Is there a command-line command to resolve the MAC address of a device to
it's hostname? I'm getting a conflict that show's the MAC address of the
other machine, but when I try to trace it by physically tracing the cable
connected to the switch, I can't find where it goes. (poor labeling by the
person who set it up). If I have the hostname, I'll have a better idea of
what and where the device is.
=?Utf-8?B?a2pmcmV5NTU=?= <kjfrey55@discussions.microsoft.com> wrote
in news:18BE10D8-C2D1-4708-AB9B-8C780CBCB875@microsoft.com:
> Is there a command-line command to resolve the MAC address of a
> device to it's hostname? I'm getting a conflict that show's the
> MAC address of the other machine, but when I try to trace it by
> physically tracing the cable connected to the switch, I can't find
> where it goes. (poor labeling by the person who set it up). If I
> have the hostname, I'll have a better idea of what and where the
> device is.
>
If by "hostname" you mean "Microsoft Computer Name", then Yes.
Use the command:
nbtstat -a computername
and the resulting response should include a MAC address.
Make sure you use a lower-case "-a". An uppercase "-A" is followed by
an IP address instead of a computer name.
Thanks for the response, but I have the MAC address and need to have the
response include the Microsoft computer name.
"John Wunderlich" wrote:
> =?Utf-8?B?a2pmcmV5NTU=?= <kjfrey55@discussions.microsoft.com> wrote
> in news:18BE10D8-C2D1-4708-AB9B-8C780CBCB875@microsoft.com:
>
> > Is there a command-line command to resolve the MAC address of a
> > device to it's hostname? I'm getting a conflict that show's the
> > MAC address of the other machine, but when I try to trace it by
> > physically tracing the cable connected to the switch, I can't find
> > where it goes. (poor labeling by the person who set it up). If I
> > have the hostname, I'll have a better idea of what and where the
> > device is.
> >
>
> If by "hostname" you mean "Microsoft Computer Name", then Yes.
>
> Use the command:
>
> nbtstat -a computername
>
> and the resulting response should include a MAC address.
> Make sure you use a lower-case "-a". An uppercase "-A" is followed by
> an IP address instead of a computer name.
>
> HTH,
> John
>
Some confusion - the computer name is whatever you designated. Run Ipconfig
to determine which network adaptor card has the MAC of interest.
"kjfrey55" <kjfrey55@discussions.microsoft.com> wrote in message
news:E452C13F-8400-4064-8C2C-6E81E1D9F559@microsoft.com...
> Thanks for the response, but I have the MAC address and need to have the
> response include the Microsoft computer name.
>
> "John Wunderlich" wrote:
>
>> =?Utf-8?B?a2pmcmV5NTU=?= <kjfrey55@discussions.microsoft.com> wrote
>> in news:18BE10D8-C2D1-4708-AB9B-8C780CBCB875@microsoft.com:
>>
>> > Is there a command-line command to resolve the MAC address of a
>> > device to it's hostname? I'm getting a conflict that show's the
>> > MAC address of the other machine, but when I try to trace it by
>> > physically tracing the cable connected to the switch, I can't find
>> > where it goes. (poor labeling by the person who set it up). If I
>> > have the hostname, I'll have a better idea of what and where the
>> > device is.
>> >
>>
>> If by "hostname" you mean "Microsoft Computer Name", then Yes.
>>
>> Use the command:
>>
>> nbtstat -a computername
>>
>> and the resulting response should include a MAC address.
>> Make sure you use a lower-case "-a". An uppercase "-A" is followed by
>> an IP address instead of a computer name.
>>
>> HTH,
>> John
>>
I've done a poor job of explaining my issue so I'll try again.
- I have one device on my network that is configured with a static IP address.
- Do to lack of proper documentation by my predecessor, I don't know the
computer name that was given to it, nor can I trace its physical location by
following wires - they disappear into the walls.
- I would like to learn it's computer name because that will give me a clue
as to what it is and where to find it.
- The switch it's plugged into is only showing me it's MAC address.
- The DHCP server kept giving out the IP address to other devices because
the address wasn't excluded from the scope.
- I've since excluded it, so the conflict doesn't occur.
- I'd still like to use a command on the MAC address to tell me the computer
name so I can track this device down.
