arp -a plus the other party's IP is to check the other party's MAC address
nbtstat -a plus the other party's IP to check the other party's hostname
Use the IP address to reverse the hostname
ping ip to get the hostname, nbtstat -A xxx.xxx.xxx.xxx to get the hostname.
NBTSTAT command: Used to view the current NETBIOS-based TCP/IP connection status, this tool allows you to obtain the group name and machine name of the remote or local machine. Although users can use the ipconfig/winipcfg tool to accurately obtain the host's network card address, it is too troublesome to perform such operations on each machine for a relatively large LAN that has been built. Network administrators can obtain the network card address of another Internet host by using the DOS command nbtstat on their own Internet access machine. Let's take a look at its syntax format first:
NBTSTAT [ [-a RemoteName] [-A IP address] [-c] [-n] [-r] [-R] [-RR] [-s] [-S] [interval] ]
Parameter description:
-a remotename—Indicates that the name table of the remote computer is listed using its name, and this parameter can be used to see the current status of the remote computer by its NetBios name.
-A IP address - Indicates the use of the IP address of the remote computer and lists the name table, which is different from -a in that it can only use IP, in fact, -a includes the function of -A.
-c—Lists the cache of the NetBIOS names of the remote computer and the IP address of each name. This parameter is used to list the IPs of the computers you have connected to that cached in your NetBIOS.
-n—Lists the NetBIOS name of the local machine, this parameter is similar to the function of adding the "-a" parameter to the "netstat" introduced above, but this is to check the local, if you change the IP after netstat -a to your own, the effect is the same as that of nbtstat -n.
-r—Lists the name resolution statistics for Windows Network Name Resolution. On Windows 2000 machines that are configured to use WINS, this option returns the number of names to be resolved and registered by broadcast or WINS.
-R—Clear all names in the NetBIOS name cache and reload the lmhosts file, this parameter is to clear the IP address in the cache that nbtstat -c can see.
-S—Displays only the IP address of the remote computer in the client and server session tables.
-s—Displays client and server sessions and translates the remote computer IP address to the NETBIOS name. This parameter is similar to -S, except that this will parse the other party's NetBIOS name.
-RR—Releases the NetBIOS names registered on the WINS server, and then refreshes their registrations.
interval—Redisplays the selected statistic every interval seconds until CTRL+C stops redisplaying the statistic. If this parameter is omitted, nbtstat prints the current configuration information once. This parameter is the same as netstat, and the "interval" parameter in nbtstat is used with -s and -s.
Well, I won't talk much about the application of nbtstat, I believe that after reading some of its parameter functions, you will understand its function, but pay special attention to some parameters in this tool are differentiated between upper and lower case, and you should pay special attention when using it! There are also many tools in the system, such as the ARP command for displaying and modifying the Internet-to-Ethernet address translation table; The function of the nslookup command is to query the IP address of a machine and its corresponding domain name, it usually requires a name server to provide domain name services, if the user has set up the name server, you can use this command to view the domain name corresponding to the IP address of different hosts...... I won't talk about it here, and I want to explain that the corresponding command parameter settings in different systems may be different, but the general function is the same, I hope you will pay a little attention when applying, the software parameter usage of these tools listed in this article is all for Win9xWinMe, and there are some differences in NT and UNIX, LINUX systems
In the LAN, we often use some tools to check the IP and check the hostname, and we can find the IP address by using ipconfig or ping, which is also a tool we often use. In fact, we also have a very convenient way, by specifying the IP address can query the hostname, in the Windows command line method, enter the command: nbtstat -A 192.168.1.111 (the other party's IP address) will put the host name, the group name where this host is located is also displayed nbtstat This command uses NetBIOS on TCP/IP to display protocol statistics and current TCP/ IP connection, you can use this command to get the NETBIOS information of the remote host, such as the user name, the workgroup to which it belongs, the MAC address of the network card, etc. Here we need to know a few basic parameters.
-a Use this parameter, as long as you know the machine name of the remote host, you can get its NETBIOS information (the same below).
-A This parameter can also get the NETBIOS information of the remote host, but you need to know its IP.
-n Lists the NETBIOS information of the local machine.
When we get the other party's IP or machine name, we can use the nbtstat command to further obtain the other party's information, which increases our insurance factor against intrusion.
|
Posted on 4/20/2015 10:41:28 AM
|
|
|
|
