.
Concept tested: Using netstat to identify listening TCP/UDP services
Source: https://man7.org/linux/man-pages/man8/netstat.8.html
Topics
Community Discussion
No community discussion yet for this question.