How to use Port Query Tool (PortQry.exe) in Windows 11/10

Port Query (PortQry.exe) is a command-furrow service program in the Windows operating system that you can use to help troubleshoot TCP/IP connectivity issues. The tool reports the larboard status of TCP and UDP ports on a estimator that you select. In this post, we will show you how to use the Port Query tool for web reconnaissance or forensic natural action.

Port Query (PortQry.exe) tool in Windows 11/10

Windows has many tools for diagnosing problems in Transmission control protocol/IP networks (pink, telnet, pathping, etc.). But not all of them take into account you to conveniently check the status or scan unsealed network ports on a server. The PortQry.exe utility is a convenient instrument to check the response of TCP/UDP ports on hosts to diagnose issues related to the operation of various network services and firewalls in Transmission control protocol/internet protocol networks. Most often, the Portqry utility is ill-used as a more functional replacement for telnet command, and unlike telnet, it also allows you to check open UDP ports.

Computer systems use TCP and UDP for most of their communication, and totally versions of Windows open many ports that provide useful functionality much as file sharing and unlikely procedure call (RPC). Withal, malicious programs such As Urban center horses john use ports nefariously to open a back threshold for attackers into your computer system. Whether you ask to troubleshoot a necessary network service or notice unwelcome programs, you pauperization to be able to understand and manage the traffic between computers on your network. A basic maltreat toward doing thus is determining which programs are listening on your information processing system systems' network ports.

How to habit Embrasure Query Instrument (PortQry.exe)

You dismiss use Porthole Query both locally and remotely on a server. To expend Portqry.exe, you will need to download the instrument. Once you download PortQry.exe, extract the PortQryV2.exe archive, then open command prompt and run the instruction below to go to the directory with the utility:

four hundred c:\PortQryV2

Alternatively, you send away navigate to the folder where you downloaded the creature to, and press Alt + D key jazz band, type CMD and hit Figure to launch command prompt within the directory.

You can now go on to utilise the tool.

Remotely use Larboard Query (PortQry.exe) tool

Port Query can glance over remote systems, but information technology's slow and unsophisticated compared with other port scanners. For example, unlike Nmap, PortQry.exe doesn't let you perform scans that enjoyment specified packet flags (e.g., SYN, FIN).

For example, to break the handiness of a DNS server from a client, you need to check if 53 TCP and UDP ports are raw connected it. The syntax of the port wine check command is as follows:

PortQry -n server [-p protocol] [-e || -r || -o end point(s)]

Where:

-n is the name or IP address of the server, which availability you are checking;
-e is the port list to be checked (from 1 to 65535);
-r is the set out of ports to be checked (for example, 1:80);
-p is the communications protocol in use for checking. It may be TCP, UDP or Some (TCP is used by nonremittal).

In our example, the command looks the likes of this:

PortQry.exe –n 10.0.25.6 -p both -e 53

Port Query Tool (PortQry.exe)

PortQry.exe derriere query a single porthole, an sequential list of ports, or a sequential vagabon of ports. PortQry.exe reports the position of a TCP/IP interface in one of the following three ways:

Hearing: A process is listening on the port on the computer that you selected. Portqry.exe received a answer from the port.
Not Listening: No process is listening on the aim port on the target system. Portqry.exe received an Internet Control Message Protocol (ICMP) "Destination Unreachable – Port Unreachable" message back from the target UDP port. Or if the target port is a TCP port, Portqry received a TCP recognition bundle with the Reset flag set.
Filtered: The port on the computer that you selected is being filtered. Portqry.exe did not welcome a response from the port. A process may or May not glucinium listening on the port. By default, Transmission control protocol ports are queried threefold, and UDP ports are queried one sentence before a report indicates that the port is filtered.

Topically use Port Query (PortQry.exe) puppet

What PortQry lacks in far scanning features information technology makes up for with its unique local-car capabilities. To enable local way, run over PortQry with the -local switch. When -section is the only transposition used, PortQry enumerates all local port custom and port-to-PID mapping. Or else of sorting the data by vulnerable port, PortQry lists it accordant to Pelvic inflammatory disease, letting you quickly see which applications have open network connections.

To watch left 80, you'd run over the command down the stairs:

portqry -local -wport 80

Using PortQryUI

Information technology's also worth mentioning that Microsoft as wel made available a graphical look end to PortQry, titled PortQryUI.

PortQryUI includes a interpretation of portqry.exe and some predefined services, which consist simply of groups of ports to run down.

The PortQueryUI contains different predefined sets of queries to check the availability of the touristed Microsoft services:

Domain and trusts (checking ADDS services on an Active Directory realm controller)
Exchange Server
SQL Host
Networking
IP Dry
Web Waiter
Net Meeting

To use the PortQryUI, enter the DNS name orInformation science address of the remote host, select one of the predefined services (Query predefined service), or set apart the port numbers for manual port check (Manually stimulation query ports) and click theQuery button.

Possible return codes in PortQueryUI is highlighted in the image above:

0 (0x00000000) – the connection has been established with success and the port is available.
1(0x00000001) – the specified port is unavailable or filtered.
2 (0x00000002) – a normal return code when checking the availability of a UDP connection, since ACK reply is not returned.

Hope this helps.

Read next: How to check what Ports are undecided?