Everhart, Glenn
From:	David Bovee, MCP [dbovee@nw.verio.net]
Sent:	Saturday, May 23, 1998 3:18 PM
To:	Eric Fagan; 'NT Security Listserv'
Subject:	RE: [NTSEC] NBTSTAT hex results

TO UNSUBSCRIBE: email "unsubscribe ntsecurity" to majordomo@iss.net
Contact ntsecurity-owner@iss.net for help with any problems!
---------------------------------------------------------------------------

0x0 = Redirector
0x1 = Master domain browser
0x3 = Messenger svc
0x20 = LanMan server
0x1B = Master Browser name
0x1E = normal group
0x1D = Client name resolution
0x1C = Internet group name (contains names of domain controllers)


> -----Original Message-----
> From: owner-ntsecurity@iss.net [mailto:owner-ntsecurity@iss.net]On
> Behalf Of Eric Fagan
> Sent: Monday, May 18, 1998 11:25 AM
> To: 'NT Security Listserv'
> Subject: [NTSEC] NBTSTAT hex results
>
>
>
> TO UNSUBSCRIBE: email "unsubscribe ntsecurity" to majordomo@iss.net
> Contact ntsecurity-owner@iss.net for help with any problems!
> ------------------------------------------------------------------
> ---------
>
> Hi-
>   Several weeks ago, someone here (or possibly on the NT-ISP
> list) posted a
> list of services that correspond with the hex result code in column 2 of
> NBTSTAT returns (see below).  I've searched high & low for that message
> without success, & 15 minutes of searching the net seems to show that most
> people, like myself, are pretty much clueless on how to really
> interpret the
> results of NBTSTAT.  Can someone post a breakdown of "Type"?  Normally, I
> just use NBTSTAT to find MS machines, but it would be nice to also know
> what's running or exposed on each machine.
>    Name               Type         Status
> ---------------------------------------------
> MACHINE        <00>  UNIQUE      Registered
> MACHINE         <20>  UNIQUE      Registered
> DOMAIN       <00>  GROUP       Registered
> DOMAIN       <1C>  GROUP       Registered
> DOMAIN       <1B>  UNIQUE      Registered
> MACHINE         <03>  UNIQUE      Registered
> etc. etc. etc.
>
> Eric