May 30, 2012 Poezii

nestat -b: Display The Ownership of The Active Connection

netstat (network statistics)

• The netstat command is used to display the TCP/IP network protocol statistics and information

nestat -b

• Display the ownership of the active connection, also.

Get System Uptime Using "systeminfo" Command

In order to get system up time you can use the systeminfo command.

Steps:

1. Open Command Prompt
2. Type systeminfo
3. Check for System Up Time field

Windbg: Get Assemblies with Version -- !dlls -v

0:000> !dlls -v


0x00192f30: C:\Program Files (x86)\Ixia\IxNetwork\6.30.0.76-EB\IxNetwork.exe
      Base   0x104a0000  EntryPoint  0x104a63fe  Size        0x00012000
      Flags  0x00404000  LoadCount   0x0000ffff  TlsIndex    0x00000000
             LDRP_ENTRY_PROCESSED
             LDRP_COR_IMAGE
      Company Name       Ixia
      Product Name       IxNetwork
      Product Version    6.30.0.76
      Original Filename  IxNetwork.exe
      File Description   Ixia IxNetwork
      File Version       6.30.0.76

0x00193020: C:\Windows\SYSTEM32\ntdll.dll
      Base   0x777c0000  EntryPoint  0x00000000  Size        0x001a9000
      Flags  0x00004004  LoadCount   0x0000ffff  TlsIndex    0x00000000
             LDRP_IMAGE_DLL
             LDRP_ENTRY_PROCESSED
      Company Name       Microsoft Corporation
      Product Name       Microsoft® Windows® Operating System
      Product Version    6.1.7601.17725
      Original Filename  ntdll.dll
      File Description   NT Layer DLL
      File Version       6.1.7601.17725 (win7sp1_gdr.111116-1503)

0x00193620: C:\Windows\SYSTEM32\MSCOREE.DLL
      Base   0x7fefaf10000  EntryPoint  0x7fefaf11134  Size        0x0006f000
      Flags  0x00084004  LoadCount   0x0000ffff  TlsIndex    0x00000000
             LDRP_IMAGE_DLL
             LDRP_ENTRY_PROCESSED
             LDRP_PROCESS_ATTACH_CALLED
      Company Name       Microsoft Corporation
      Product Name       Microsoft® .NET Framework
      Product Version    4.0.40305.0
      Original Filename  mscoree.dll
      File Description   Microsoft .NET Runtime Execution Engine
      File Version       4.0.40305.0 (Main.040305-0000)

...

Windbg: Get System / Process Uptime

It is first displayed when a dump is loaded in windbg.
Else, you can use the .time command

0:000> .time
Debug session time: Mon Feb 13 16:49:29.000 2012 (GMT+3)
System Uptime: 22 days 14:43:03.453
Process Uptime: 0 days 6:26:00.000
  Kernel time: 0 days 0:04:48.000
  User time: 0 days 2:26:11.000

Or use vertarget command:


0:000> vertarget
Windows 7 Version 7601 (Service Pack 1) MP (12 procs) Free x64
Product: Server, suite: TerminalServer
kernel32.dll version: 6.1.7601.17651 (win7sp1_gdr.110715-1504)
Machine Name:
Debug session time: Fri May 11 23:34:30.000 2012 (UTC + 3:00)
System Uptime: 3 days 9:16:56.894
Process Uptime: 0 days 0:14:54.000
  Kernel time: 0 days 0:00:19.000
  User time: 0 days 0:04:43.000