netstat, arp and route print on the client
See which connections and listening ports a PC has and which process owns them, spot duplicate IPs and gateway MAC changes with ARP, and read the routing table and metrics.
- Level
- Intermediate
- Length
- About 45 minutes
- Contents
- 3 lessons · 1 video · final exam
- Status
- Published · updated 1 Oct 2026
Skills you'll practise
- Use netstat -ano with Get-Process to find which process owns a connection or port
- Read connection states (LISTENING, ESTABLISHED, SYN_SENT, TIME_WAIT) and what they imply
- Use arp -a to spot duplicate IPs or a changed gateway MAC
- Read route print to see which adapter and gateway traffic will use
Course outline
- 1.netstat, arp and route print on the clientVideo · 5 min
- 2.Connections and ports: netstat -anoLesson · 14 min
- 3.ARP and the routing tableLesson · 14 min
- 4.Connection states and finding the process behind a portLesson · 12 min
- 5.netstat, arp and route print on the client: knowledge checkKnowledge check · 18 questions
- 6.netstat, arp and route print on the client: practical exerciseKnowledge check · 1 question
- 7.Final exam8 questions · passing it completes the course, so people who already know the material can test out
Sources it draws on
The lessons and questions are written from these references, so learners can go back to the original.
- Microsoft Learn: netstat command reference
- Microsoft Learn: arp command reference
- Microsoft Learn: route command reference
- RFC 826: An Ethernet Address Resolution Protocol
See it with your own jobs and topics
Tell us about your team and we'll walk you through setup, from choosing jobs to your first skills check.