Printable View
hi all,
i have searched the web for an answer to this question, but have been unable to find one. so i thought that you guys might be able to help.
does anyone know how i can list all of the computers that are connected to my LAN from the Command Line? i would like to find out how to do this through both the Linux CLI and the Windows DOS Prompt, and list the computers by IP and/or name. if anyone can help i would be extremely grateful, thanks in advance.
regards,
- user0182
Hmm for windows i would recommened trying out siw:
http://www.gtopala.com/
it can give you a ton of information about the current machine, and also has support to show you all computers currently on the lan.
Hi there
Teabag - that is a great program. ITs around 1.5megs and you can run it off your flash disk. Something like winaudit. Very sexy. Ill keep that one.
I dont think we have asked the question though.
I assume he would llike to type ina command at a dos prompt and get a list of computer names down the left hand side and IP addresses on the right hand side. I am also very interested if there is such a command.
Hey Cider. :)Quote:
Originally Posted by Cider
Yes it is a very nice app, and it comes in handy also, as there's a version you can install onto the computer, or the standalone exe that can be ran of a thumb drive or CD.
I have had the app as part of my toolkit for numerous years now. As it has a lot of options pre packaged in.
And i was thinking but maybe while in the dos prompt maybe an
ipconfig -ALL
might be enough to gather information. I cannot check at the moment as i have only 1 machine connected to the lan at the moment, but i can check when i make an appearance at work in the morning.
Hopefully more members notice this thread and pop in some more information or ideas.
"Johnno were are ya'H" :D )..
Hey there
I ran that command here , about 15 computers on the network.
I only really tells you the gateway, dns and dhcp which is all on one IP and your ip addy.
Doesnt list anything about the others computer son the lan and their IP's.
Hmmm OK.. You want to Audit a network from the command line? (Please realise that If your Googling that the So called DOS window IS NOT DOS.. )Quote:
Originally Posted by user0182
There are a few new tools with VISTA but i am assuming that a bit more like XP or Win2k is wanted..
BTW: IPCONFIG /all only gives the local machine settings
BRB..
Hey Cider.:)
Thankyou for doing that. Really appreciate it, as i was not sure. So now that we know this, i guess it's back to finding a suitable answer. :)
Nmap. Far and away the best scanner in my book. It'll
give you a lot of options.
Windows boxes will get a WinPcap install along with it.
http://insecure.org/
edit -- ignore the Zen-something GUI that the new version installs.
Once you install, it runs from a shell (command line). You'll have
to play with it a bit to pick up on the switches (options).
Quote:
Originally Posted by user0182
Actually yes this is possible and there is a built in utility in Windows to do. Its called the Net Command (output below)
NET [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP |
HELPMSG | LOCALGROUP | NAME | PAUSE | PRINT | SEND | SESSION |
SHARE | START | STATISTICS | STOP | TIME | USE | USER | VIEW ]
Your looking specifically for Net View, which will give you the names of all computers connected to your LAN in a format "\\ComputerName".
Hope thats what your looking for.. good luck :)
I hate the phone ..Quote:
Originally Posted by brokencrow
Yes NMAP for *nix & Win..
There is the Netsh suite in XP/2K.. read up on it.. you will find yourself scripting .. out side that NMap..
Net view is half the answer, we are getting somewhere :) Now is there a switch you can add to net view to display Ip addresses and not just computer names.Quote:
Originally Posted by moxquito
Yes it is called scripting..Quote:
Originally Posted by Cider
You will know your subnet..
so you write a script to report the presence of life at each of the subnet addresses..
allow it to append to a text file.. read file for results..
No from what I can tell there is no way within the net view command to get the IP of the computer(s) listed, to me it looks like the easiest way would just be to ping the computer it will resolve and give you the IP then.
PsTools might be an even better option if you're on a strictly Windows domain.
Not so hot against *nix boxes.
http://technet.microsoft.com/en-us/s.../bb896649.aspx
Ok , how do I do this :PQuote:
Originally Posted by Und3ertak3r
Mox: good idea, abit more work but will still achieve the end result.
i am interested in tools in MS Windows Vista. as I have both Vista and XP machines on my LAN, so I am interested in commands for either or both.Quote:
Hmmm OK.. You want to Audit a network from the command line? (Please realise that If your Googling that the So called DOS window IS NOT DOS.. )
There are a few new tools with VISTA but i am assuming that a bit more like XP or Win2k is wanted..
thanks for your help moxquito, but I'm not sure if "net view" is really an answer to my problem, because I thought that "net view" just shows the shared resources on your local network, and so if a machine is not sharing any resources then that machine is invisible to "net view", or have I misunderstood what "net view" does and will it show all machines on the network?Quote:
Actually yes this is possible and there is a built in utility in Windows to do. Its called the Net Command
btw: thank for all your help so far guys.
regards,
- user0182
Quick and dirty (and complete if you're lucky): arp -a
Hi
Very creative solution to that problem :) Luck, unfortunately, often is missing ...Quote:
Originally Posted by Negative
you could also ping to the broadcast address and wait for who is answering ...
if there are some sun solaris stations, they may answer ...
Anyway, sometimes it is indeed useful, to have some small script available without
dependencies of 3rd party tools. Once I used a pure batch-script, nowadays
I would write a small vb-script (not even threaded, and thus very slow)
using the WMI framework.
To run use
And ping_subnet.vbs looks likeCode:>cmd.exe /c ping_subnet.vbs
Be patient, it takes a while ... ;)Code:Subnet = "192.168.1."
strMessage = "Reachable:" & vbcr
For intIP = 1 To 254
strComputer = Subnet & intIP
set objWMIPing = GetObject("winmgmts:{impersonationLevel=impersonate}").ExecQuery("select * from Win32_PingStatus where address = '" & strComputer & "'")
for each objStatus in objWMIPing
if Not IsNull(objStatus.StatusCode) and objStatus.StatusCode=0 then
strMessage = strMessage & strComputer & vbcr
end if
next
Next
WScript.Echo strMessage
If you are interested in scripting, the tales[2] always are a nice starting point.
Cheers
[1] http://msdn.microsoft.com/en-us/libr...50(VS.85).aspx
[2] http://www.microsoft.com/technet/scr...es/sg1102.mspx
thanks for that sec_ware. although, i think that i am going to write my own program in C or C#, as i have an irrational hatred of VB & VBScript.
although, i am still interested if someone knows of a command either in Windows or Linux that will show up all machines (i.e. both Windows and Linux) on a LAN.
i initially, thought that this would be an easy post for you guys to answer, as i just assumed that their would be a command and i just wasn't aware of it. as it would be a useful command, and Linux has a command for nearly everything, and using Windows one can view the machines on a LAN in a GUI (Start->Network->Network and Sharing Center->View computers and devices) so i would have assumed that there would also be a command (unless the GUI only shows the same details as the "Net View" command).
anywho, i arn't able to test this for myself at the moment, so could someone tell me; using the Windows GUI can one view all machines or only Windows machines on a LAN. also i would be interested in how this Windows GUI works if anyone can tell me or has an idea (i.e. does it use ICMP or a Windows specific protocol etc.)?
regards,
- user0182
This is why many of us use some commercial tools.. but if you have a look at the NMAP as mentioned earlier.. (Win and *nix) before you write your own.. Not to stop you from having a go.. but to see what the bench mark..Quote:
Originally Posted by user0182
Personally I had either used specific MS tools against MS machines.. or commercial tools on MS networks..
How easy it is for us to get locked in our ways..
i do have some experience with NMAP and it is an awesome tool, i know that to detect all machines on a LAN one would have to scan the whole subnet. but i don't know how to scan the subnet for just machines, and not ports on those machines.
can one use NMAP to just scan for machines, and not ports, and if so how?
thanks for your help,
- user0182
I like null scans for a quick peek at a network.
nmap -sN -P0 192.168.1.0/24
Make sure the ip address matches your LAN's. The results will look like this:
---------------------------------------------------------
C:\Users\brokencrow>nmap -sN -P0 192.168.1.0/24
Starting Nmap 4.68 ( http://nmap.org ) at 2008-08-20 20:12 Eastern Daylight Time
All 1715 scanned ports on 192.168.1.1 are open|filtered
MAC Address: 00:1B:2F:4D:C0:7E (Netgear)
Skipping NULL Scan against 192.168.1.2 because Windows does not support scanning
your own machine (localhost) this way.
