Network
- 14 Feb 2024
- 1 Minute to read
- Print
- Dark
This documentation version is deprecated, please click here for the latest version.
Network
- Updated on 14 Feb 2024
- 1 Minute to read
- Print
- Dark
Article summary
Did you find this summary helpful?
Thank you for your feedback!
dns_resolve
Cause the sensor to do a network resolution. Mainly used for internal purposes. An error code of 0 indicates a successful command.
Platforms:
Usage:
Sample Output:
You wll also see a corresponding DNS_REQUEST
event in the Sensor timeline.
Sample DNS_REQUEST
Event:
netstat
List network connections and sockets listening.
Platforms:
Usage:
Sample Output:
Netstat STATE
fields can be mapped via the Windows MIB_TCP_STATE
table, found here.
State | Value |
---|---|
1 | CLOSED |
2 | LISTEN |
3 | SYN-SENT |
4 | SYN-RECEIVED |
5 | ESTABLISHED |
6 | FIN-WAIT-1 |
7 | FIN-WAIT-2 |
8 | CLOSE-WAIT |
9 | CLOSING |
10 | LAST-ACK |
11 | TIME-WAIT |
12 | DELETE TCB |
pcap_ifaces
List the network interfaces available for capture on a host.
Platforms:
Usage:
Sample Output:
Was this article helpful?