Please note, this version and future versions for ping, whois, tracert, and finger will not allow the use of pipes. Using pipes (|) allow other commands to be entered and executed when the program shells to dos, for more info or to obtain a copy of these programs that allow pipes, email sysop@glorb.com.
updated 8/12/99 I re-wrote ALL programs to use parameters, so you can now execute it by typing in Glorb  DOS by typeing ping glorb.com or whatever..... you can also set it up from the menu using a parameter and it will also work....



These utilities are designed for use with glorb dos but will work without it,  they all require the .pif file to be in your WC directry along with the .wcx files. Some require the exe file included in this arcive which belongs in your windows directry, for NT users, DO NOT overwrite the finger.exe file that comes with NT, I dont know if the one in this arcive is compatiable with NT or not, it's designed for 95/98. The DOS prompts it opens may stay open for a minute or 2, but you should not close the prompt as long as you think it's working, if I get too many complaints I will hide the DOS prompts, but if something goes wrong you wont be able to abort then by simpily closing the window... if you need updated copys of thes utilities or glorb dos go to http://www.glorb.com/stuff/software.htm or ftp://ftp.glorb.com:22 Now here is an overview of the utilities:

	ping



    Ping strangeness is a term used in a popular book on network design and troubleshooting to describe the incidence of an unusual pattern or frequency of ping messages in a network. Pings are used to determine the presence of particular Internet Protocol (IP) addresses on host computers in a network and the time it takes for the ping packet to return. Besides being a useful diagnostic tool, pings are sometimes used by router program ICMP requests so that network router tables can be kept up-to-date. 

The issuance of a ping request by a user or a program results in an Internet Control Message Protocol (ICMP) echo request. If the remote IP address is active, it responds with an ICMP echo reply. Ping can be used as an alternative to the traceroute utility to trace the hops or path that the ping echo takes through the network. Ping is faster, however, and generates less network traffic than traceroute. 

Using a network monitor like LANalyzer for Windows, a network administrator can follow a packet exchange. If, for example, the monitor shows a consistent pattern of unexplained pings occurring in the same time period as the packet exchange, this "strange" pattern may be worth investigating. A consistent and continual pattern would suggest that the pings were not the result of someone trying to attack the network (since the attack would be made too obvious) but rather that the hosts originating the pings had been programmed to issue them for some reason. For example, Synoptic hubs sometimes seek a network management station, an optional facility that Synoptic offers. The hubs will look for the management station using ICMP pings at frequent time intervals. If the management station doesn't exist, the pings will continue, causing unnecessary traffic. In this example, one solution would be to disable the Internet Protocol on each hub. 


example:
 


Microsoft(R) Windows 98
   (C)Copyright Microsoft Corp 1981-1999.

C:\WINDOWS>ping bbs.glorb.com

Pinging glorb.com [209.153.94.144] with 32 bytes of data:

Reply from 209.153.94.144: bytes=32 time=202ms TTL=115
Reply from 209.153.94.144: bytes=32 time=198ms TTL=115
Reply from 209.153.94.144: bytes=32 time=186ms TTL=115
Reply from 209.153.94.144: bytes=32 time=224ms TTL=115

Ping statistics for 209.153.94.144:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 186ms, Maximum =  224ms, Average =  202ms

C:\WINDOWS>


	Traceroute

Traceroute utility allows you to preform a trace from yoru computer to a destination host. The results indicate the route followed and the time taken to reach the destination, as well as the time taken to reach each intermediate hop. 

TraceRoute pings each hop (and the final destination) three times. Hence, three time values are reported. If a "*" is reported instead of a time, this means that no response was received in the allowed time from that hop for the corresponding attempt.
example:


Tracing route to www.above.net [207.126.96.163]
over a maximum of 30 hops:

  1    92 ms    95 ms   100 ms  pm1.cmh.qual.net [209.57.156.3]
  2    95 ms    96 ms    95 ms  eth10-0.csr0.co.oh.verio.net [209.57.156.1]
  3    87 ms    96 ms   101 ms  serial0-0.csr0.id.in.verio.net [131.103.4.34]
  4   104 ms   102 ms   115 ms  serial1-0.csr0.ci.il.verio.net [131.103.6.6]
  5   108 ms   102 ms   116 ms  serial12-0.csr8.or.il.verio.net [131.103.6.1]
  6   106 ms   103 ms   109 ms  qualnet-1.ord0-1.verio.net [129.250.16.109]
  7   156 ms   152 ms   152 ms  ord0.sea2.verio.net [129.250.2.221]
  8   160 ms   154 ms   154 ms  sea2.sea3.verio.net [129.250.2.230]
  9   155 ms   155 ms   152 ms  above-verio-oc3.sea.above.net [209.249.0.89]
 10   175 ms   172 ms   174 ms  sjc-sea-oc3.sjc.above.net [216.200.0.185]
 11   174 ms   172 ms   171 ms  main2-core1-oc3-1.sjc.above.net [209.133.31.185]

 12   179 ms   178 ms   174 ms  www.above.net [207.126.96.163]

Trace complete.

