Network Troubleshooting Tools
Overview
These tools are the first things reached for when something on a network isn't working — knowing them well speeds up both helpdesk work and later SOC investigation.
Key concepts
- ipconfig/ifconfig
- ping, tracert/traceroute
- nslookup
- netstat, ARP
- Wireshark
Tools & techniques
| Tool | Purpose | When to use |
|---|---|---|
| Wireshark | Packet capture and protocol inspection | Deep-dive traffic analysis |
| ping | Basic reachability test | First troubleshooting step |
| nslookup | DNS lookups | Diagnosing name-resolution issues |
How it works
Network troubleshooting is the process of identifying and resolving connectivity issues. Start with basic physical checks, then move systematically through the networking layers.
| Tool | Purpose | When to use |
|---|---|---|
| ipconfig | Displays Windows network configuration (IP, subnet mask, gateway, DNS) | First step in most Windows network issues |
| ping | Tests whether a device can reach another network destination | Basic connectivity check |
| tracert | Shows the route traffic takes to a destination (Windows) | Identifying where along a path traffic is failing |
| traceroute | Same as tracert, for Linux/macOS | Same as above, non-Windows systems |
| nslookup | Checks DNS information | Diagnosing DNS-resolution problems |
| netstat | Displays active connections, listening ports, protocol stats | Identifying what's communicating over the network |
| ARP | Links local IP addresses to MAC addresses | Viewing IP-to-MAC mappings |
| Wireshark | Captures and inspects network traffic | Deep protocol analysis, monitoring, security investigations |