An API for older windows systems that runs over TCP/IP to allow network communication in a LAN. Used to troubleshooting naming issues in networks.

  • udp/137, udp/138 used for name services (nbname)
  • tcp/139 used for session service (nbsession) NetBT is the forward compatibility of NetBIOS on modern TCP/IP networks

Commands

nbtstat -n

Finding current device’s netbios name

nbtstat -A <remoteIP>

Finding a remote IP’s netbios name

nbtstat -c

All names NetBIOS has in its cache