Вы находитесь на странице: 1из 56

MS Windows

1. MS
Windows. .
1.1.
MS Windows .
,
, MS Windows.

1.2.
. ,

.
.
,
. , .
, , .
. - Windows XP.
- , ,
.
.
Help and Support ( ).
SVCHOST.EXE, WMIPRVSE.EXE,
. ,
- Windows Management Instruments - WMI ( Windows),

WMIPRVSE. HELPCTR.EXE
HELPHOST.EXE HELPSVC.EXE
.
, .
, .
, ,
.
:
1. .
2. - .
3. - IP-.
4. .
5. IP- .
6. .
7. .
8. .
9. .
10. DNS-.

1.3.
:
1. MS Windows " ": " TCP/IP".
2. . OS MS Windows - :
HELP [""], [""] /? [4]
3. [1, c.487][2, c.498]

1.4.
, , , Internet
Ethernet.

1.5.
. . .

1.6.
1.6.1. " " MS Windows :
" " MS Windows [F1]
:C:\WINDOWS\pchealth\helpctr\binaries\HelpCtr.exe.
" ",
" ". " "
MS Windows: " ".
, .
: " ", " ", "
".
1.6.2. MS Windows " " systeminfo :
1.
2.
3.
4.

: ""//""//"cmd
: cd C:\Program Files\Common Files\Microsoft Shared\MSInfo\
: msinfo32
: systeminfo

1.6.3. , .

MS Windows .
, .1.1:
1.1.

netstat.exe rn


IP-

route print
netstat.exe -s
netstat.exe -a
net /help
ping




TCP/IP-

tracert
ipconfig.exe /all
nslookup
arp -a
finger @X.X.X.X

IP-,
DNS ( nslookup , >exit Ctrl-C)
, IP-
Ethernet
(
UNIX), Finger . " Microsoft
Windows 2000 Microsoft Windows XP finger.

1.6.4.
IP- :
:
1.
2.
3.
4.
5.

more C:\WINDOWS\system32\drivers\etc\services
more C:\WINDOWS\system32\drivers\etc\services | find "http"
type C:\WINDOWS\system32\drivers\etc\services | find "ftp"
type C:\WINDOWS\system32\drivers\etc\services | find "tcp" |more
type C:\WINDOWS\system32\drivers\etc\services | find "udp" | more

HOSTS
1. cd C:\WINDOWS\system32\drivers\etc\
2. more hosts

1.7.
: .

1.8.

?
Windows ?

2. Ethernet
.
1.1.
MS Windows
.
1.2.
,
.

.
( CLI - Command line
interface). CLI
.
:

(script) -

Loopback (, ) ,
, .
GUI - (Graphical User Interface)
CLI - (Command Line Interface) ,
(). .
MMC (Microsoft Management Console) - ,
( MMC), ,
Windows.

1.3.
:

MS Windows < >: " " "typeperf ".


. OS MS Windows. ( :
HELP [<>], [<>] /?)) [4]
[1, c.487][2, c.498]

1.4.
- .

1.5.
. .
1.6.
1.6.1. .



:

( )
1. start explorer.exe ( <" "+E>)
2. " "//"Alt+<enter>"//"
"//"Alt+<enter>"//" :" (
)//""//""

< >


.
.
.
:
.
.
Wake Up Frame, Both,
Wake Up Capabilities Magic packet
None,
.
.
.

1.6.2. MMC MS Windows .



MMC- "":
. ("Cntr+E").

( )
<"Win"+E>"//"_"//""//""
( : %SystemRoot%\system32\perfmon.msc )
:

" "

: "MS TCP Loopback interface"


: " /"
" /"

(
=5)

:

ping -l 10000 127.0.0.1 -t

~1 , .

1.6.3. CLI MS Windows .


( )


MS Windows
list_perf.txt

typeperf -qx > list_perf.txt

(
list_perf.txt ):

typeperf "\ (MS TCP Loopback interface)\


/" "\ (MS TCP Loopback
interface)\ /"

ping -l 65500 127.0.0.1 -t

~1 , .

, .
, ping 1 /, . .
, .
1.6.4. ICMP-.

,
.

( )
proba.bat
:

@echo off
for /L %%i in (1000#,100#,100000#) do (
for /F "usebackq delims=< tokens=2" %%a IN (
`ping -l %%i 127.0.0.1 -n 1`) DO @echo
=%%i...... =%%a)
ping .

,
.


proba_2.bat :
@echo off
for /L %%i in (1000#,1#,10000#) do (
for /F "skip=2 usebackq delims=< tokens=2" %%a IN (
`ping -f -l %%i 127.0.0.1 -n 1`) DO @echo
=%%i...... =%%a)

ping .

1.6.5. Ethernet IP .

MAC- Ethernet-

getmac

Ethernet IP

netstat

netstat -e
netstat -s -p
ICMP 1
netstat -s -p
UDP 1
netstat -s -p
TCP 1

netstat -s -p IP
1
~1 . ,
. .

1.7.
.
.
.
.
.
1.8.
1. .
2. MS Windows.