- Using nbtstat only gave me the address table and name of the 2nd device
that the DHCP server was giving the address to, not the mystery device in
question.
I hope this is more clear.
"AJR" wrote:
> Some confusion - the computer name is whatever you designated. Run Ipconfig
> to determine which network adaptor card has the MAC of interest.
>
>
> "kjfrey55" <kjfrey55@discussions.microsoft.com> wrote in message
> news:E452C13F-8400-4064-8C2C-6E81E1D9F559@microsoft.com...
> > Thanks for the response, but I have the MAC address and need to have the
> > response include the Microsoft computer name.
> >
> > "John Wunderlich" wrote:
> >
> >> =?Utf-8?B?a2pmcmV5NTU=?= <kjfrey55@discussions.microsoft.com> wrote
> >> in news:18BE10D8-C2D1-4708-AB9B-8C780CBCB875@microsoft.com:
> >>
> >> > Is there a command-line command to resolve the MAC address of a
> >> > device to it's hostname? I'm getting a conflict that show's the
> >> > MAC address of the other machine, but when I try to trace it by
> >> > physically tracing the cable connected to the switch, I can't find
> >> > where it goes. (poor labeling by the person who set it up). If I
> >> > have the hostname, I'll have a better idea of what and where the
> >> > device is.
> >> >
> >>
> >> If by "hostname" you mean "Microsoft Computer Name", then Yes.
> >>
> >> Use the command:
> >>
> >> nbtstat -a computername
> >>
> >> and the resulting response should include a MAC address.
> >> Make sure you use a lower-case "-a". An uppercase "-A" is followed by
> >> an IP address instead of a computer name.
> >>
> >> HTH,
> >> John
> >>
>
>
>
=?Utf-8?B?a2pmcmV5NTU=?= <kjfrey55@discussions.microsoft.com> wrote
in news:E08896B6-96D8-4FCB-A4FD-CA9F67EEEDAC@microsoft.com:
> I've done a poor job of explaining my issue so I'll try again.
>
> - I have one device on my network that is configured with a static
> IP address. - Do to lack of proper documentation by my
> predecessor, I don't know the computer name that was given to it,
> nor can I trace its physical location by following wires - they
> disappear into the walls. - I would like to learn it's computer
> name because that will give me a clue as to what it is and where
> to find it. - The switch it's plugged into is only showing me
> it's MAC address. - The DHCP server kept giving out the IP address
> to other devices because the address wasn't excluded from the
> scope. - I've since excluded it, so the conflict doesn't occur.
> - I'd still like to use a command on the MAC address to tell me
> the computer name so I can track this device down.
> - Using nbtstat only gave me the address table and name of the 2nd
> device that the DHCP server was giving the address to, not the
> mystery device in question.
>
> I hope this is more clear.
>
> "AJR" wrote:
>
You say that you know its MAC address and since you've been able to
exclude its IP address from the DHCP, then you also seem to know its IP
address. (I'm assuming by "excluded it" you mean excluded the IP
address from DHCP as opposed to excluding the device from the router
by disabling its port) Since you know its IP address, simply type the
command:
nbtstat -A 192.168.0.5 (<- replace with actual IP address)
and the resulting printout will show the Computer name in the "Name"
column. (Make sure you use a upper-case "A" in "-A")
If this is giving you problems, there are some freeware subnet scanning
programs that will give you the information you need... one is
"netscan".
That's correct - I've excluded it from DHCP, not shut down the port.
When I tried the nbtstat -A command I was only getting the Computer name of
the known device, not the one I'm trying to track down. Probably because the
known device was still in DNS. Now that I've given the known device it's own
static IP and let the DNS entry die, I only get "Host not found" when I type
nbtstat -A ipaddress. I am able to ping it and get "Reply from..." responses.
"John Wunderlich" wrote:
> =?Utf-8?B?a2pmcmV5NTU=?= <kjfrey55@discussions.microsoft.com> wrote
> in news:E08896B6-96D8-4FCB-A4FD-CA9F67EEEDAC@microsoft.com:
>
> > I've done a poor job of explaining my issue so I'll try again.
