Problem solve Get help with specific problems with your technologies, process and projects.

Example of NBTSTAT switches

Can you provide some examples of NBTSTAT switches?

If you type NBTSTAT with no parameters, you'll get a list of the switches and what they do. Here are the ones I use most often.

The -a switch shows the names that have been registered for an interface. You can query either the local interface or a remote computer, and you can query by flat name or IP address (with the -A switch). Here's an example:

C: >nbtstat -a s1 Local Area Connection: Node IpAddress: [] Scope Id: []
       NetBIOS Remote Machine Name Table    
Name    Type     Status ---------------------------------------------
    S1     <00> UNIQUE   Registered
    COMPANY    <00> GROUP    Registered
    COMPANY    <1C> GROUP    Registered
    S1     <20> UNIQUE   Registered
    COMPANY    <1B> UNIQUE   Registered
    COMPANY    <1E> GROUP    Registered
    S1     <03> UNIQUE   Registered
    COMPANY    <1D> UNIQUE   Registered
   ..__MSBROWSE__.    <01> GROUP    Registered
    ADMINISTRATOR    <03> UNIQUE   Registered
    MAC Address = 00-B0-D0-76-BE-B3

The -c switch lists the contents of the name resolution cache. This is especially helpful if you
are trying to figure out why one machine doesn't see another by its name even though you can ping
the IP address. Here's an example listing:

C: >nbtstat -c

Local Area Connection: Node IpAddress: [] Scope Id: []       
NetBIOS Remote Cache Name Table     Name    Type   
Host Address    Life [sec]
S2    <20>    UNIQUE    587     S3   
<20>    UNIQUE    600 

The -r switch is especially helpful when you are trying to troubleshoot WINS problems. It tells
you how each flat name was resolved, WINS or broadcast:
C: >nbtstat -r     NetBIOS Names Resolution and Registration Statistics
----------------------------------------------------     Resolved By Broadcast = 21
    Resolved By Name Server = 0     Registered By Broadcast = 10
    Registered By Name Server = 0     NetBIOS Names Resolved By
Broadcast ---------------------------------------------     S3     S2
    S3     S3    <00>    
S2    <00>     S3    

The -s and -S switches give you the current SMB sessions on the computer.

The -R switch allows you to flush the name cache and restock it with entries from your LMHOSTS

The -RR switch allows you to release and refresh the name registration at the WINS server. This
is helpful when you are troubleshooting WINS and you have flushed a tombstone and want to add back
the correct resource record.
This was last published in April 2001

Dig Deeper on Microsoft Windows Data Backup and Protection



Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.