Enter any domain name, or host ip address you would like to perform a NetBIOS check/scan on. (i.e. isc.org or 220.127.116.11)
The NetBIOS check/scan is a tool that scans for open NetBIOS name-servers on a TCP/IP network.
NetBIOS scanning is one of the first steps in finding of open shares, and is based on the functionality of the standard Windows tool nbtstat, but it operates on a range of addresses instead of just one. NetBIOS is commonly known as the Windows Network Neighbourhood protocol, and (among other things), it provides a name service that listens on UDP port 137. When it receives a query on this port, it responds with a list of all services it offers.
In many cases, the summary information is based on guesses, observations, and highly incomplete information, and we invite submissions by others who can help us pinpoint more entries like the following:
|SHARING||The machine in question is running the file and print sharing service, but this does not necessarily mean any shares are published or that we'll be able to see any of them. Actual enumeration of the shares is done via a different mechanism outside the scope of this program.|
|DC||This machine appears to be a Windows NT domain controller, either primary or secondary.|
|U=user||This machine appears to have a logged-in user with the name indicated. This is often only a guess, and it's common for our algorithms to miss a valid user (especially if the user name is the same as the machine name).|
|IIS||This machine appears to have Microsoft's Internet Information Server (IIS) installed, though we believe that there are related tools that can cause this to appear as well. It doesn't necessarily mean that IIS is actually running.|
|EXCHANGE||This machine appears to be running Microsoft Exchange.|
|NOTES||This machine appears to be running Lotus Notes|
|?||This means that the remote is advertising a NETBIOS resource record that we don't understand.|
The w3dt NetBIOS tool is based off code modified for unix from Steve Friedl's nbtscan