This diagnostic command displays protocol statistics and current TCP/IP connections using NetBIOS over TCP/IP.
Syntax
nbtstat [-a RemoteName] [-A IP_address] [-c] [-n] [-R] [-r] [-S] [-s] [interval]
Parameters
-a
Lists the remote computer's name table given its host name.
-A
Lists the remote computer's name table given its IP address specified in dotted decimal notation.
-c
Lists the contents of the NetBIOS name cache, with the IP address of each name.
-n
Lists local NetBIOS names. In this listing, "Registered" indicates that the name has been registered on this network node, either by b-node broadcast or by a WINS server.
-R
Reloads the LMHOSTS file after purging all names from the NetBIOS name cache.
-r
Lists name resolution statistics for Windows networking. On a computer configured to use WINS, this option returns the number of names resolved and registered broadcast or WINS.
-S
Displays both workstation and server sessions, listing the remote hosts by IP address only.
-s
Displays both workstation and server sessions. It attempts to convert the remote host IP address to a name using the HOSTS file.
interval
Redisplays selected statistics, pausing interval seconds between each display. Press Ctrl+C to stop redisplaying statistics. If this parameter is omitted, nbtstat prints the current configuration information once.
Notes on Nbtstat
The column headings generated by the nbtstat utility have the following meanings.
Input
Number of bytes received.
Output
Number of bytes sent.
In/Out
Whether the connection is from the computer (outbound) or from another system to the local computer (inbound).
Life
The remaining time that a name table cache entry will live before it is purged.
Local Name
The local NetBIOS name associated with the connection.
Remote Host
The name or IP address associated with the remote host.
Type
This refers to the type of name. A name can either be a unique name or a group name.
<03>
Each NetBIOS name is 16 characters long. The last byte often has special significance, because the same name can be present several times on a computer. This notation is the last byte converted to hexadecimal. For example, <20> is a space in ASCII.
State
The state of NetBIOS connections as shown in the following list:
State | Meaning |
Accepting | An inbound session is currently being accepted and will be connected shortly. |
Associated | A connection endpoint has been created and associated with an IP address. |
Connected | The session has been established. |
Connecting | The session is in the connecting phase where the name-to-IP address mapping of the destination is being resolved. |
Disconnected | The local computer has issued a disconnect, and it is waiting for confirmation from the remote computer. |
Disconnecting | A session is in the process of disconnecting. |
Idle | This endpoint has been opened but cannot receive connections. |
Inbound | An inbound session is in the connecting phase. |
Listening | This endpoint is available for an inbound connection. |
Outbound | A session is in the connecting phase where the TCP connection is currently being created. |
Reconnecting | A session is trying to reconnect if it failed to connect on the first attempt. |