Port Query (PortQry.exe) waa utility-line utility ee nidaamka hawlgalka Windows oo aad isticmaali karto si ay u caawiyaan cilad TCP/IP arrimaha isku xirka . Qalabku wuxuu ka warbixiyaa xaaladda dekedda TCP iyo dekedaha UDP ee kumbuyuutarka aad dooratay. Maqaalkan, waxaan ku tusi doonaa sida loo isticmaalo aalada weydiinta Port^{(Port Query)} ee sahanka shabkada ama dhaqdhaqaaqa dambi baarista.

Qalabka PortQry^{(Port Query)} ( PortQry.exe ) ee ku jira Windows 11/10

Windows waxay leedahay qalab badan oo lagu garto dhibaatooyinka TCP/IP (ping, telnet , pathping, iwm.). Laakin dhamaantood ma ogola in aad si ku haboon u hubiso heerka ama iskaan ka qaadida dekedaha shabakada ee laga furay server-ka. Utility PortQry.exe^{(PortQry.exe)} waa qalab ku habboon in lagu hubiyo jawaabta dekedaha TCP/UDP ee martida loo yahay si loo ogaado arrimaha la xiriira hawlgalka adeegyada shabakadaha kala duwan iyo dab-damiska ee TCP/IP . Inta badan, utility Portqry waxaa loo istcimaalaa beddelka shaqeynta badan ee taliska telnet, oo ka duwan telnet, waxay sidoo kale kuu ogolaaneysaa inaad hubiso dekedaha UDP ee furan.^(UDP)

Nidaamyada kombiyuutarada^(Computer) waxay isticmaalaan TCP iyo UDP inta badan isgaarsiintooda, iyo dhammaan noocyada Windows waxay furaan dekedo badan oo bixiya hawlo faa'iido leh sida wadaagista faylka iyo wicitaanka habraaca fog ( RPC ). Si kastaba ha ahaatee, barnaamijyada xaasidnimada ah sida Trojans horses waxay isticmaali karaan dekedaha si aan fiicnayn si ay albaab dambe ugu furaan kuwa weeraray nidaamka kombiyuutarkaaga. Haddi aad u baahan tahay in aad cilad saarto adeega shabakada lagama maarmaanka ah ama aad ogaato barnaamijyada aanad rabin, waxa aad u baahantahay in aad fahanto oo aad maamusho taraafikada udhaxaysa kombayutarada shabakadaada Tillaabada aasaasiga ah ee sidaas loo samaynayo waa go'aaminta barnaamijyada ka dhegaysanaya nidaamyada shabakadaha kombuyuutarkaaga.

Sida loo isticmaalo Qalabka Weydiinta Dekedda^{(Port Query Tool)} ( PortQry.exe )

Waxaad isticmaali kartaa Weydiinta Dekedda^{(Port Query)} gudaha iyo meel fogba server-ka. Si aad u isticmaasho Portqry.exe , waxaad u baahan doontaa inaad soo dejiso qalabka. Markaad soo dejiso^(download) PortQry.exe, soo saar kaydka PortQryV2.exe , ka dib fur degdegga oo socodsii amarka hoose si aad u gasho tusaha utility:

cd c:\PortQryV2

Haddii kale, waxaad u socon kartaa galka meesha aad ka soo dejisay aaladda, oo riix Alt + D furaha combo, ku qor CMD oo ku dhufo Gelida^(Enter) si aad u bilowdo amar degdeg ah gudaha tusaha.

Hadda waxaad sii wadi kartaa isticmaalka qalabka.

Si fog u isticmaal Qalabka Weydiinta Dekedda^{(Port Query)} ( PortQry.exe ).

Weydiinta Dekeddu^{(Port Query)} waxay baari kartaa nidaamyada fog, laakiin waa mid gaabis ah oo aan casri ahayn marka la barbar dhigo sawir-qaadayaasha kale ee dekedda. Tusaale ahaan, si ka duwan Nmap , PortQry.exe kuma ogola inaad sameyso sawiro isticmaalaya calamada xirmada ee cayiman (tusaale, SYN , FIN ).

