View Single Post
  #3 (permalink)  
Old 07-16-2005, 01:55 AM
Moe Trin
Guest
 
Posts: n/a
Default Re: nbtstat displays different computer name

In the Usenet newsgroup alt.computer.security, in article
<1121408767.881275.156760@g49g2000cwa.googlegroups .com>, valvowski wrote:

>does anybody know what tool was used that generates different computer
>name everytime i execute nbtstat on a single ip address? it is really
>hard to trace which pc the ip address belongs.


Is the "other" computer local? Use a packet sniffer, and get the
MAC address. If the other computer is not local, and is not using
a reserved IP address (see RFC3330), google for a 'whois' tool.

>NNTP-Posting-Host: 210.1.130.2


[compton ~]$ whois -h whois.apnic.net 210.1.130.2
inetnum: 210.1.130.0 - 210.1.130.255
netname: PIPH-LL
country: PH
descr: Pacific Internet PH
descr: LL IP Pool
address: Pacific Internet Philippines, Inc.
address: 19F, The Taipan Place,
address: Emerald Ave., Ortigas Center,
address: Pasig City, Philippines
phone: +63-2-6371700
fax-no: +63-2-9180159
[compton ~]$

Old guy


Reply With Quote
 

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45