Monday, August 6, 2007

To find out who is logged on at the IP Address

This trick is to find out who is logged on to the system , if you have the IP address of the system (box)
Just follow the Steps on Windows/Unix/Linux

How do I tell who is logged in to that box?

On Windows you can try:

Sample Output of nbtstat command

C:\>nbtstat -a somebox
Local Area Connection:
Node IpAddress: [192.168.22.68] Scope Id: []
NetBIOS Remote Machine Name Table
Name Type Status
---------------------------------------------
testbox2<00> UNIQUE Registered
MYADS <00> GROUP Registered
testbox2<03> UNIQUE Registered
MYADS <1e> GROUP Registered
JDOE 03> UNIQUE Registered

MAC Address = 00-04-76-39-A9-F9

Caution:But if Netbios over TCP/IP it turned off it won't work.
In that case you may have to use a WMI script, but you would have to be an Admin on the remote box.

On Unix:

Sample output of nmblookup command

bash-2.05# nmblookup -S somebox
querying testbox2 on 192.168.31.255
192.168.22.59 somebox <00>
Looking up status of 192.168.22.59
testbox2 <00> - M
MYADS <00> - M
testbox2 <03> - M
MYADS <1e> - M
JDOE <03> - M

The above will only work if the Windows box has Netbios over TCP/IP turned on.

No comments: