Using Backtrack: Network Mapping: Identify Live Hosts: NBTScan



Given an IP address range or subnet, nbtscan specifically returns NetBIOS names mapped toresponding IP addresses. Verbose output ( -v ) returns the entire cached NetBIOS name table from each responding Windows machine, which is a great way to map deeper into a network.

Note that this is a Windows-only scanner. Not that it runs only on Windows (though it will run there as well as on *nixes); but it only maps Windows-only NetBIOS names, not IP hostnames.

Home Page and Tutorial: