What is the command for the nbtscan with a file? Otherwise great writeup! The little tool tips are nice to see on the LUG<br><br><div class="gmail_quote">On Sun, Dec 14, 2008 at 3:11 PM, Chris Cooper <span dir="ltr"><<a href="mailto:QCAdmin@gmail.com">QCAdmin@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">nmblookup - NetBIOS name resolution tool<br>
Part of the samba package (<a href="http://www.samba.org" target="_blank">http://www.samba.org</a>)<br>
<a href="http://linuxcommand.gds.tuwien.ac.at/man_pages/nmblookup1.html" target="_blank">http://linuxcommand.gds.tuwien.ac.at/man_pages/nmblookup1.html</a><br>
<br>
nbtscan - A NetBIOS scanning utility<br>
<a href="http://www.inetcat.net/software/nbtscan.html" target="_blank">http://www.inetcat.net/software/nbtscan.html</a><br>
<br>
This week, we get a two for one.<br>
<br>
The first tool is nmblookup. This tool is part of the samba client<br>
utilities package, and is used for resolving netBIOS names back and<br>
forth from ip addresses. It can be used for both forward lookups<br>
(nmblookup <computer name>), and reverse lookups (nmblookup -A <ip<br>
address>).<br>
<br>
The vast majority of the time, I use nmblookup in the reverse lookup<br>
mode. If I am looking at a log file, or am seeing odd network traffic<br>
on the router, I usually only have an ip address to go on. With a<br>
quick nmblookup -A <ip address> I can know what the computer is named,<br>
and where to start physically looking for the PC.<br>
<br>
This does, however, require that the PC has port 137 UDP accessible,<br>
and is running some form of netBIOS server (either a windows box, or<br>
something running samba).<br>
<br>
Occasionally, I need to automate this lookup either over a full range,<br>
or from a file list I dumped from something else. This is where<br>
nbtscan comes in.<br>
<br>
nbtscan is a very speedy little utility that takes either a file list,<br>
or an ip range as input, and proceeds to scan for and list all the<br>
netBIOS names it finds. It essentially replicates nmblookup -A over a<br>
larger scale.<br>
<br>
So whether you are looking at a single host (nmblookup) or a multitude<br>
of them (nbtscan), these utilities make playing hide-and-seek a little<br>
easier in a world full of Windows.<br>
_______________________________________________<br>
QCLUG mailing list<br>
<a href="mailto:QCLUG@qclug.org">QCLUG@qclug.org</a><br>
<a href="http://qclug.org/mailman/listinfo/qclug" target="_blank">http://qclug.org/mailman/listinfo/qclug</a><br>
</blockquote></div><br><br clear="all"><br>-- <br>From:<br>Arron James Lorenz<br>Reel to Reel Drive In<br><a href="http://www.DavenportDriveIn.com">http://www.DavenportDriveIn.com</a><br>563-579-7046<br>