/* NETBIOS name lookup tool - by eSDee of Netric (www.netric.org)


yeh.. i was really bored :-)
*
[esdee@pant0ffel] gcc -o nbtstat nbtstat.c && ./nbtstat 10.0.0.4
Request sent, waiting for reply... [ctrl-c to abort]
Name                Type



HOEPELKO-ESPU0B <00> UNIQUE Workstation Service
HOEPELKO-ESPU0B <20> UNIQUE File Server Service
WORKGROUP       <00> GROUP  Domain Name
WORKGROUP       <1e> GROUP  Browser Service Elections
HOEPELKO-ESPU0B <03> UNIQUE Messenger Service
ADMINISTRATOR   <03> UNIQUE Messenger Service
WORKGROUP       <1d> UNIQUE Master Browser
..MSBROWSE. <01> GROUP  Master Browser
MAC-addres = 00-02-a5-e1-fd-b7
[/home/esdee/nbtstat] */

include  <stdio.h>
include  <string.h>
include  <sys/types.h>
include  <sys/socket.h>
include  <netinet/in.h>
include  <netdb.h>
include  <unistd.h>
char nbtname[]= / netbios name packet /
{
    0x80,0xf0,0x00,0x10,0x00,0x01,0x00,0x00,
    0x00,0x00,0x00,0x00,0x20,0x43,0x4b,0x41,
    0x41,0x41,0x41,0x41,0x41,0x41,0x41,0x41,
    0x41,0x41,0x41,0x41,0x41,0x41,0x41,0x41,
    0x41,0x41,0x41,0x41,0x41,0x41,0x41,0x41,
    0x41,0x41,0x41,0x41,0x41,0x00,0x00,0x21,
    0x00,0x01
};
int display();
int main(int argc, char *argv[])
{
    char temp[16];

unsigned char recv[256];
unsigned char *ptr;

struct sockaddr_in server;
struct hostent *hp;

int s;
int total;

unsigned int nb_num;
unsigned int nb_type;

int i = 0;

if (argc < 2) {
    fprintf(stderr, "Usage: %s <hostname>\n", argv[0]);
    return 1;
}

if ((hp = gethostbyname(argv[1])) == NULL)  {
    fprintf(stderr,"Error: Unable to resolve %s\n", argv[1]);
    return 1;
}

if ((s = socket(PF_INET, SOCK_DGRAM, 17)) < 0)  { /* 17 = UDP */
    perror("socket");
    return 1;
}

memset(recv,0x0, sizeof(recv));

bzero((char *) &server, sizeof(server));
bcopy(hp->h_addr, (char *) &server.sin_addr, hp->h_length);

server.sin_family = hp->h_addrtype;
server.sin_port = htons(137); /* netbios-ns */

if (sendto(s, nbtname, sizeof(nbtname), 0, (struct sockaddr *) &server, sizeof(server)) < 0)  {
    perror("sendto");
    return 1;
} else {
    fprintf(stdout, "Request sent, waiting for reply... [ctrl-c to abort]\n");

    read(s, recv, sizeof(recv) - 1);

    fprintf(stdout,"Name                Type\n"
                   "----------------------------------\n");
    ptr=recv+57;
     total=*(ptr - 1); /* max names */

    while(ptr < recv + sizeof(recv)) {
        memset(temp,0x0, sizeof(temp));
        strncpy(temp, ptr, 15);         /* copies the name into temp */

        ptr+=15;
        nb_num  = *ptr;
        nb_type = *(ptr + 1);
        ptr+=3;

        if (i==total) {          /* max names reached */
            ptr-=19;         /* sets the pointer to the mac_addres field */
            fprintf(stdout,"\nMAC-addres = %02x-%02x-%02x-%02x-%02x-%02x\n\n",
                       *(ptr + 1), *(ptr + 2), *(ptr + 3),
                       *(ptr + 4), *(ptr + 5), *(ptr + 6));
            break;
        }

        display(temp,nb_num,nb_type);
        i++;
    }
}
close(s);
return  0;

}
int display(char *name, unsigned int number, unsigned int type)
{
    char description[256];
    int i;

memset(description, 0x0, sizeof(description));

