2

Reading This Article: Digital Trends CMD Commands.
I Found A command Called Finger. Trying it out on My System, Windows 10
Why won't it let me Finger anyone..
Says Connect: Connection Refused? enter image description here Not Sure If i'm entering the Commands right but just thought it was a funny command.
If anyone else has an update or full comprehensive list of CMD commands please could you add it in the comments.

everything you need to know about tcp ips finger utility
Partially Related Questions found here on StackOverflow with the keywords: CMD & finger..
Capturing Username from Grunt Shell Command
Get only name and login from cmd finger -s
Implement an interactive shell over SSH in Python

Will update the question in a minute with some more resources.

grawity
  • 501,077

2 Answers2

8

The funny name is not Windows-specific – the same program has existed under the same name in many operating systems of the past. "Finger" is one of the earliest ARPAnet services (along with Telnet, FTP, SMTP &c).

Invocation

Your first problem is that the program expects a username and/or an Internet address (hostname or IP address) but you're giving it random numbers instead. Pay attention to the help text that it shows:

finger [-l] [user]@host

This means that -l and the username are optional, but the "@host" is mandatory and it actually has to indicate a host (much like ping or telnet also expect a host).

Note that the -l option is a lowercase L (indicating "long output"), not the number one.

On some other operating systems, finger also has a local mode where you can run it without any hostname and it'll directly collect information about local users. However, the Windows version will not do that – it will always try to connect to the 'fingerd' service running on localhost:79, which Windows systems simply don't have (hence the "Connection refused" message).

(Yes, this actually contradicts the help text somewhat – if Windows had a finger service listening on port 79, then the '@host' would really be optional.)

You can instead try the Windows-specific quser or qwinsta commands to get a general idea of how it would work. (They can even query a remote Windows system kinda like finger, although this too is disabled by default on non-server Windows versions.)

Practical use

The second problem is that nearly all systems on the internet no longer provide the "finger" service, due to reasons of security (it reveals usernames) and privacy (it shows when a user is active and even which IP address they're connecting from). Basically it's a relic from the 1980s Internet.

But a few public systems (mainly "retro computing" sites) still deliberately provide this service, so you can still try it out:

  • finger @ssh.tilde.club (basic Linux machine at the "tilde.club" social network)
  • finger @athena.dialup.mit.edu (MIT's Linux cluster)
  • finger @samba.acc.umu.se (Linux cluster at Umeå University)
  • finger @up.update.uu.se (1970s ITS running in an emulator – you should use the -l option with this one)
  • finger @telehack.com (a game that simulates 80s networks)
  • finger @nullroute.eu.org (an entirely custom "cluster" fingerd)

In all of those commands, the @host can be prefixed with someone's username if you know it, e.g. finger operator@telehack.com. The initial output will show you which usernames are currently logged in.

Some systems will automatically activate "long" mode whenever a username is given, but with some other systems you still need the -l option to get detailed output.


The other system also has to be running Unix.

The remote system is not required to be Unix – OpenVMS, ITS, Cisco IOS also had this service, and it's possible to write one for Windows as well (which I have done).

Because the protocol is very simple (just ASCII over TCP), some systems host a custom finger service that provides other kinds of data, such as weather information – e.g. CMU had a vending machine and MIT used to have a "bathroom occupancy" service (see also). Among new or surviving services, finger [location]@graph.no will give you a weather forecast.

grawity
  • 501,077
1

That articles information on finger is a bit if a nonsense. Finger is a fairly simple command that is disabled pretty much everywhere because it is more a security threat then a benefit. It was commonly deployed in the early Internet (prior to mass users and security concerns) and does not use encryption or security.

In order for system to work the remote system needs to be running a finger daemon (normally fingerd) - As systems are not running this you get a message when you try use the command.

Likewise the syntax requires a hostname - not a number, so your client is trying to connect to a nonexistent device which is the specific cause of the failure you are seeing.

davidgo
  • 73,366