Tusaale ahaan, si aad u hubiso helitaanka server-ka DNS ee macmiilka, waxaad u baahan tahay inaad hubiso in 53 TCP iyo UDP ay ku furan yihiin. Xeerka hubinta dekeddu waa sida soo socota:

PortQry -n server [-p protocol] [-e || -r || -o endpoint(s)]

Halkee:

• -n waa magaca ama cinwaanka IP-ga ee server-ka, kaas oo la heli karo oo aad hubinayso;
• -e  waa lambarka dekedda ee la hubinayo (laga bilaabo 1 ilaa 65535);
• -r  waa tirada dekedaha la hubinayo (tusaale ahaan, 1:80);
• -p  waa borotokoolka loo isticmaalo hubinta. Waxay noqon kartaa TCP , UDP ama LABADA^(BOTH) ( TCP waxaa loo istcimaalaa si caadi ah).

Tusaalahayaga, amarku wuxuu u eg yahay sidan:

PortQry.exe –n 10.0.25.6 -p both -e 53

PortQry.exe waxay waydiin kartaa hal deked, liis la amray oo dekedo ah, ama tiro dekedo ah oo xidhiidhsan. PortQry.exe waxay ka warbixisaa xaaladda dekedda TCP/IP mid ka mid ah saddexda dariiqo ee soo socda:

• Dhagaysi^(Listening) : Nidaam ayaa ka socda dhageysiga dekedda kumbuyuutarka aad dooratay. Portqry.exe ayaa jawaab ka heshay dekedda.
• Dhageysi^{(Not Listening)} La'aan : Ma jiro habraac lagu dhageysanayo dekedda la beegsanayo ee nidaamka bartilmaameedka. Portqry.exe waxa ay heshay hab -maamuuska Farriinta Xakamaynta Intarneetka^{(Internet Control Message Protocol)} ( ICMP ) "Destin Unreachable - Port Unreachable" fariinta dib uga soo noqotay bartilmaameedkii UDP . Ama haddii dekeddu tahay deked TCP ah, Portqry waxay heshay baakidhka qirashada TCP oo leh  calanka Dib -u-dejinta.^(Reset)
• Filtered : Dekadda kombiyuutarka aad dooratay waa la shaandheynayaa. Portqry.exe wax jawaab ah kamay helin dekedda. Nidaamku waa laga yaabaa ama laga yaabaa in laga dhegeysto dekedda. Sida caadiga ah, dekedaha TCP ayaa la waydiiyaa saddex jeer, dekedaha UDP - na waxa la waydiiyaa hal mar ka hor inta aanay warbixintu muujinin in dekeda la sifeeyo.

Maxali ahaan u isticmaal Qalabka Weydiinta Dekedda^{(Port Query)} ( PortQry.exe ).

Waxa PortQry ka maqan sifooyinka iskaanka fog ee ay ka kooban tahay awoodeeda mishiinka maxaliga ah ee gaarka ah. Si aad awood ugu yeelatid habka maxaliga ah, ku orod PortQry - ga beddelka- maxalli^(-local) ah. Marka -maxaligu^(-local) yahay bedelka kaliya ee la isticmaalo, PortQry waxa ay xisaabinaysaa dhammaan isticmaalka dekedaha iyo khariidaynta -dekedda- PID . Halkii xogta lagu kala sooci lahaa deked furan, PortQry waxay taxaysaa si waafaqsan PID , taasoo kuu ogolaanaysa inaad si dhakhso ah u aragto codsiyada leh xidhiidhada furan.

Si aad u daawato dekedda 80, waxaad socodsiin doontaa amarka hoose:

portqry -local -wport 80

Isticmaalka PortQryUI

Waxa kale oo xusid mudan in Microsoft ay sidoo kale diyaarisay^{(Microsoft also made available)} dhinaca hore ee garaafka PortQry , oo loo yaqaan PortQryUI .

PortQryUI waxa ku jira nooca portqry.exe iyo adeegyo hore loo sii qeexay, kuwaas oo ka kooban kooxo dekedo ah si loo sawiro.

