Nbtstat

Nbtstat

This diagnostic command displays protocol statistics and current TCP/IP connections using NBT (NetBIOS over TCP/IP). This command is available only if the TCP/IP protocol has been installed.

nbtstat [-a remotename] [-A IP address] [-c] [-n] [-R] [-r] [-S] [-s] [interval]

Parameters

-a remotename

Lists the remote computer’s name table using its name.

-A IP address

Lists the remote computer’s name table using its IP address.

-c

Lists the contents of the NetBIOS name cache giving the IP address of each name.

-n

Lists local NetBIOS names. Registered indicates that the name is registered by broadcast (Bnode) or WINS (other node types).

-R

Reloads the Lmhosts file after purging all names from the NetBIOS name cache.

-r

Lists name resolution statistics for Windows networking name resolution. On a Windows 2000 computer configured to use WINS, this option returns the number of names resolved and registered via broadcast or via WINS.

-S

Displays both client and server sessions, listing the remote computers by IP address only.

-s

Displays both client and server sessions. It attempts to convert the remote computer IP address to a name using the Hosts file.

interval

Redisplays selected statistics, pausing interval seconds between each display. Press CTRL+C to stop redisplaying statistics. If this parameter is omitted, nbtstat prints the current configuration information once.

Notes to Nbtstat

The column headings generated by the nbtstat utility have the following meanings:

Input

Number of bytes received.

Output

Number of bytes sent.

In/Out

Whether the connection is from the computer (outbound) or from another system to the local computer (inbound).

Life

The remaining time that a name table cache entry will live before it is purged.

Local Name

The local NetBIOS name associated with the connection.

Remote Host

The name or IP address associated with the remote computer.

Type

Refers to the type of name. A name can either be a unique name or a group name.

Each NetBIOS name is 16 characters long. This last byte often has special significance since the same name may be present several times on a computer differing only in the last byte. This notation is simply the last byte converted to hexadecimal; for example, is a space in ASCII text.

State

The state of NetBIOS connections. The possible states are:

State	Meaning
Connected	The session has been established.
Associated	A connection endpoint has been created and associated with an IP address.
Listening	This endpoint is available for an inbound connection.
Idle	This endpoint has been opened but cannot receive connections.
Connecting	The session is in the connecting phase where the name-to-IP address mapping of the destination is being resolved.
Accepting	An inbound session is currently being accepted and will be connected shortly.
Reconnecting	A session is trying to reconnect if it failed to connect on the first attempt.
Outbound	A session is in the connecting phase where the TCP connection is currently being created.
Inbound	An inbound session is in the connecting phase.
Disconnecting	A session is in the process of disconnecting.
Disconnected	The local computer has issued a disconnect, and it is waiting for confirmation from the remote system.

Notice: Windows® 95, Windows® 98, Windows® NT, Windows® 2000 and
Microsoft® Office are registered trademarks or trademarks of the Microsoft Corporation.