3. Telnet .
1.1.
MS Windows.
1.2.
MS Windows "tlntsrv" (telnet) ,
TCP/IP Telnet, UNIX Windows.
Telnet Windows ,
Telnet, .

telnet -
TCP/IP.
1.3.
:
MS Windows " ": " Telnet", " Telnet", "
Telnet", " Telnet", " Telnet" [4]
OS MS Windows, ( : HELP [""])
MS Windows: C:\WINDOWS\Help\telnet.hlp; C:\WINDOWS\Help\telnet.chm
[1, c.155], [1, c.554]
[2, c.50]

1.4.
- .

1.5.
. telnet . .

1.6.

1.6.1. ,
telnet.

net user

test test

net user test test /add

(=auto)

sc config tlntsvr start= auto

II

: "
/""/ /" "/ /"
/""//

Telnet

net localgroup TelnetClients /add " "//" " TelnetClients

Telnet

net localgroup TelnetClients

test Telnet:

net localgroup TelnetClients test


/add

1.6.2. telnet-
telnet-
sc query tlntsvr
sc stop tlntsvr
sc query tlntsvr
sc start tlntsvr
sc query tlntsvr
tlntadmn

MS Windows
" "//""//"" - "telnet"
.

type %SystemRoot%\system32\login.cmd

1.6.3. telnet-.

""/ /""/ /"cmd"

telnet-.

: telnet 127.0.0.1

: dir

telnet-,
telnet-.

tlntadmn -s

telnet- :

shutdown -r -t 0

1.7.

1.8.
.
TCP/IP.
(socket).

4. TFTP .
1.1.
TFTP
1.2.
telnet , .
.
TCP/IP FTP ,
. , FTP, ,
- TFTP (Trivial File Transfer Protocol).
, , TCP,
- UDP.
tftp , -,
RARP, TFTP BOOTP
, (IOS)
. IOS -:

Xmodem Ethernet TFTP.


(). TFTP .
TCP/IP MS Windows TFTP
.
TFTP .
1.3.
. tftp- .
. TFTPD.EXE
make_10M.txt. (. .1.9. ). .
1.4.
:

MS Windows " ": "tftp" [4].


OS MS Windows, ( : tftp /?)
4.5.4.1 " TFTP .. ( )" - http://book.itep.ru/4/45/tftp4541.htm "
TCP/IP"[1, c.156].

1.5.
. tftp-. loopback .
.
1.6.

1.6.1. TFTP- .

""//""-->

mkdir c:\temp\down
mkdir c:\temp\up
cd c:\temp\up

netstat -rn > c:\temp\up\u


type c:\temp\up\up.cnf
ipconfig /all > c:\temp\do
type c:\temp\down\down.

c:\temp\up up.cnf
c:\temp\down TCP/IP down.cnf

tftpd -
TFTPD

dir /c/d c:\temp\up c:\tem


cd c:\temp\up
tftp 127.0.0.1 put up.cnf
dir /c/d c:\temp\up c:\tem

. .
,
IP-
127.0.0.1
. .
tftp 127.0.0.1 get down.cn
.
tftp X.X.X.X put up.cnf
. .
tftp X.X.X.X get down.cn

1.6.2. TFTP-.
.

10Mb:


make_10M.txt C:\temp\up\.
make_10M.txt make_10M.bat
make_10M.bat.

C:\temp\up\ test_10.Mb (10000001 ).


tftp -i 127.0.0.1 put test_10.Mb
C:\temp\up\
tftp -i ... put test_10.Mb
loopback . . tftp -i 127.0.0.1 get test_10.Mb
tftp -i ... get test_10.Mb

netstat -an 1 | find "69"
TFTP-. .
netstat -a 1 | find "tftp"

1.7.
Loopback .
, .
1.8.

TFTP?
TFTP?
, TFTP 1?
, TFTP 2?
, TFTP 3?
, TFTP 4?
, TFTP 5?
ISO/OSI TFTP?
tftp !

1.9.
rem --< ####### -< make_10M.bat >- #########
rem --< test_10.Mb 10Mb.
rem --< #############################################

del *_.*
echo 1234567890124567890123 > 1_
copy *_ 2_ & copy *_ 3_ & copy *_ 4_ & copy *_ 5_ & copy *_ 6_ & copy *_ 7_
copy *_ 8_ & copy *_ 9_ & copy *_ 10_ & copy *_ 11_ & copy *_ 12_ & copy *_
13_
copy *_ 14_ & copy *_ 15_ & copy *_ 16_ & copy *_ 17_ & copy *_ 18_ & copy
*_ 19_ & copy *_ 20_
copy 20_+19_+14_+13_+11_+9_ test_10.Mb
del *_.*

5. - WMIC.
1.1.
Windows
Management Instrumentation
1.2.
.
html-. , makecab.
.
1.3.
:
MS Windows " ": " wmic " , "makecab", "expand" [4].
OS MS Windows, ( : wmic /?)
1.4.
WMIC (WMI Command-line)
WMI
(Windows Management Instrumentation - Windows).
WMI Microsoft Windows. WMIC

,
.
WMIC :
- WMI ( <>,
WMI);
- ,
;
- ;
- WMIC.
WMI ,
.
WMIC , WMI. WMIC
, WMIC, WMI.
WMIC .
WMIC .
1. - WMIC .
2. - WMIC
.
3. - WMIC
.
4. ( ) -
( Telnet )
WMIC.
- WMIC
, (,
- ).

1.5.
- .
1.6.
1.6.1. , wmic:
wmic /?

WMIC

wmic BASEBOARD get /value | more

wmic BIOS get /value | more

- (BIOS).

wmic BOOTCONFIG get /value | more

wmic COMPUTERSYSTEM get /value |more

wmic CPU get /value |more

1.6.2. html- :
wmic
wmic
wmic
wmic

/RECORD:nic.htm nic get /value /format:mof & Start nic.htm


/RECORD:nicconfig.htm nicconfig get /value /format:mof & Start nicconfig.htm
/RECORD:Protocol.htm netprotocol get /value /format:mof & Start Protocol.htm
/RECORD:netuse.htm netuse get /value /format:mof & Start netuse.htm

wmic /RECORD:Protocol.htm netprotocol get Description,ConnectionlessService /format:mof & Start Protocol.htm


wmic /RECORD:address.htm nicconfig get Description,IPAddress,DefaultIPGateway,MACAddress /format:mof & Start address.htm
wmic /RECORD:nic.htm nic get Description,AdapterType,Manufacturer,NetConnectionID,SystemName /format:mof & Start nic.htm

1.6.3. , ,
:

wmic PATH "Win32_Environment.Name='PROCESSOR_IDENTIFIER'" GET VariableValue > Ethernet.htm


wmic nic where (NetConnectionID =" ") get /format:mof >> Ethernet.htm
:
wmic nic where (AdapterType ="Ethernet 802.3") get Index,NetConnectionID
XX :
wmic nicconfig where ( Index= ) get /format:mof >> Ethernet.htm & start Ethernet.htm
1.6.4. MS Windows:
makecab Ethernet.htm wmi_log.cab
expand -r wmi_log.cab
log_wmic.bat
Ethernet.htm .
1.7.
.
1.8.
WMIC .
1.9.
log_wmic.bat:
rem :

rem wmic nic where (AdapterType ="Ethernet 802.3") get Index,NetConnectionID


rem Index=XX NetConnectionID
wmic PATH "Win32_Environment.Name='PROCESSOR_IDENTIFIER'" GET VariableValue > Ethernet.htm
wmic nic where (NetConnectionID =" ") get /format:mof >> Ethernet.htm
wmic nicconfig where (Index=XX) get /format:mof >> Ethernet.htm
makecab Ethernet.htm wmi_log.cab

6. Netsh MS Windows XP.


1.1.
Netsh MS Windows XP
.
1.2.
1. Netsh IP
TCP/IP (, , DNS WINS).
2. Netsh
.
1.3.
MS Windows " " ( [F1]
), "netsh","mstsc" [4]).

1.4.
Netsh ,
. Netsh
, . Netsh

.
Netsh Netsh
(DLL). netsh show helper ( )
Netsh , , ,
. netsh,
, . ,
Dhcpmon.dll netsh , DHCP.
Netsh IP TCP/IP (, , DNS
WINS), . Netsh
Windows 2000 Server ,
, (mstsc.exe).
Mstsc ,
(.rdp) Windows XP (,
) .rdp
:

, .
, ,
(WAN).
, ,
.

Netsh Windows 2000 Windows XP .


1.5.
- .
1.6.
netsh, netsh Cmd.exe
, . ,
. , dhcp Netsh DHCP,
DHCP, : : dhcp.
1.6.1.
"",
msg ""
: msg {_|_|_|@_|*} [/server:_] [/time:]
[/v] [/w] []- .
,
:
netsh interface
netsh dump | more
:
netsh interface show interface /?
netsh interface show interface
netsh interface show interface
netsh interface show interface

IP :
interface ip
interface ip show address
- IP-.
interface ip show config
- IP- .
interface ip show dns
- DNS-.
interface ip show interface - IP-.
interface ip show ipaddress - IP-.
interface ip show ipnet
- IP .
interface ip show ipstats
- IP.
interface ip show joins
- .
interface ip show offload
- .
interface ip show tcpconn
- TCP-.
interface ip show tcpstats - TCP.
interface ip show udpconn
- UDP-.
interface ip show udpstats - UDP.
interface ip show wins
- WINS-.
:
netsh interface portproxy show
netsh interface portproxy show all
,
. :
netsh diag gui
netsh diag ping adapter
.
netsh diag ping dhcp
DHCP- .
netsh diag ping dns
DNS- .
netsh diag ping gateway
.
netsh diag ping ieproxy
Internet Explorer.
netsh diag ping ip
IP- .
netsh diag ping iphost
IP- .
netsh diag ping loopback (127.0.0.1).
netsh diag ping mail
Outlook Express.
netsh diag ping news
.
netsh diag ping wins
WINS- .
, , , ,
, .
netsh diag show
netsh diag show adapter
.
netsh diag show all
.
netsh diag show client
.
netsh diag show computer .
netsh diag show computer /p | more - , .
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh

netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh
netsh

diag
diag
diag
diag
diag
diag
diag
diag
diag
diag
diag
diag
diag
diag
diag

show
show
show
show
show
show
show
show
show
show
show
show
show
show
show

computer /v | more - , .
dhcp
DHCP- .
dns
DNS- .
gateway
.
ieproxy
Internet Explorer .
ip
IP- .
mail
.
modem
.
modem /?
modem 1 /v | more - , .
news
.
os
.
test
.
version
Windows WMI.
wins
WINS- .

1.7.
,
.

.
.




.
.

1.8.
netsh MS Windows?

7.

1.1.
,
MS Windows.
1.2.
logman Ethernet TCP/IP.
1.3.
:

MS Windows " ": "


" "logman ".
. OS MS Windows. ( :
HELP [<>], [<>] /?)) [4]

1.4.

.
.


.
, , ,
. (
.)
, SQL.
SQL ,
.
( ).
, ,
, .

, , , .
,
.
.
, , ,
,
.


. Windows Performance :
.
, , , , .

, .
logman
. , : schtasks /create /tn
"my_programm" /tr start_mon.bat /sc ONSTART
FTP .

TCP/IP


ICMP, IP, NetBT, TCP, UDP

, , , ,
QoS RSVP

RSVP, RSVP

WINS

WINS

PBServer

1.5.
- .
logman .
Ethernet, IP, TCP, UDP,
. .
1.6.
1.6.1. c:\temp\lab\ .
MS Windows XP:
mkdir c:\temp\lab\log
cd c:\temp\lab\
del /q c:\temp\lab\log\*.*

.

.

typeperf -qx > all_list.txt


type all_list.txt | more

c:\temp\lab\
all_list.txt,
.
,
.

[ Win+E]// / / // //
/ / / .
( start perfmon.msc )

"
//
."

1.6.2. c:\temp\lab\ :

logman query IP_log


logman stop IP_log
logman delete IP_log

IP_log,

logman create counter IP_log -si 1 -f tsv -o c:\temp\lab\log\


logman update IP_log -c "\IP\/"
logman query IP_log

IP_log

logman update IP_log -rf 30


logman query IP_log

IP_log - 30 .
IP_log ping

del /q c:\temp\lab\log\*.* &logman start IP_log &ping 127.0.0.1 -l 65000 -n 10 &ping 127.0.0.1 -l 7800 -n 5 &ping 127.0.0.1 -l 32500 -n 10
MMC " ", .1.6.1.,
[F5].
logman query IP_log

C:\temp\lab\log\IP_log_000001.tsv

graf.xls C:\temp\lab\log
cd C:\temp\lab\log
ren C:\temp\lab\log\IP_log_*.tsv log.txt & start graf.xls

a href="../app/graf.xls">graf.xls ,
C:\temp\lab\log\IP_log.

~90 : 65000 / [ 90 / 2 ] => ~1442 .


1.7.
. , .
1.8.

IP, TCP, UDP.


Ethernet logman.

8 . OC MS Windows NTP
1.1.
MS Windows NTP.
1.2.
, .
1.3.
1. MS Windows " ": %windir%\Help\datetime.chm
2. . OS MS Windows. ( :
HELP [<>], [<>] /?)) [4]: time /?, date /?,
w32tm /? | more
3. :

http://book.itep.ru/4/44/sntp4416.htm
http://book.itep.ru/4/44/ntp_4415.htm
http://support.microsoft.com/kb/2626

1.4.
Network Time Protocol (NTP) (UDP port 123) -
. NTP UDP,
TCP. NTP ( (Keith Marzullo)

, -), , . 4
10 (1/100 ) , 200 (1/5000 ) .
NTP - . NTP . (David L. Mills)
. - NTP 4. NTP , .
NTP " ", 1 ,
, GPS . NTP 2 1, .
, NTP 64- , 32- 32-
, 232 , 2-32 .
SNTP - .
, .
1.5.
, .
1.6.
:
1 @echo Carrent time: & time /t & @echo System value=%time%
2 date /t
3 echo %date%

4 w32tm /tz

5 prompt time is: $t$_$p$g

6 w32tm /dumpreg

OS Windows
wmic service where (Name="w32time") get Caption,Name,Description,State /value

wmic service w32time get StartMode /value


sc qc w32time
8

:
StartMode : Auto Manual
sc AUTO_START DEMAND_START.

sc config w32time start= auto

: Auto

sc config w32time start= demand

: Manual

sc start w32time

, .

net time /QUERYSNTP

NTP

1. " " .
2. " ".
3. ,
.
4. " "
.
5. ,

10 start w32tm /stripchart /computer:pool.ntp.org

:
.
, .

