工具名称：

nbtscan-1.5.1a 应用环境：Linux　　

工具介绍：

这是一款用于扫描Windows网络上NetBIOS名字信息的程序。该程序对给出范围内的每一个地址发送NetBIOS状态查询，并且以易读的表格列出接收到的信息，对于每个响应的主机，NBTScan列出它的IP地址、NetBIOS计算机名、登录用户名和MAC地址。但只能用于局域网,NBTSCAN可以取到PC的真实IP地址和MAC地址，如果有”ARP攻击”在做怪，可以找到装有ARP攻击的PC的IP/和MAC地址。但只能用于局域网,NBTSCAN可以取到PC的真实IP地址和MAC地址，如果有”ARP攻击”在做怪，可以找到装有ARP攻击的PC的IP/和MAC地址。NBTSCAN可以取到PC的真实IP地址和MAC地址，如果有”ARP攻击”在做怪，可以找到装有ARP攻击的PC的IP/和MAC地址。总之，NBTSCAN可以取到PC的真实IP地址和MAC地址。

Example：

命令：

1.“nbtscan -r 192.168.191.0/24”（搜索整个192.168.191.0/24网段, 即

192.168.191.1-192.168.191.254）；

2.nbtscan 192.168.191.2-250搜索192.168.191.2-250 网段，即192.168.191.2-192.168.191.250。输出结果第一列是IP地址，最后一列是MAC地址。

官方文档命令说明：

NBTscan version 1.5.1. Copyright (C) 1999-2003 Alla Bezroutchko.
This is a free software and it comes with absolutely no warranty.
You can use, distribute and modify it under terms of GNU GPL.

Usage:
nbtscan [-v] [-d] [-e] [-l] [-t timeout] [-b bandwidth] [-r] [-q] [-s separator] [-m retransmits] (-f filename)|(<scan_range>)
   -v       verbose output. Print all names received
           from each host
   -d       dump packets. Print whole packet contents.
   -e       Format output in /etc/hosts format.
   -l       Format output in lmhosts format.
           Cannot be used with -v, -s or -h options.
   -t timeout   wait timeout milliseconds for response.
           Default 1000.
   -b bandwidth   Output throttling. Slow down output
           so that it uses no more that bandwidth bps.
           Useful on slow links, so that ougoing queries
           don't get dropped.
   -r       use local port 137 for scans. Win95 boxes
           respond to this only.
           You need to be root to use this option on Unix.
   -q       Suppress banners and error messages,
   -s separator   Script-friendly output. Don't print
           column and record headers, separate fields with separator.
   -h       Print human-readable names for services.
           Can only be used with -v option.
   -m retransmits   Number of retransmits. Default 0.
   -f filename   Take IP addresses to scan from file filename.
           -f - makes nbtscan take IP addresses from stdin.
   <scan_range>   what to scan. Can either be single IP
           like 192.168.1.1 or
           range of addresses in one of two forms:
           xxx.xxx.xxx.xxx/xx or xxx.xxx.xxx.xxx-xxx.
Examples:
   nbtscan -r 192.168.1.0/24
       Scans the whole C-class network.
   nbtscan 192.168.1.25-137
       Scans a range from 192.168.1.25 to 192.168.1.137
   nbtscan -v -s : 192.168.1.0/24
       Scans C-class network. Prints results in script-friendly
       format using colon as field separator.
       Produces output like that:
       192.168.0.1:NT_SERVER:00U
       192.168.0.1:MY_DOMAIN:00G
       192.168.0.1:ADMINISTRATOR:03U
       192.168.0.2:OTHER_BOX:00U
       ...
   nbtscan -f iplist
       Scans IP addresses specified in file iplist.

参考资料：

百度百科（哈哈，百度百科还是有点用的）
nbtscan(在局域网内查找ARP病毒主机)

转载自原文链接, 如需删除请联系管理员。

原文链接：Nbtscan介绍及使用，转载请注明来源！