This diagnostic command displays protocol statistics and current TCP/IP connections using NetBIOS over TCP/IP (NetBT).
Syntax
nbtstat [-a remotename] [-A IPaddress] [-c] [-n] [-R] [-r] [-S] [-s] [interval]
Parameters
-a remotename
Lists the remote computer's name table using the computer's name.
-A IPaddress
Lists the remote computer's name table using the computer's IP address.
-c
Lists the contents of the NetBIOS name cache, giving the IP address of each name.
-n
Lists local NetBIOS names.
-R
Reloads the LMHOSTS file after purging all names from the NetBIOS name cache. Can be used if LMHOSTS LOOKUP is enabled on the computer. (To enable LMHOSTS LOOKUP, check Enable LMHOSTS LOOKUP on the WINS Address tab on the TCP/IP Properties page.
-r
Lists name resolution statistics for Windows networking. On a Windows NT-based computer configured to use WINS, this option returns the number of names resolved and registered via broadcast or via WINS.
-S
Displays both workstation and server sessions, listing the remote computers by IP address only.
-s
Displays both workstation and server sessions. It attempts to resolve the remote computer IP address to a name by using the name resolution services (including, but not limited to, HOSTS FILE LOOKUP) which are configured on the computer.
interval
Redisplays selected statistics, pausing interval seconds between each display. Press Ctrl+C to stop redisplaying statistics. If this parameter is omitted, nbtstat prints the current configuration information once.
Notes
The column headings generated by the nbtstat utility have the following meanings.
In
Number of bytes received.
Out
Number of bytes sent.
In/Out
Whether the connection is from the computer (outbound) or from another computer to the local computer (inbound).
Life
The remaining time that a name table cache entry will live before it is purged.
Local Name
The local NetBIOS name associated with the connection.
Remote Host
The name or IP address associated with the remote computer.
Type
This refers to the type of name. A name can either be a unique name or a group name.
<03>
Each NetBIOS name is 16 characters long. The last byte has special significance, and is used to indicate specific NetBIOS applications that each identify themselves by using the NetBIOS computer name. (The <> notation is the last byte converted to a hexadecimal value.)
State
The state of NetBIOS connections. The possible states are shown in the following list:
State | Meaning |
Connected | The session has been established. |
Associated | A connection endpoint has been created and associated with an IP address. |
Listening | This endpoint is available for an inbound connection. |
Idle | This endpoint has been opened but cannot receive connections. |
Connecting | The session is in the connecting phase where the name-to-IP address mapping of the destination is being resolved. |
Accepting | An inbound session is currently being accepted and will be connected shortly. |
Reconnecting | A session is trying to reconnect if it failed to connect on the first attempt. |
Outbound | A session is in the connecting phase where the TCP connection is currently being created. |
Inbound | An inbound session is in the connecting phase. |
Disconnecting | A session is in the process of disconnecting. |
Disconnected | The local computer has issued a disconnect, and it is waiting for confirmation from the remote computer. |