PortQueryUI waxay^{(PortQueryUI)} ka kooban tahay dhawr nooc oo su'aalo ah oo horay loo sii qeexay si loo hubiyo helitaanka adeegyada caanka ah ee Microsoft :

• Domain iyo trusts ( hubinta adeegyada ADDS ee maamulaha bogga Hagaha Firfircoon)
• Adeegaha Sarrifka
• SQL Server
• Isku xirka
• IP Sek
• Adeegaha Shabakadda
• Kulanka saafiga ah

Si aad u isticmaasho PortQryUI, geli magaca DNS^{(DNS name)}  ama  ciwaanka IP-ga^{(IP address)}  ee server-ka fog, dooro mid ka mid ah adeegyada horay loo sii qeexay ( Query predefined service )^(Query) ,   ama cadee nambarada dekedaha ee hubinta dekada gacanta^{(Manually input query ports)}

Koodhadhka soo celinta suurtagalka ah ee PortQueryUI ayaa lagu muujiyay sawirka kore:

• 0 (0x0000000) - isku xirka ayaa si guul leh loo aasaasay dekedduna waa diyaar.
• 1  (0x00000001) - dekedda la cayimay lama heli karo ama la sifeeyay.
• 2 (0x00000002) - koodka soo celinta caadiga ah marka la hubinayo helitaanka xiriirka UDP , maadaama jawaabta ACK aan la soo celin.^(ACK)

Rajo in tani ay ku caawiso.

Akhri marka xigta^{(Read next)} :  Sidee loo hubin karaa inay furan yihiin Dekeduhu^{(How to check what Ports are open)} ?

How to use Port Query Tool (PortQry.exe) in Windows 11/10

Port Query (PortQry.exe) is a command-line utility in the Windows operating system that you can use to help troubleshoot TCP/IP connectivity issues. The tool reports the port status of TCP and UDP ports on a computer that you select. In this post, we will show you how to use the Port Query tool for network reconnaissance or forensic activity.

Port Query (PortQry.exe) tool in Windows 11/10

Windows has many tools for diagnosing problems in TCP/IP networks (ping, telnet, pathping, etc.). But not all of them allow you to conveniently check the status or scan opened network ports on a server. The PortQry.exe utility is a convenient tool to check the response of TCP/UDP ports on hosts to diagnose issues related to the operation of various network services and firewalls in TCP/IP networks. Most often, the Portqry utility is used as a more functional replacement for telnet command, and unlike telnet, it also allows you to check open UDP ports.

Computer systems use TCP and UDP for most of their communication, and all versions of Windows open many ports that provide useful functionality such as file sharing and remote procedure call (RPC). However, malicious programs such as Trojan horses can use ports nefariously to open a back door for attackers into your computer system. Whether you need to troubleshoot a necessary network service or detect unwanted programs, you need to be able to understand and manage the traffic between computers on your network. A basic step toward doing so is determining which programs are listening on your computer systems’ network ports.

How to use Port Query Tool (PortQry.exe)

You can use Port Query both locally and remotely on a server. To use Portqry.exe, you will need to download the tool. Once you download PortQry.exe, extract the PortQryV2.exe archive, then open command prompt and run the command below to go to the directory with the utility:

cd c:\PortQryV2

Alternatively, you can navigate to the folder where you downloaded the tool to, and press Alt + D key combo, type CMD and hit Enter to launch command prompt within the directory.

You can now proceed to use the tool.

Remotely use Port Query (PortQry.exe) tool

Port Query can scan remote systems, but it’s slow and unsophisticated compared with other port scanners. For example, unlike Nmap, PortQry.exe doesn’t let you perform scans that use specified packet flags (e.g., SYN, FIN).

For example, to check the availability of a DNS server from a client, you need to check if 53 TCP and UDP ports are open on it. The syntax of the port check command is as follows:

PortQry -n server [-p protocol] [-e || -r || -o endpoint(s)]

Where:

• -n is the name or IP address of the server, which availability you are checking;
• -e is the port number to be checked (from 1 to 65535);
• -r is the range of ports to be checked (for example, 1:80);
• -p is the protocol used for checking. It may be TCP, UDP or BOTH (TCP is used by default).