.
11

! .
, . 1.9.1, .
, : time 13:16

12 net time /setsntp:pool.ntp.org

1.9.2
.

13 net stop w32time && net start w32time

Windows

14 w32tm /resync


6.

15

" NTP-
", . 1.9.1

1.7.
. .
1.8.
NTP.
1.9.
1.9.1 :
" 9 ":
@echo off
cls
set _TIME_=9
echo Current time=%time%
for /F "usebackq delims=: tokens=1-3" %%a IN (
'%time%') do (
set h=%%a& set m=%%b& set s=%%c )
for /F "usebackq tokens=1" %%i IN (
`echo %s%`) do (
set /a s_=%%i+%_TIME_% )

" 5 ":
@echo off
cls
set _TIME_=5
echo Current time & time /t
for /F "usebackq delims=: tokens=1,2" %%i IN (
`time /t`) do (
set h=%%i & set /a m=%%j+%_TIME_%)
time %h%:%m%
echo New time & time /t

time %h%:%m%:%s_%
echo New time....=%time%

" NTP-
"
set var=pool.ntp.org
net time /setsntp:%var%
net stop w32time && net start w32time
start w32tm /stripchart /computer:%var%
w32tm /resync

NTP-:
1. pool.ntp.org
2. ntp2.usno.navy.mil
3. time.windows.com

1.9.2 .
-
(USNO)

ntp2.usno.navy.mil
(192.5.41.209)
tock.usno.navy.mil
(192.5.41.41)

clyde.concordia.ca
(132.205.1.1)
manitou.cs.concordia.ca
(132.205.4.3)

pool.ntp.org
time.windows.com

time.nist.gov

Microsoft "A list of the Simple Network Time Protocol


(SNTP) time servers that are available on the Internet" " ,
SNTP (Simple Network Time Protocol), " http://support.microsoft.com/kb/262680
1 http://www.eecis.udel.edu/ ~mills/ ntp/ clock1.htm.
2 : http://www.eecis.udel.edu/ ~mills/ ntp/ clock2.htm.

1.9.3 .
1. NTP 123, NTP
.
2. W32Time , Proxy Server, , ,
NTP-.
3. .
4. , . (
)

9. (QoS) MS Windows XP
1.1.
(QoS) MS Windows.
1.2.
(QoS) MS Windows.
1.3.
1. MS Windows " ":
o start %windir%\help\qosconcepts.chm
o start %windir%\Help\system.chm
o hh netcfg.chm
2. . OS MS Windows. :
HELP [<>], [<>] /?. [4]: Rasphone /? ; rasdial /?

3. :

http://book.itep.ru/4/44/qos_lan.htm
http://www.intuit.ru/department/os/winadmin/15/winadmin_15.html

1.4.
Windows XP Professional QoS ,
. (802.1p DSCP-
) . QoS-
. QoS.
, ,
, .
Windows XP. Windows XP Professional QoS .
, , QoS
Windows XP Professional.
QoS .
dial-up-.
LAN DSL-,
, . , -,
, , . .
TCP, .
, dial-in-, .
.
, .
1.5.
, .

1.6.
:
OS Windows. , .
1

wmic service where (Name="rsvp") get Caption,Name,Description,State /value


:
wmic service rsvp get StartMode /value
StartMode : Auto Manual
sc sc qc rsvp
AUTO_START DEMAND_START.
sc config rsvp start= demand

- .

sc start rsvp

, .

tasklist /svc

RSVP
"QoS"

start gpedit.msc
: "_"/

QoS

/"_"/ /""/
/"_ QoS"

typeperf -qx | find /I "RSVP" | more

QoS. , , ?

C:\Program Files\Common Files\Microsoft


Shared\MSInfo\MSInfo32.exe

" ", "qos" "rsvp".


.

ping -v 255 127.0.0.1

, -v
(TOS) IP- -.
0. - 0 255.

.
rasdial UTK xxxxx xxxxx /phone:167

rasdial _ [_[ | *]][/phone:_]


(UTK - )

Rasphone -e UTK

Rasphone

Rasphone /e

?????

, QoS.

pathping -q 3 -w 10000 www.yandex.ru >



pathping_yandex.doc
pathping -q 3 -w 10000 -T -R www.yandex.ru >> (QoS, RSVP). .
pathping_yandex.doc
Rasphone -h UTK

UTK

reg query "HKEY_CURRENT_USER\Software\Microsoft\RAS Phonebook" /s |more

UTK

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RAS AutoDial\Default

UTK

HKEY_USERS\S-1-5-21-1123561945-1592454029-839522115-1003\Software\Microsoft\RAS Phonebook

1.7.
.
1.8.
RSVP.
1.9.
1.9.1 QoS.
1. RSVP.
2. pathping -T -R .
1.9.2
Quality of Service 20% (,
14400, Ethernet). , QoS Packet Scheduler ( )

, . , QoS, (gpedit.msc).
. - QoS. "
". c 20% 0, .
QoS. .