	Finger

If an account is fingerable, fingering that account will tell you various information about that account. What information is returned varies from account to account. Usually there is information such as the real name of the person whose account it is, the last time they logged into that account, and perhaps a "plan" file. 

Some accounts, however, are not fingerable. This is because: 

The system hosting the account has chosen not to run a finger server. Reasons may be privacy concern or just feeling it is unnecessary. Most .edu accounts have finger. Many .net and .org accounts have finger. It is rarer on .com accounts. 
E-mail address might not be their actual account. For example, University of Illinois had aliases so that everyone had similar looking e-mail addresses that were easier to remember. But it was not a real account. Fingering "a-starr1@uiuc.edu" would not work, as my real account was "atstarr@ux1.cso.uiuc.edu," which could be fingered. 
Wrong form of e-mail address. (i.e. sometimes a return address might be joe@pop1.mailer.college.edu" -- try fingering joe@college.edu 
System might just be down temporarily; try again later. 

The time/date of last login is no longer a good barometer of when the person last used their account. People used to login to their "shell" (unix, vax, etc.) account quite often. Some still do. But many people rarely use their shell account, but still use the account for e-mail via a mail program on their desktop computer. Thus a person may still be checking mail daily but be registered as not having logged in for months. Other systems routinely return "Never logged in" for all accounts.< 

Plan files are a lost art. I think of plans as precursors to Web pages. They are text files that can be short or long, and give whatever information a person wishes to put there, whether it be office hours, witty quotes, etc. Some machines only allow the plans to be read when someone is fingering from the same system. 

Example:

C:\WINDOWS>finger @users.qual.net

[users.qual.net]
Login       Name               TTY         Idle    When    Where
sammy    Sam Creasey           pts/11        3d Tue 09:46  stargate.ttc.com
sammy    Sam Creasey           pts/17        3d Tue 11:20  stargate.ttc.com
craigs   Craig Simons          pts/2         2d Fri 08:27  craigs.hq.iagnet.net
sammy    Sam Creasey           pts/0       9:20 Sun 08:43  dhcp9545107.columbus
ravi     Ravi Pina             pts/8        13d Sun 20:30  frodo.oh.verio.net
sammy    Sam Creasey           pts/1       9:33 Sun 10:49  dhcp9545107.columbus
gbrozny  Geoff Brozny          pts/3            Sun 20:28  jh.glorb.com
dever    Douglas Dever         pts/16        2d Tue 12:40  dever.csg.hq.oh.veri
ravi     Ravi Pina             pts/9         2d Tue 14:04  frodo.oh.verio.net
dever    Douglas Dever         pts/14        2d Tue 12:40  dever.csg.hq.oh.veri
ravi     Ravi Pina             pts/13      2:07 Tue 15:34  198.88.25.66:S.0
 
	Netstat

Netstat shows the current connections to your computer, it's good to use if you have traffic taht your not sure where it's coming from, but it dosnt show ICMP traffic (from pings and other stuff)

Example:

C:\WINDOWS>netstat

Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    jh:1580                users.qual.net:telnet  ESTABLISHED
  TCP    jh:1461                glorb.com:telnet       ESTABLISHED
  TCP    jh:1534                tgsv7.nws.noaa.gov:80  CLOSE_WAIT

	Whois

WhoIs is used tosee if a domain is registered and/or to see who it is registered to

Example:

WhoIs v1.0 by Geoff Brozny, bbs.glorb.com

Enter domain name > glorb.com
glorb.com


Registrant:

Glorb BBS (GLORB2-DOM)

   370 Westerdale Drive

   Gahanna, OH 43230-3633

   US



   Domain Name: GLORB.COM



   Administrative Contact:

      Brozny, Geoff  (GB8233)  sysop@GLORB.COM

      614-337-9824

   Technical Contact, Zone Contact:

      Cloe, Jerry  (JC5407)  jerry@UNIX1.IT21.COM

      816-241-3282

   Billing Contact:

      Brozny, Geoff  (GB8233)  sysop@GLORB.COM

      614-337-9824



   Record last updated on 25-Jan-99.

   Record created on 25-Jan-99.

   Database last updated on 4-Jul-99 08:37:40 EDT.



   Domain servers in listed order:



   NAME1.IT21.COM               209.153.94.131

   NAME2.IT21.COM               209.153.94.130





You agree that you will not reproduce, sell, transfer, or

modify any of the data presented in response to your search request, or

use of any such data for commercial purpose, without the prior

express written permission of Network Solutions.





