Instead of memorizing port numbers for standard services, use the -o switch to scan an ordered list of common ports (FTP, SMTP, HTTP, SQL, etc.).
portqry -remote example.com -p tcp -port 443 portqry examples
portqry -n sqlcluster -p tcp -e 135 -rpc Instead of memorizing port numbers for standard services,
Sends a real LDAP bind request. Parses the response. Output includes: portqry examples
portqry -n kdc01 -p udp -e 88 -t 5000 -r 3
If you need to verify a block of ports for an application, use the -r (range) switch. portqry -n 10.0.0.5 -p tcp -r 1:1024 Use code with caution. This scans all well-known ports from 1 to 1024. 4. Advanced: Checking RPC Connectivity
Here are the most useful to add to your troubleshooting arsenal.