10. SNMP
1.1.
MS Windows SNMP
1.2.
MS Windows SNMP.
1.3.
1. MS Windows " " snmp:
2. %windit%\Help\snmpconcepts.chm
3. :

http://linux.opennet.ru\docs\RUS\nagios_win\nagios_win_2.html
http://www.wtcs.org/snmp4tpc/FILES/Tools/SNMP/getif/getif-2.2.zip.
MIB http://www.wtcs.org/snmp4tpc/FILES/Tools/SNMP/getif/GETIF-MIBS.ZIP

1.4.

- .
1.6.
SNMP- :
c " Windows" SNMP:
" "/ /" "/ /" Windows""/ /" "
:control.exe appwiz.cpl,@0,2
MS Windows:

SNMP - , .
WMI SNMP - SNMP
Windows

:
1 wmic service where (Name="snmp") get Caption,Name,Description,State /value

wmic service snmp get StartMode /value

:
StartMode : Auto Manual
sc AUTO_START DEMAND_START.

sc qc snmp


DEPENDENCIES .
SNMP-
,
DEPENDENCIES .

sc config snmp start= demand

- .

sc start snmp

, .

tasklist /svc
start gpedit.msc
5
: "_"/ /"_"/ /""/ /"SNMP"

snmp-
,
SNMP ,

.

: " "

6 reg query HKLM\SOFTWARE\Policies\SNMP\Parameters /s


. SNMP
.

7 "C:\Program Files\Common Files\Microsoft Shared\MSInfo\MSInfo32.exe

" ",
"snmp".
SNMP.

1.
2.
3.
4.

mkdir c:\temp\snmp
cd c:\temp\snmp
snmpwalk.exe libsnmp.dll
dir /b

9 snmpwalk.exe -Pe -v1 -c public 127.0.0.1 .1.3.6.1.2.1.1


start services.msc
" SNMP"/ /""/
1. : /" SNMP"/
: ()
10 : ()
: .
2. : /""/ /" "/ /""
public labuser


()
ucdsnmp.
ucd-snmp-X.X.X-win32.rar
: http://www.netsnmp.org/download/.
SNMP

SNMP

net stop snmp && net start snmp


11
sc query snmp

12 snmpwalk.exe -Pe -v1 -c labuser 127.0.0.1 .1.3.6.1.2.1.1

13

1.
2.
3.
4.

mkdir c:\temp\snmp\mib
RFC1155-SMI.MIB RFC1213-MIB-II.MIB
cd c:\temp\snmp
dir /S/B

14 snmpwalk.exe -Pe -M ./mib -v1 -c labuser 127.0.0.1 system

15 type mib\RFC1213-MIB-II.MIB | find /i "OBJECT-TYPE" | more

RFC1213.MIB,

SNMP.

16 snmpwalk.exe -Pe -M ./mib -v1 -c labuser 127.0.0.1 sysObjectID

, MIB
.
127.0.0.1.

17 snmpwalk.exe -Pe -M ./mib -v1 -c labuser 127.0.0.1 .1.3.6.1 | more

MIB (
), ,
MIB .

1.7.
, SNMP .
1.8.
SNMP

11. SNMP (SNMPTRAP)

1.1.
snmptrap snmptrapd - ,
MS Windows.
1.2.
snmptrap snmp.
1.3.
1. MS Windows " " snmp:
2. %windit%\Help\snmpconcepts.chm
3. . OS MS Windows. :
HELP [<>], [<>] /?. evntcmd /?
4. :

http://linux.opennet.ru\docs\RUS\nagios_win\nagios_win_2.html
http://www.tech-faq.com/lang/ru/network-management-software.shtml

1.4.
.
SNMP (SNMPTRAP) ,
SNMP SNMP, .
, SNMP, , ,
SNMP. SNMP ,
SNMP. SNMP ,
.

SNMP , SNMP,
SNMP, . ,
, .
. , ,
. IP ; SNMP
.
162.
1.5.
- .
1.6.
: "
SNMP"

1. mkdir c:\temp\snmp
2. cd c:\temp\snmp
3. snmptrapd.exe
libsnmp.dll
4. dir /S/B
: "C SNMP"

1. evntwin ->""->""->""->(snmp)->"
"->""--> ""
2. ( )=>""=>c:\temp\snmp\events->"Ok"


().
ucd-snmp-X.X.X-win32.
ucd-snmpX.X.X-win32.rar :http://www.netsnmp.org/download/.
,
,
.
,
, evntcmd.


evntcmd

3 type c:\temp\snmp\events

c:\temp\snmp :
4
evntcmd -s 127.0.0.1 -v 10 -n events

,
.
/
.

start services.msc
" SNMP"/ /""/
5 1. : /""/
: labuser
: 127.0.0.1

SNMPTRAP .

