Question

When running a scan on your computer, you find that a session has been established
with a host at the address 208.85.40.44:80. Which Application layer protocol is in use
for this session? What command-line utility might you use to determine which
computer is the host?

Answer 1

The Application layer protocol in use for this session is likely HTTP (Hypertext Transfer Protocol), as port 80 is commonly used for HTTP communication.

To determine which computer is the host at the given IP address, you can use the command-line utility called "nslookup" (short for Name Server Lookup). The nslookup command allows you to query DNS (Domain Name System) information to obtain the hostname associated with a specific IP address.

To determine the host, you can run the following command in the command prompt or terminal:

nslookup 208.85.40.44

This will provide you with the corresponding hostname of the IP address, indicating which computer is the host.