/* list taken from http://support.microsoft.com/default.aspx?scid=KB;EN-US;q163409& */
/* 0x04 - UNIQUE */
/* 0x80 - GROUP */

switch(number) {
    case 0x00:
        if (type <= 0x80) {
                strncpy(description, "UNIQUE Workstation Service", sizeof(description) - 1);
        } else {
                strncpy(description, "GROUP  Domain Name", sizeof(description) - 1);
        }
        break;
    case 0x01:
        if (type <= 0x80) {
                strncpy(description, "UNIQUE Messenger Service", sizeof(description) - 1);
        } else {
                strncpy(description, "GROUP  Master Browser", sizeof(description) - 1);
        }
        break;
    case 0x03:
        strncpy(description, "UNIQUE Messenger Service", sizeof(description) - 1);
        break;
    case 0x06:
        strncpy(description, "UNIQUE RAS Server Service", sizeof(description) - 1);
        break;
    case 0x1b:
        strncpy(description, "UNIQUE Domain Master Browser", sizeof(description) - 1);
        break;
    case 0x1c:
        strncpy(description, "GROUP  Domain Controllers", sizeof(description) - 1);
        break;
    case 0x1d:
        strncpy(description, "UNIQUE Master Browser", sizeof(description) - 1);
        break;
    case 0x1e:
        if (type >= 0x80) strncpy(description, "GROUP  Browser Service Elections", sizeof(description) - 1);
        break;
    case 0x1F:
        strncpy(description, "UNIQUE NetDDE Service", sizeof(description) - 1);
        break;
    case 0x20:
        strncpy(description, "UNIQUE File Server Service", sizeof(description) - 1);
        break;
    case 0x21:
        strncpy(description, "UNIQUE RAS Client Service", sizeof(description) - 1);
        break;
    case 0x22:
        strncpy(description, "UNIQUE Microsoft Exchange Interchange(MSMail Connector)", sizeof(description) - 1);
        break;
    case 0x23:
        strncpy(description, "UNIQUE Microsoft Exchange Store", sizeof(description) - 1);
        break;
    case 0x24:
        strncpy(description, "UNIQUE Microsoft Exchange Directory", sizeof(description) - 1);
        break;
    case 0x30:
        strncpy(description, "UNIQUE Modem Sharing Server Service", sizeof(description) - 1);
        break;
    case 0x31:
        strncpy(description, "UNIQUE Modem Sharing Client Service", sizeof(description) - 1);
        break;
    case 0x42:
        strncpy(description, "UNIQUE Mcaffee Anti-Virus", sizeof(description) - 1);
        break;
    case 0x43:
        strncpy(description, "UNIQUE SMS Clients Remote Control", sizeof(description) - 1);
        break;
    case 0x44:
        strncpy(description, "UNIQUE SMS Administrators Remote Control Tool", sizeof(description) - 1);
        break;
    case 0x45:
        strncpy(description, "UNIQUE SMS Clients Remote Chat", sizeof(description) - 1);
        break;
    case 0x46:
        strncpy(description, "UNIQUE SMS Clients Remote Transfer", sizeof(description) - 1);
        break;
    case 0x4C:
        strncpy(description, "UNIQUE DEC Pathworks TCPIP service on Windows NT", sizeof(description) - 1);
        break;
    case 0x52:
        strncpy(description, "UNIQUE DEC Pathworks TCPIP service on Windows NT", sizeof(description) - 1);
        break;
    case 0x6a:
        strncpy(description, "UNIQUE Microsoft Exchange IMC", sizeof(description) - 1);
        break;
    case 0x87:
        strncpy(description, "UNIQUE Microsoft Exchange MTA", sizeof(description) - 1);
        break;
    case 0xbe:
        strncpy(description, "UNIQUE Network Monitor Agent", sizeof(description) - 1);
        break;
    case 0xbf:
        strncpy(description, "UNIQUE Network Monitor Application", sizeof(description) - 1);
        break;
    default:
        strncpy(description, "UNIQUE Unknown", sizeof(description) - 1);
        break;
}

for (i=0; i < strlen(name); i++) /* replaces weird chars with dots */
    if (name[i] < 31 || name[i] > 126) name[i] = '.';

if (name) fprintf(stdout, "%s <%02x> %s\n", name, number, description);
return 0;


}</pre>