portqry -n target [options]
TCP port 80 (http service): LISTENING portqry -n 192.168.1.10 -e 53 -p udp If listening, Portqry may even parse the DNS response. 6.3. Checking a Range of Ports portqry -n 10.0.0.5 -r 135,139,445 -p tcp Useful for quickly verifying SMB and RPC ports. 6.4. Using a Predefined Service (e.g., SQL Server) portqry -n sqlserver01 -o sql This checks TCP/1433 (default instance) and UDP/1434 (SQL Browser). Portqry will decode the SQL Browser response, showing instance names and ports. 7. Comparison with Other Tools | Tool | TCP | UDP | Range | Service Profiling | Firewall Detection | Default on Windows | |------|-----|-----|-------|--------------------|---------------------|---------------------| | Telnet | Yes | No | No | No | No | No (disabled) | | Test-NetConnection | Yes | No | Limited | No | Limited | Yes (PowerShell) | | nmap | Yes | Yes | Yes | Yes | Yes | No (third-party) | | Portqry | Yes | Yes | Yes | Yes | Yes | No (downloadable) | portqry