"netsh" Commands for Interface IP

Windows Security Tutorials - Herong's Tutorial Examples

∟MS08-001 Vulnerability on Windows Systems

∟"netsh" Commands for Interface IP

This section provides a quick introduction of 'netsh' Commands for Interface IP. 'netsh interface ip show config' shows IP address and additional information on the local system.

One nice tool for finding out information about the IP network interface from your Windows system is the "netsh" command. It has the following command syntax:

netsh context subcontext command option

Commands that we are interested are associated with the "interface" or "int" context and the "ip" subcontext. You can list all commands for Interface IP with this commands: "netsh interface ip /?"

C:\herong>netsh interface ip /?

The following commands are available:

Commands in this context:
?        - Displays a list of commands.
add      - Adds a configuration entry to a table.
delete   - Deletes a configuration entry from a table.
dump     - Displays a configuration script.
help     - Displays a list of commands.
reset    - Resets TCP/IP and related components to a clean state.
set      - Sets configuration information.
show     - Displays information.

Of course, the "show" command is the most commonly used command. It has these options:

C:\herong>netsh interface ip show /?

The following commands are available:

Commands in this context:
show address   - Displays IP address configuration.
show config    - Displays IP address and additional information.
show dns       - Displays the DNS server addresses.
show icmp      - Displays ICMP statistics.
show interface - Displays IP interface statistics.
show ipaddress - Displays current IP addresses.
show ipnet     - Displays IP net-to-media mappings.
show ipstats   - Displays IP statistics.
show joins     - Displays multicast groups joined.
show offload   - Displays the offload information.
show tcpconn   - Displays TCP connections.
show tcpstats  - Displays TCP statistics.
show udpconn   - Displays UDP connections.
show udpstats  - Displays UDP statistics.
show wins      - Displays the WINS server addresses.

As an example, here is the output of "netsh interface ip show config" on my Windows XP system:

C:\herong>netsh interface ip show config

Configuration for interface "Wireless Network Connection"
 DHCP enabled:                         Yes
 InterfaceMetric:                      0
 DNS servers configured through DHCP:  192.168.1.1
 WINS servers configured through DHCP: None
 Register with which suffix:           Primary only

Configuration for interface "Local Area Connection"
 DHCP enabled:                         Yes
 InterfaceMetric:                      0
 DNS servers configured through DHCP:  192.168.1.1
 WINS servers configured through DHCP: None
 Register with which suffix:           Both primary and connection
                                       -specific