Master Windows Network Troubleshooting: Essential Commands and Their Usage

Ping Command

The ping utility tests network connectivity by sending ICMP echo requests and measuring round‑trip time in milliseconds. A successful ping indicates that the network interface, cable, modem, and router are functioning, while the displayed TTL value helps estimate the number of hops.

Basic syntax :

ping hostname

ping domain

ping IP_address

Typical output shows four packets sent and received, confirming a healthy connection.

IPConfig Command

ipconfig

displays the current TCP/IP configuration of each network interface, including IP address, subnet mask, and default gateway. It also shows DHCP lease information when the interface obtains its address dynamically.

Common options : ipconfig – shows basic IP settings for all adapters. ipconfig /all – includes DNS servers, WINS servers, MAC address, and DHCP lease details. ipconfig /release – releases the DHCP‑assigned address. ipconfig /renew – requests a new DHCP lease.

ARP Command

Address Resolution Protocol (ARP) maps IP addresses to MAC (physical) addresses. arp can display the ARP cache, add static entries, or delete them.

Typical usage : arp -a – list all ARP cache entries. arp -a IP_address – show entries for a specific interface. arp -s IP_address MAC_address – add a static ARP entry. arp -d IP_address – delete a specific ARP entry.

Traceroute (Tracert) Command

tracert

(Windows name for traceroute) displays the path packets take to reach a destination host, listing each hop and the round‑trip times for three probes.

Output columns:

Hop number

First RTT

Second RTT

Third RTT

Router name and IP address

If a hop replies with fewer than three responses, an asterisk (*) appears, indicating possible packet loss.

Route Command

The route utility shows, adds, changes, or deletes entries in the IP routing table. route print – display the current routing table. route add destination mask netmask gateway metric n – add a static route. route change destination mask netmask gateway metric n – modify an existing route. route delete destination – remove a route.

NSLookup Command

nslookup

queries DNS servers to resolve hostnames to IP addresses (and vice‑versa). It is useful for verifying DNS configuration and troubleshooting name resolution problems.

Netstat Command

netstat

reports active TCP connections, listening ports, Ethernet statistics, IP routing tables, and protocol‑specific counters. netstat -a – show all connections and listening ports. netstat -n – display addresses numerically. netstat -e – Ethernet statistics (bytes sent/received, errors, etc.). netstat -r – display the routing table (similar to route print). netstat -s – per‑protocol statistics.

Net Command

The net suite provides a collection of network‑related utilities for managing services, shares, users, and more. Common sub‑commands include: net accounts – view account policies. net config – display network configuration statistics. net group – list domain groups. net print – manage printer queues. net send – send messages to other computers. net share – list shared resources. net start – start a service. net stop – stop a service. net use – map a network share to a drive letter. net user – view local user accounts. net view – list computers on the network.

All net commands support the /y (automatic yes) and /n (prompt) switches for batch operations.

Practical Troubleshooting Workflow

A typical diagnostic sequence starts with ping 127.0.0.1 to verify the local TCP/IP stack, then ping the host’s own IP, followed by pinging another device on the LAN, the default gateway, a remote IP, and finally a public domain (e.g., ping www.yahoo.com). If all pings succeed, basic connectivity is confirmed, though deeper issues such as subnet mask errors may still exist.

Additional exercises include comparing ping results for load‑balanced domains, analyzing traceroute latency patterns, and observing route changes over time to understand network dynamics.