6 net stop snmp && net start snmp

SNMP

7 snmptrapd.exe -OS -M ./mib -o log_trap

()

8 net stop snmp && net start snmp


9 snmptrapd Ctrl-C


snmp,
snmptrapd

10 type log_trap

1.7.
SNMP .
1.8.
SNMPTRAP .

12. FTP -

1.1.
FTP.
1.3.
1. MS Windows " " ftp:
2. . OS MS Windows. :
HELP:ftp<enter>?<enter>help <>
3. : FTP
1.4.
- .
1.5.
c " Windows" FTP:
C : control.exe appwiz.cpl,@0,2
MS Windows "Internet Information Services (IIS)", (sysocmgr) FTP .
MS Windows:

1
1. FTP, FTP-, .
2. IIS - IIS MMC. .
sc qc msftpsvc
sc qc iisadmin
2
sc qc SamSS
sc qc RPCSS

DEPENDENCIES
. FTP- ,
DEPENDENCIES
.

wmic service msftpsvc get StartMode /value


3 wmic service iisadmin get StartMode /value
wmic service SamSS get StartMode /value

:
StartMode : Auto Manual
sc -

wmic service RPCSS get StartMode /value

AUTO_START DEMAND_START.

sc config msftpsvc start= auto


sc config iisadmin start= auto
4
sc config SamSS start= auto
sc config RPCSS start= auto

- .

sc query iisadmin
sc query msftpsvc
5
, , :
sc start iisadmin & sc start msftpsvc

, IIS FTP-:
iisadmin - - FTP-
IIS.
msftpsvc - FTP-.
FTP- IIS.

6 net user test test /add

C test test
IIS FTP- . .1 :

7 %windir%\system32\inetsrv\inetmgr.exe
HELP Win7: http://lanagtu.narod.ru/lab/win/Win7/ftp_win7.doc
mkdir c:\temp\ftp_lab\down
8 mkdir c:\temp\ftp_lab\up
cd c:\temp\ftp_lab\up

9 c:\temp\ftp_lab\up 10Mb,
c:\temp\ftp_lab\down
10 cd c:\temp\ftp_lab\down
ftp
?
open 127.0.0.1
11 <enter>
user test
bin
promp

hash
mget test_10.Mb
dir
FTP
, 10 FTP !!! .

1.6.
.
1.7.
, FTP.
1.8.
rem --< ####### -< make_10M.bat >- ########
rem --< test_10.Mb 10Mb.
rem --< #############################################
del *_.*
echo 1234567890124567890123 > 1_
copy *_ 2_ & copy *_ 3_ & copy *_ 4_ & copy *_ 5_ & copy *_ 6_ & copy *_ 7_
copy *_ 8_ & copy *_ 9_ & copy *_ 10_ & copy *_ 11_ & copy *_ 12_ & copy *_ 13_
copy *_ 14_ & copy *_ 15_ & copy *_ 16_ & copy *_ 17_ & copy *_ 18_ & copy *_ 19_ & copy *_ 20_
copy 20_+19_+14_+13_+11_+9_ test_10.Mb
del *_.*

13. web-
1.1.

, .
1.2.
1.3.
1. MS Windows " " http, web:
2. . OS MS Windows. :
HELP [<>], [<>] /?. evntcmd /?
3. : HTTP , WWW
1.4.
- .
1.5.
c " Windows" web- :
C : control.exe appwiz.cpl,@0,2
MS Windows "Internet Information Services (IIS)", (sysocmgr) web .
MS Windows:

1. IIS - IIS MMC. .


2. WWW - HTTP- web- TCP/IP . (: WWW )
sc qc w3svc
sc qc iisadmin
sc qc SamSS
sc qc RPCSS
wmic service w3svc get StartMode /value
wmic service iisadmin get StartMode /value

DEPENDENCIES
. - ,
DEPENDENCIES .

:
StartMode : Auto Manual

wmic service SamSS get StartMode /value


wmic service RPCSS get StartMode /value

sc AUTO_START DEMAND_START.

sc config w3svc start= auto


sc config iisadmin start= auto
sc config SamSS start= auto
sc config RPCSS start= auto

- .

sc query iisadmin
sc query w3svc
, , :
sc start iisadmin & sc start w3svc

, IIS WWW-:
iisadmin - - FTP-
IIS.
w3svc - -.
- .

mkdir c:\temp\www
cd c:\temp\www

c:\temp\www
IIS WWW- . .1 :

%windir%\system32\inetsrv\inetmgr.exe

mkdir c:\temp\down
cd c:\temp\down

c:\temp\down

c:\temp\down wget.exe
c:\temp\down http.bat, . .
start http://127.0.0.1/

wget.exe -r -nc -b http://127.0.0.1

(
)


wget.exe web-, ..
web-.