In our example, the command looks like this:

PortQry.exe –n 10.0.25.6 -p both -e 53

PortQry.exe can query a single port, an ordered list of ports, or a sequential range of ports. PortQry.exe reports the status of a TCP/IP port in one of the following three ways:

• Listening: A process is listening on the port on the computer that you selected. Portqry.exe received a response from the port.
• Not Listening: No process is listening on the target port on the target system. Portqry.exe received an Internet Control Message Protocol (ICMP) “Destination Unreachable – Port Unreachable” message back from the target UDP port. Or if the target port is a TCP port, Portqry received a TCP acknowledgment packet with the Reset flag set.
• Filtered: The port on the computer that you selected is being filtered. Portqry.exe did not receive a response from the port. A process may or may not be listening on the port. By default, TCP ports are queried three times, and UDP ports are queried one time before a report indicates that the port is filtered.

Locally use Port Query (PortQry.exe) tool

What PortQry lacks in remote scanning features it makes up for with its unique local-machine capabilities. To enable local mode, run PortQry with the -local switch. When -local is the only switch used, PortQry enumerates all local port usage and port-to-PID mapping. Instead of sorting the data by open port, PortQry lists it according to PID, letting you quickly see which applications have open network connections.

To watch port 80, you’d run the command below:

portqry -local -wport 80

Using PortQryUI

It’s also worth mentioning that Microsoft also made available a graphical front end to PortQry, called PortQryUI.

PortQryUI includes a version of portqry.exe and some predefined services, which consist simply of groups of ports to scan.

The PortQueryUI contains several predefined sets of queries to check the availability of the popular Microsoft services:

• Domain and trusts (checking ADDS services on an Active Directory domain controller)
• Exchange Server
• SQL Server
• Networking
• IP Sec
• Web Server
• Net Meeting

To use the PortQryUI, enter the DNS name or IP address of the remote server, select one of the predefined services (Query predefined service), or specify the port numbers for manual port check (Manually input query ports) and click the Query button.

Possible return codes in PortQueryUI is highlighted in the image above:

• 0 (0x00000000) – the connection has been established successfully and the port is available.
• 1 (0x00000001) – the specified port is unavailable or filtered.
• 2 (0x00000002) – a normal return code when checking the availability of a UDP connection, since ACK response is not returned.

Hope this helps.

Read next: How to check what Ports are open?

Related posts

• Daar xiriirinta Shabakadda intaad ku jirto heeganka casriga ah Windows 11/10

• Sida loo khariidado Network Drive ama loogu daro FTP Drive gudaha Windows 11/10

• Sida loo maareeyo Xadka Isticmaalka Xogta ee Windows 11/10

• Sida loogu awood DNS ka badan HTTPS gudaha Windows 11/10

• Sida loo arko macluumaadka Shabakadda Wi-Fi ee darawalka Windows 11/10

• Kombiyuutarka fog ma shaqaynayo ama kuma xidhi doono gudaha Windows 11/10

• Sida loo sahlo iskaanka shabakada gudaha Windows Defender on Windows 11/10

• Sida loo khariideeyo WebDAV sida Shabakad Drive-ka ah gudaha Windows 11/10

• Daar ama dami LMHOSTS Raadinta gudaha Windows 11/10

• Daar ama dami Helitaanka Shabakadda ama Wadaagista gudaha Windows 11/10

• Cilad ayaa dhacday markii dib loo cusboonaysiinayay interface Ethernet Windows 11/10

• Hagaaji internet ma jiro, khalad WiFi sugan oo ku jira Windows 11/10 [Go'an]

• Sida dib loogu dejiyo Winsock gudaha Windows 11/10

• Daaqadaha ma heli karaan Settings Network router-ka gudaha Windows 11/10

• Ku samee Hantidhawrka Shabakadda leh Alloy Discovery Express ee Windows 11/10

• Gudbinta Ping ayaa ku guuldareysatay Khaladka guud ee fashilka gudaha Windows 11/10

• Ikhtiyaarka lagu beddelayo Shabakadda Dadweynaha loona beddelo mid gaar ah ayaa ka maqan Windows 11/10

• Ma arki karo kombiyuutarada kale ee shabakadayda gudaha Windows 11/10

• Sida loo beddelo ama loo beddelo Magaca Shabakadda Shabakadda firfircoon ee gudaha Windows 11/10

• Sida loo beddelo goobaha DNS gudaha Windows 11/10 si fudud