You administer Windows 8.1 client computers in your company network.
A user reports that her Internet connection is slower than usual.
You need to identify the Process Identifiers (PIDs) of applications that are making connections to the Internet.
Which command should you run?
A. netstat -an
B. jpconfig /showclassid
C. netstat -o
D. netsh set audit-logging
E. netsh show netdlls
Correct Answer: C
Explanation/Reference:
http://technet.microsoft.com/en-us/library/bb490947.aspx
Netstat
Displays active TCP connections, ports on which the computer is listening, Ethernet statistics, the IP routing table, IPv4 statistics (for the IP, ICMP, TCP, and UDP protocols), and IPv6 statistics (for the IPv6, ICMPv6, TCP over IPv6, and UDP over IPv6 protocols). Used without parameters, netstat displays active TCP connections.
Syntax
netstat [-a] [-e] [-n] [-o] [-p Protocol] [-r] [-s] [Interval]
Parameters
-a : Displays all active TCP connections and the TCP and UDP ports on which the computer is listening. -n : Displays active TCP connections, however, addresses and port numbers are expressed numerically and no attempt is made to determine names.
-o : Displays active TCP connections and includes the process ID (PID) for each connection. You can find the application based on the PID on the Processes tab in Windows Task Manager. This parameter can be combined with -a, -n, and -p.
…
Further Information:
netstat -an - there is no "an" parameter
http://technet.microsoft.com/en-us/library/cc940124.aspx
Ipconfig
/showclassid < adapter >
Displays all the DHCP class IDs allowed for the adapter specified.
http://technet.microsoft.com/sv-se/library/cc785383%28v=ws.10%29.aspx The Netsh Command-Line Utility
set audit-logging
Turns on or off the logging facility.
show netdlls
Displays the current version of installed Netsh helper DLLs.