How do I get a list of the active IP-addresses, MAC-addresses and NetBIOS names on the LAN?

Question

I'd like to get NetBIOS name, IP and MAC addresses for every host on the LAN, preferably not having to walk to every single PC and take note of the stuff myself.

How to do that with Windows Script Host/PowerShell/whatever?

score 10 · Accepted Answer · answered Sep 18 '08 at 08:07

10

As Daren Thomas said, use nmap.

 nmap -sP 192.168.1.1/24

to scan the network 192.168.1.*

 nmap -O 192.168.1.1/24

to get the operating system of the user. For more information, read the manpage

 man nmap

regards

answered Sep 18 '08 at 08:07

mana

6,347
6
50
70

1

I can't find an option to make `nmap` return MAC addresses. – npdoty Jun 12 '11 at 00:20
@npdoty : As mana mentionned: nmap -O 192.168.1.1/24 returns the MAC addresses (and other informations as well), note that you may need to be root or to sudo in order to be able to do that. – Iam Zesh May 19 '13 at 13:12

score 8 · Answer 2 · answered Sep 18 '08 at 08:14

8

arp -a

That gets everything the current machine knows about on the network.

(I'm putting this up there as a second option, since nmap isn't universally installed).

answered Sep 18 '08 at 08:14

Matthew Schinckel

35,041
6
86
121

3

However arp will only work if you have routes to every PC on that segment of the network; so you need to ping every IP first! – blowdart Sep 18 '08 at 10:10
You probably could use a broadcast ping first, but that relies on machines responding to pings. – Matthew Schinckel Oct 04 '14 at 04:03

Tubs · Answer 3 · 2008-09-18T10:00:20.920

If you're using DHCP then the server will give you a list of all that information.

This website has a good tutorial on using powershell to get networking information http://www.powershellpro.com/powershell-tutorial-introduction/powershell-scripting-with-wmi/

If you neet to get quick list of computer names you can use "net view". Also have a look at nbmac although I'm unsure of it's working status under XP. Another option could be to use nbtstat -a (once you've used net view to list workstations)

score 1 · Answer 4 · edited Mar 30 '17 at 21:59

1

In PowerShell:

function Explore-Net($subnet, [int[]]$range){
    $range | % { test-connection "$subnet.$_" -count 1 -erroraction silentlycontinue} | select -Property address | % {[net.dns]::gethostbyaddress($_.address)}
}

Example:

Explore-Net 192.168.2 @(3..10)

edited Mar 30 '17 at 21:59

Peter Mortensen

30,738
21
105
131

answered Feb 27 '11 at 19:59

mjsr

7,410
18
57
83

score 1 · Answer 5 · answered Sep 18 '08 at 16:59

1

In PowerShell you can do something like:

$computers = "server1","server2","server3"

Get-WmiObject Win32_NetworkAdapterConfiguration -computer $computers -filter "IPEnabled ='true'" | select __Server,IPAddress,MACAddress

answered Sep 18 '08 at 16:59

Shay Levy

121,444
32
184
206

Turns out that in my specific LAN setup using nmap on a linux box is much easier, even if nmap can't figure out netbios names. Of course I should take some time to learn powershell and WMI, just for fun. – agnul Sep 18 '08 at 22:30

How do I get a list of the active IP-addresses, MAC-addresses and NetBIOS names on the LAN?

5 Answers5

Linked