pathping
Provides information about network latency and network loss at intermediate hops between a source and destination. Windows commands reference
On Windows 1 Sigma rule name it File pathping.exe
Windows
Provides information about network latency and network loss at intermediate hops between a source and destination. This command sends multiple echo Request messages to each router between a source and destination, over a period of time, and then computes results based on the packets returned from each router. Because this command displays the degree of packet loss at any given router or link, you can determine which routers or subnets might be having network problems. Used without parameters, this command displays help. NOTE: This command is available only if the Internet Protocol (TCP/IP) protocol is installed as a component in the properties of a network adapter in Network Connections. Additionally, this command identifies which routers are on the path, same as using the tracert command. However, this command also sends pings periodically to all of the routers over a specified time period and computes statistics based on the number returned from each.
pathping [/n] [/h <maximumhops>] [/g <hostlist>] [/p <Period>] [/q <numqueries> [/w <timeout>] [/i <IPaddress>] [/4 <IPv4>] [/6 <IPv6>][<targetname>]D:>pathping /n contoso1Tracing route to contoso1 [10.54.1.196]over a maximum of 30 hops:0 172.16.87.351 172.16.87.2182 192.168.52.13 192.168.80.14 10.54.247.145 10.54.1.196computing statistics for 125 seconds...Source to Here This Node/Link/nPrevents pathping from attempting to resolve the IP addresses of intermediate routers to their names. This might expedite the display of pathping results./h <maximumhops>Specifies the maximum number of hops in the path to search for the target (destination). The default is 30 hops./g <hostlist>Specifies that the echo Request messages use the Loose Source Route option in the IP header with the set of intermediate destinations specified in hostlist. With loose source routing, successive intermediate destinations can be separated by one or multiple routers. The maximum number of addresses or names in the host list is 9. The hostlist is a series of IP addresses (in dotted decimal notation) separated by spaces./p <period>Specifies the number of milliseconds to wait between consecutive pings. The default is 250 milliseconds (1/4 second). This parameter sends individual pings to each intermediate hop. Because of this, the interval between two pings sent to the same hop is period multiplied by the number of hops./q <numqueries>Specifies the number of echo Request messages sent to each router in the path. The default is 100 queries./w <timeout>Specifies the number of milliseconds to wait for each reply. The default is 3000 milliseconds (3 seconds). This parameter sends multiple pings in parallel. Because of this, the amount of time specified in the timeout parameter isn't bounded by the amount of time specified in the period parameter for waiting between pings./i <IPaddress>Specifies the source address./4 <IPv4>Specifies that pathping uses IPv4 only./6 <IPv6>Specifies that pathping uses IPv6 only.<targetname>Specifies the destination, which is identified either by IP address or host name./?Displays help at the command prompt.Windows
A trace route tool combining features of ping and tracert.
Ping and trace the route to a host
pathping hostnameIdentifyDo not perform reverse lookup of IP address to hostname
pathping hostname -nIdentify-nPrevents pathping from attempting to resolve the IP addresses of intermediate routers to their names. Windows commands referenceSpecify the maximum number of hops to search for the target (the default is 30)
pathping hostname -h max_hopsIdentify-hSpecifies the maximum number of hops in the path to search for the target (destination). Windows commands referenceSpecify the milliseconds to wait between pings (the default is 240)
pathping hostname -p timeIdentify-pSpecifies the number of milliseconds to wait between consecutive pings. Windows commands referenceSpecify the number of queries per hop (the default is 100)
pathping hostname -q queriesIdentify-qSpecifies the number of echo Request messages sent to each router in the path. Windows commands referenceForce IPv4 usage
pathping hostname -4IdentifyForce IPv6 usage
pathping hostname -6Identify