1.6.
.
1.7.
HTTP.
1.8.
rem --< ############### -( - http.bat ########################
rem --<
rem --< web_site 2252 ./http
rem --<
rem --< #############################################################
mkdir http & mkdir http\1 & mkdir http\1\1 & mkdir http\1\1\1 & mkdir http\1\1\1\1
echo "<a href=1.htm>." > http\1\1\1\1\0.htm & echo "<a href=2.htm>." > http\1\1\1\1\1.htm
echo "<a href=3.htm>." > http\1\1\1\1\2.htm & echo "<a href=4.htm>." > http\1\1\1\1\3.htm
echo "<a href=5.htm>." > http\1\1\1\1\4.htm & echo "<a href=6.htm>." > http\1\1\1\1\5.htm
echo "<a href=7.htm>." > http\1\1\1\1\6.htm & echo "<a href=8.htm>." > http\1\1\1\1\7.htm
echo "<a href=9.htm>." > http\1\1\1\1\8.htm & echo "<a href=0.htm>." > http\1\1\1\1\9.htm
mkdir http\1\1\1\2 & mkdir http\1\1\1\3 & mkdir http\1\1\1\4 & mkdir http\1\1\1\5
echo "<a href=1/1.htm>." > http\1\1\1\1.htm & echo "<a href=2/1.htm>." > http\1\1\1\2.htm
echo "<a href=3/1.htm>." > http\1\1\1\3.htm & echo "<a href=4/1.htm>." > http\1\1\1\4.htm
echo "<a href=5/1.htm>." > http\1\1\1\5.htm
Xcopy http\1\1\1\1 /s http\1\1\1\2 & Xcopy http\1\1\1\1 /s http\1\1\1\3
Xcopy http\1\1\1\1 /s http\1\1\1\4 & Xcopy http\1\1\1\1 /s http\1\1\1\5
mkdir http\1\1\2 & mkdir http\1\1\3 & mkdir http\1\1\4 & mkdir http\1\1\5
echo "<a href=1/1.htm>." > http\1\1\1.htm & echo "<a href=2/1.htm>." > http\1\1\2.htm
echo "<a href=3/1.htm>." > http\1\1\3.htm & echo "<a href=4/1.htm>." > http\1\1\4.htm
echo "<a href=5/1.htm>." > http\1\1\5.htm
Xcopy http\1\1\1 /s http\1\1\2 & Xcopy http\1\1\1 /s http\1\1\3
Xcopy http\1\1\1 /s http\1\1\4 & Xcopy http\1\1\1 /s http\1\1\5
mkdir http\1\2 & mkdir http\1\3 & mkdir http\1\4 & mkdir http\1\5
echo "<a href=1/1.htm>." > http\1\1.htm & echo "<a href=2/1.htm>." > http\1\2.htm
echo "<a href=3/1.htm>." > http\1\3.htm & echo "<a href=4/1.htm>." > http\1\4.htm

echo "<a href=5/1.htm>." > http\1\5.htm


Xcopy http\1\1 /s http\1\2 & Xcopy http\1\1 /s http\1\3 & Xcopy http\1\1 /s http\1\4
mkdir http\02
echo "<a href=1/1.htm>." > http\1.htm & echo "<a href=02/1.htm>." > http\2.htm
Xcopy /s http\1 http\02
echo "<a href=http/1.htm>Page 1</a><p>" > index.htm & echo "<a href=http/2.htm>Page 2">> index.htm

14. tcpdump
1.1.
, .
1.2.
.
1.3.
1. MS Windows " " : TCP/IP
2. tcpdump.exe -h , :

http://www.tcpdump.org/
http://www.opennet.ru/base/net/tcpdump_explore.txt.html
http://www.linuxshare.ru/docs/net/tcpdump.html

1.4.
TCPDUMP for Windows - TCPDUMP UNIX, Packet Sniffer SDK WinPCap.
/ . Tcpdump ,

. , .
:
1.
2.
3.
4.


400- .exe
1-
Windows Terminal, Radmin .

Ethernet ( )
:
(promiscuous mode). tcpdump Lawrence Berkeley, ,
. ,
.
tcpdump,
.
tcpdump .
AntiSniff Ethernet.
Ethernet,
IP-, .
, , , IP,
Ethernet ( ,
MAC- , ).
:
MAC- ff:00:00:00:00:00 .
, ICMP Echo <>
, ,
, AntiSniff , .
,
DNS- IP- (


). AntiSniff IP-
( ), DNS-
. , , .
, , ,
, .
, ,
- , , .
, , , ,
,
- , .
,
, , . AntiSniff
ICMP Echo, ,
MAC-, .
, , , , ,
, ( 4 ) .
, ,
, .
1.5.
- .
. tcpdump UNIX,
Windows - Windump.
(root).
1.6.

:
1. FTP -
2. Telnet .
3. web-
1

mkdir c:\temp\dump
cd c:\temp\dump

c:\temp\dump tcpdump.exe

FTP-

ftp :
1. :
2 tcpdump.exe -t -n -nn -X
2. test ftp
ftp-
ftp 127.0.0.1

telnet-

telnet :
tcpdump. 4
1. :
.
3 tcpdump.exe -t -n -nn
2. test telnet-
.
telnet-
telnet 127.0.0.1
http-

Microsoft Internet Explorer
:
4
1. :
tcpdump.exe -t -n -nn -X
2. :

,
c:\temp\www
.

cd c:\temp\www
echo TEXT PROBE > index.htm
start http://127.0.0.1

1.7.
tcpdump.
1.8.
FTP, HTTP, telnet.
1.9. tcpdump
"Cannot determine packet capture interface" ("
"), .
.