Question

. When running a scan on your computer, you find that a session has been established with a host at the address 208.85.40.44:80. Which Application layer protocol is in use for this session? What command-line utility might you use to determine which computer is the host?

Answer 1

The Application layer protocol in use for this session is likely Hypertext Transfer Protocol (HTTP), as port 80 is the default port for HTTP communication.

To determine which computer is the host at the given IP address, you can use the command-line utility "nslookup" (or "dig" in some cases) to perform a reverse DNS lookup.

For example, you can use the following command in the command prompt or terminal:

```
nslookup 208.85.40.44
```

This will provide you with the hostname associated with that IP address, giving you information about the host computer.