> >
> > - I have one device on my network that is configured with a static
> > IP address. - Do to lack of proper documentation by my
> > predecessor, I don't know the computer name that was given to it,
> > nor can I trace its physical location by following wires - they
> > disappear into the walls. - I would like to learn it's computer
> > name because that will give me a clue as to what it is and where
> > to find it. - The switch it's plugged into is only showing me
> > it's MAC address. - The DHCP server kept giving out the IP address
> > to other devices because the address wasn't excluded from the
> > scope. - I've since excluded it, so the conflict doesn't occur.
> > - I'd still like to use a command on the MAC address to tell me
> > the computer name so I can track this device down.
> > - Using nbtstat only gave me the address table and name of the 2nd
> > device that the DHCP server was giving the address to, not the
> > mystery device in question.
> >
> > I hope this is more clear.
> >
> > "AJR" wrote:
> >
>
> You say that you know its MAC address and since you've been able to
> exclude its IP address from the DHCP, then you also seem to know its IP
> address. (I'm assuming by "excluded it" you mean excluded the IP
> address from DHCP as opposed to excluding the device from the router
> by disabling its port) Since you know its IP address, simply type the
> command:
>
> nbtstat -A 192.168.0.5 (<- replace with actual IP address)
>
> and the resulting printout will show the Computer name in the "Name"
> column. (Make sure you use a upper-case "A" in "-A")
>
> If this is giving you problems, there are some freeware subnet scanning
> programs that will give you the information you need... one is
> "netscan".
>
> <http://www.softperfect.com/products/networkscanner/>
>
> HTH,
> John
>
> That's correct - I've excluded it from DHCP, not shut down the port.
>
> When I tried the nbtstat -A command I was only getting the Computer name of
> the known device, not the one I'm trying to track down. Probably because the
> known device was still in DNS. Now that I've given the known device it's own
> static IP and let the DNS entry die, I only get "Host not found" when I type
> nbtstat -A ipaddress. I am able to ping it and get "Reply from..." responses.
Hi,
if I was inyour shoes, I would disconnect the cable leading to that
unknown computer from the network and wait until someone complained that
their machine is not connecting or working any longer... ;-)
=?Utf-8?B?a2pmcmV5NTU=?= <kjfrey55@discussions.microsoft.com> wrote
in news:AC9251E7-96A3-4477-B13E-0D73B82AB7C1@microsoft.com:
> That's correct - I've excluded it from DHCP, not shut down the
> port.
>
> When I tried the nbtstat -A command I was only getting the
> Computer name of the known device, not the one I'm trying to track
> down. Probably because the known device was still in DNS. Now
> that I've given the known device it's own static IP and let the
> DNS entry die, I only get "Host not found" when I type nbtstat -A
> ipaddress. I am able to ping it and get "Reply from..."
> responses.
>
What this indicates is that the machine with this IP does not support
Windows Networking. It's either a Windows machine with file sharing
disabled or a firewall in place or, more likely, a Printer or Linux
machine without NetBT support enabled. Try connecting with Telnet,
FTP, http, and/or SSH. If the device responds on these ports, the
login prompt may give you a clue to the device.
Other than that, follow Larry's advice and disconnect the device and
see who complains.
> =?Utf-8?B?a2pmcmV5NTU=?= <kjfrey55@discussions.microsoft.com> wrote
> in news:AC9251E7-96A3-4477-B13E-0D73B82AB7C1@microsoft.com:
>
> > That's correct - I've excluded it from DHCP, not shut down the
> > port.
> >
> > When I tried the nbtstat -A command I was only getting the
> > Computer name of the known device, not the one I'm trying to track
> > down. Probably because the known device was still in DNS. Now
> > that I've given the known device it's own static IP and let the
> > DNS entry die, I only get "Host not found" when I type nbtstat -A
> > ipaddress. I am able to ping it and get "Reply from..."
> > responses.
> >
>
> What this indicates is that the machine with this IP does not support
> Windows Networking. It's either a Windows machine with file sharing
> disabled or a firewall in place or, more likely, a Printer or Linux
> machine without NetBT support enabled. Try connecting with Telnet,
> FTP, http, and/or SSH. If the device responds on these ports, the
> login prompt may give you a clue to the device.
>
> Other than that, follow Larry's advice and disconnect the device and
> see who complains.
>
> Good Luck,
> John
>
Resolving MAC Address to Hostname 
Linear Mode