0 ports scanned on 192.168.1.2
All 1715 scanned ports on 192.168.1.3 are closed
MAC Address: 00:03:94:0A:84:F2 (Connect One)
All 1715 scanned ports on 192.168.1.7 are closed
MAC Address: 00:1A:4D:7C:6B:D7 (Giga-byte Technology Co.)
All 1715 scanned ports on 192.168.1.18 are open|filtered
MAC Address: 00:13:20:8F:E3:5E (Intel Corporate)
All 1715 scanned ports on 192.168.1.61 are open|filtered
MAC Address: 00:1F:29:37:48:5B (Hewlett Packard)
All 1715 scanned ports on 192.168.1.62 are closed
MAC Address: 00:A0:A4:13:21:62 (Micros Systems)
All 1715 scanned ports on 192.168.1.63 are closed
MAC Address: 00:A0:A4:13:26:A3 (Micros Systems)
Nmap done: 256 IP addresses (8 hosts up) scanned in 50.947 seconds
----------------------------------------------------------------
Make sure to check out PsInfo, part of the PsTools pkg, for a very handy network tool, too.
Just a quick remark here: the Network Map uses LLTD (Link Layer Topology Discovery), which doesn't come with Windows XP (and you mentioned that you have some XP computers in your network). In order for the Network Map to also show XP computers, you'll need to install an LLTD Responder on those computers.Quote:
using Windows one can view the machines on a LAN in a GUI (Start->Network->Network and Sharing Center->View computers and devices) so i would have assumed that there would also be a command (unless the GUI only shows the same details as the "Net View" command).
Care to elaborate? I've done some searching and, on my XP Pro, Net View /? yields:Quote:
Originally Posted by Cider
NET VIEW
[\\computername [/CACHE] | /DOMAIN[:domainname]]
NET VIEW /NETWORK:NW [\\computername]
so I'm not sure what switch to add to Net View.
I realise there have been several posts with other recommendations.
hey Ignatius,
i'll try to elaborate, but i not sure about all of this as i'm not in a position to play around with it at the moment.
although, i think the basics are, that the command "net view" typed at the MS DOS Prompt should provide you with a list of the names of all computers on your LAN with shared resources. then the command "net view [computer_name]" should give you a list of shared resources on the specified computer.
i suspect that the limitations of this command are that it only list computer names not IP addresses and that it only shows shared resources on other MS Windows machines. but, as i said i am not currently able to test this, maybe you could test this for me.
regards,
- user0182
I realise that net view generates a list of computer names. I've tried to create a batch file which strips out the extraneous rubbish (I've done that by net view |find "\\") and sending that to a text file (which I'd then step through and ping using a for loop) but it's not possible ping a computer name which starts with \\. I don't think it's possible to search and replace using batch so I can't get rid of the \\ automatically.
I'm not aware of a switch for net view to return IP addresses, rather than computer names, so I'm intrigued by Cider's comment.
Hey there
Well actually I do not know myself - I was hoping you guys would know :)
There isn't such a switch.Quote:
Originally Posted by Cider
http://www.dostips.com/DtCodeBatchFi...FindAndReplaceQuote:
I don't think it's possible to search and replace using batch so I can't get rid of the \\ automatically.
Hey Negative, that's brilliant! I've seen comments several times (elsewhere) that it's not possible to search and replace using batch but clearly it is.Quote:
Originally Posted by Negative
The technique that I'm trying now is:
1. net view |find "\\" > list.txt
then
2. BatchSubstitute.bat \\ "" > list2.txt
my next step will be to use list2.txt in a for loop to step through and ping the "pure" computer names then I guess the arp table can be interrogated (again, via batch) to return the LAN computers IP addresses.