2. When running a scan on your computer, you find that a session has been established

with a host at the address 208.85.40.44:80. Which Application layer protocol is in use
for this session? What command-line utility might you use to determine which
computer is the host?

1 answer

The Application layer protocol that is likely in use for this session is HTTP (Hypertext Transfer Protocol), as port 80 is commonly used for HTTP communication.

To determine which computer is the host at the IP address 208.85.40.44, you can use the command-line utility called "nslookup" or "ping" on most operating systems. Here's how you can use each utility:

1. nslookup:
- Open a command prompt or terminal.
- Type the following command: nslookup 208.85.40.44
- Press Enter.
- The utility will display the hostname associated with that IP address, if available.

2. ping:
- Open a command prompt or terminal.
- Type the following command: ping 208.85.40.44
- Press Enter.
- The utility will display the IP address and hostname (if available) of the host computer, as well as the status of the connection.

Note: These commands may vary depending on your operating system.