Is there a command line function (or any other way) that i can get a NetBIOS name if i know the IP address?
Printable View
Is there a command line function (or any other way) that i can get a NetBIOS name if i know the IP address?
That would rely _entirely_ upon the configuration of the remote client. Done properly, without rights to the remote, you will get nothing....
assuming i have rights as an admin to the remote computer?
Assuming... you have rights... it would still depend on the OS and the rights granted on that machine to remote users... including administrators...
If you would care to illuminate us on the precise situation then we could give much more accurate answers.... ;)
As tigershark states, it is highly dependant on the setup.
For a MS based network you could try pinging the ip address then using nbtstat to look at netbios resolution table
You can type nbtstat at a command prompt to get the switches needed.
It really depdns on the set up and type of network you are in.
If its a windows network and you have rights...the command would be "ping -a <IP address>"
CMD> nbtstat -a xxx.xxx.xxx.xxx <-- X being the IP address
If you are using Linux there is a cool Linux NBTSTAT client created by BindView who was just aquired by Symantec (but the tool is still free) found here .
The cool thing with the linux client is that you can use CRON to schedule NBTSTATs of a particular IP if the user isn't online when you attempt to resolve there NBT name. I do this with investigations, when an internal IP is detected by Snort I run a script the to check for any new instances of an IP and then run a real-time NBTSTAT so I know the machine name and who was logged at the moment Snort detected the alert.
Hope that helps...