Command-Line Network Tools
ping: tests Layer 3 connectivity using ICMP echo requests. Confirms whether a host is reachable and measures RTT. 'ping 8.8.8.8' — if no response, check routing and firewall. 'Request timeout' = ICMP blocked or host unreachable. 'Destination host unreachable' = no route to host.
traceroute (Windows: tracert): shows the path packets take to a destination, listing each hop's IP and RTT. Identifies where in the path connectivity fails. A '*' indicates that hop doesn't respond to ICMP — may still be forwarding traffic. traceroute uses ICMP (Windows) or UDP (Linux/macOS) with incrementing TTL values.
nslookup / dig: query DNS servers. 'nslookup google.com' resolves the name. 'nslookup -type=MX google.com' queries MX records. 'nslookup google.com 8.8.8.8' queries a specific DNS server. dig provides more detailed DNS output. Both diagnose DNS resolution failures.
ipconfig (Windows) / ifconfig (Linux, deprecated) / ip addr (Linux): displays IP configuration — IP address, subnet mask, default gateway, DNS servers. 'ipconfig /all' shows full details including MAC address and DHCP lease info. 'ipconfig /release' releases DHCP lease; 'ipconfig /renew' requests new lease. 'ipconfig /flushdns' clears local DNS cache.
netstat: displays active connections, listening ports, and network statistics. 'netstat -an' shows all connections and listening ports with numeric addresses. 'netstat -rn' shows the routing table. Useful for identifying what services are listening and current connections to/from a system.
arp -a: displays the ARP cache (IP to MAC mappings known to the local device). Useful for identifying duplicate IPs (two different MACs for the same IP) and verifying Layer 2 reachability.
Physical and Wireless Tools
Cable tester: verifies correct pin-to-pin wiring and continuity of twisted pair cables. Identifies opens, shorts, miswires (crossed pairs), and split pairs. Basic and inexpensive — every network technician should have one.
TDR (Time Domain Reflectometer): sends a pulse down a copper cable and measures reflections to locate faults — opens, shorts, or impedance changes. Reports the distance to the fault. Essential for diagnosing cable breaks in walls or conduit.
OTDR (Optical Time Domain Reflectometer): same concept as TDR but for fiber optic cables. Measures light reflections to locate fiber breaks, connector losses, and splice losses. Generates a signature trace of the fiber link.
Toner probe (Fox and Hound / tone generator): the tone generator connects to a cable and sends an audible tone. The probe detects the tone to identify which cable in a bundle corresponds to a specific connection — used for tracing cable runs in walls or patch panels.
Spectrum analyzer: detects wireless interference and identifies the frequency and source of RF interference. Identifies non-802.11 interference (microwave ovens, cordless phones, Bluetooth) that degrades Wi-Fi. Wi-Fi analyzers show SSID details, signal strength, channel usage.