Nowadays, there are many open-source networking tools available in Linux Based Systems to perform network troubleshooting activities. Netcat is one such tool. Netcat (nc) command in Linux is used for various purposes like checking the status of remote ports, initiating chat services between server and client, listening on some ports for incoming connections etc.

Here, we will only look into the steps to install Netcat as the package does not come by default in RedHat Based systems, so we need to install it manually using the below steps.

To install netcat

We are going to install netcat on Ubuntu 18.04 machine using apt install or compiling it from source code.

Installation using apt is pretty simple, you just need to type the following command in the terminal:

sudo apt install netcat

To install netcat from source code

Compiling netcat from source code is not as easy as installing via apt install, but if you follow the steps below you can install it easily.

Download the source code from netcat website with the following command

wget http://sourceforge.net/projects/netcat/files/netcat/0.7.1/netcat-0.7.1.tar.gz

Extract the newly downloaded archive. To do so you can run:

tar -xzvf netcat-0.7.1.tar.gz

cd to the directory containing the package's source code and type ./configure to configure the package for your system.

cd netcat-0.7.1
./configure

If you are getting error message like this - "no acceptable C compiler found in $PATH" when running ./configure command, make sure you have installed gcc compiler. To install it type the following command:

apt-get install build-essential

Running configure takes awhile.

Once configure has been successfully finished run:

sudo make

and

sudo make install

You can remove the program binaries and object files from the source code directory by typing make clean. To also remove the files that configure created, run make distclean command.

How to use netcat

Before starting to explore some netcat commands it's important to know that if you are binding to well-known ports (0-1023) with nc, you need root privilege. Otherwise, you can run nc as a normal user.

1. Test if a particular TCP port of a remote host is open

nc -vn 184.145.20.128 2424

Output if the 2424 port on remote server is closed

nc: connect to 184.145.20.128 port 2424 (tcp) failed: Connection refused

Output if the port on remote server is opened (e.g. 22 port)

Connection to 184.145.20.128 22 port [tcp/*] succeeded!
SSH-2.0-OpenSSH_7.6p1 Ubuntu-4

2. Perform TCP port scanning against a remote host

The command below will check the ports from 20 to 25 on the remote host and print the result.

nc -vnz -w 1 184.145.20.128 20-25

Output will look like this

nc: connect to 184.145.20.128 port 20 (tcp) failed: Connection refused
nc: connect to 184.145.20.128 port 21 (tcp) failed: Connection refused
Connection to 184.145.20.128 22 port [tcp/*] succeeded!
nc: connect to 184.145.20.128 port 23 (tcp) failed: Connection refused
nc: connect to 184.145.20.128 port 24 (tcp) failed: Connection refused
nc: connect to 184.145.20.128 port 25 (tcp) failed: Connection refused

3. Perform UDP port scanning against a remote host

nc -vnzu 184.145.20.128 1-65535

Output will show only the ports which allow udp connections.

Connection to 184.145.20.128 2424 port [udp/*] succeeded!
Connection to 184.145.20.128 12354 port [udp/*] succeeded!

4. Send a test UDP packet to a remote host

echo -n "udp test" | nc -u -w1 184.145.20.128 2424

The command above will send a test UDP packet with 1 second timeout to a remote host at port 2424

5. Copy a file (e.g., test.txt) from one host to another

On the receiver host (184.145.20.128 in my case) run:

nc -lp 2424 > test.txt

On the sender host (184.145.20.126) run the following command:

nc 184.145.20.128 2424 < test.txt

This will copy test.txt file from sender host to receiver host via 2424 port. make sure to allow incoming connections on 2424 port on the receiver host.

6. Transfer a whole directory (including its content) from one host to another

On the receiver host run:

nc -l 2424 | tar xvf -

On the sender host run the following command:

tar cvf - /path/to/dir | nc 184.145.20.128 2424

7. Create a compressed backup of hard drive (e.g., /dev/sdc) on a remote host

On the remote host run:

nc -lp 2424 | sudo dd of=/path/to/image.img.gz

On the local host run the following command:

dd if=/dev/sdc | gzip -c | nc 184.145.20.128 2424

8. Restore a hard drive (e.g. /dev/sdc) from a compressed disk image stored in a remote host

On the local host run:

nc -lp 2424 | gunzip -c | sudo dd of=/dev/sdc

On the remote host run the following command:

cat /path/to/image.img.gz | nc 184.145.20.126 2424

9. Run insecure online chat between two hosts

On one host (e.g. 184.145.20.126) run the command below:

nc -lp 2424

On another host (e.g. 184.145.20.128) run the following command:

nc 184.145.20.126 2424

After running these commands, anything typed in both terminals will be seen on both host machines.

10. Run a web server with a static web page

Run the command below on local host (e.g. 184.145.20.126) to start a web server that serves test.html on port 80. Note that you must run with sudo privileges as 80 is in range of well known ports (1-1023)

while true; do sudo nc -lp 80 < test.html; done

Now open http://184.145.20.126/test.html from another host to access it.

11. Listen on a TCP port using IPv6 address

You can use the following command to allow nc use IPv6 address when listening on a TCP port.

nc -6 -l 2424

Check if it works with the command below

sudo netstat -nap | grep 2424

Output will look like this

tcp6 0 0 :::2424 :::* LISTEN 15665/nc

12. Stream a video file from a server for client to watch the streamed video using video player (e.g., mplayer)

On a video server (184.145.20.126):

cat sample_video.avi | nc -l 2424

On a client host (184.145.20.128):

nc 184.145.20.126 2424 | mplayer -vo x11 -cache 3000 -

Was this answer helpful? 2 Users Found This Useful (3 Votes)