

jrdepriest@ebizsrvb:~/nbtstat$ ./nbtstat 10.226.41.224
received data:
A2 48 84 00 00 00 00 01 00 00 00 00 20 43 4B 41  .H.......... CKA
41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41  AAAAAAAAAAAAAAAA
41 41 41 41 41 41 41 41 41 41 41 41 41 00 00 21  AAAAAAAAAAAAA..!
00 01 00 00 00 00 00 D1 09 45 42 49 5A 50 45 4E  .........EBIZPEN
31 20 20 20 20 20 20 20 00 44 00 45 42 49 5A 50  1       .D.EBIZP
45 4E 31 20 20 20 20 20 20 20 20 44 00 45 42 49  EN1        D.EBI
5A 50 45 4E 31 20 20 20 20 20 20 20 03 44 00 46  ZPEN1       .D.F
54 42 43 4F 20 20 20 20 20 20 20 20 20 20 00 C4  TBCO          ..
00 46 54 42 43 4F 20 20 20 20 20 20 20 20 20 20  .FTBCO          
1E C4 00 45 42 49 5A 50 45 4E 31 24 20 20 20 20  ...EBIZPEN1$    
20 20 03 44 00 41 37 30 30 36 37 20 20 20 20 20    .D.A70067     
20 20 20 20 03 44 00 46 54 42 43 4F 20 20 20 20      .D.FTBCO    
20 20 20 20 20 20 1D 44 00 01 02 5F 5F 4D 53 42        .D...__MSB
52 4F 57 53 45 5F 5F 02 01 C4 00 00 09 6B 45 35  ROWSE__......kE5
D0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00 00 00 00 00 00 00 00 00 00 00 00 00           .............
9 names in response
EBIZPEN1       <0x00> Unique  Workstation Service
EBIZPEN1       <0x20> Unique  File Server Service
EBIZPEN1       <0x03> Unique  Messenger Service
FTBCO          <0x00> Group   Domain Name
FTBCO          <0x1e> Group   Potential Master Browser
EBIZPEN1$      <0x03> Unique  Messenger Service
A70067         <0x03> Unique  Messenger Service
FTBCO          <0x1d> Unique  Master Browser
..__MSBROWSE__.<0x01> Group   Master Browser

User is A70067, system NetBIOS name is EBIZPEN1, domain is FTBCO.

The packet capture shows the request:
Src: 10.226.24.50 udp/32823
Dst: 10.226.41.224 udp/137
0000   00 04 00 01 00 06 00 50 8b 2c 95 12 00 00 08 00  .......P.,......
0010   45 00 00 4e 00 00 40 00 40 11 e2 c9 0a e2 18 32  E..N..@.@......2
0020   0a e2 29 e0 80 37 00 89 00 3a 46 62 a2 48 00 00  ..)..7...:Fb.H..
0030   00 01 00 00 00 00 00 00 20 43 4b 41 41 41 41 41  ........ CKAAAAA
0040   41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41  AAAAAAAAAAAAAAAA
0050   41 41 41 41 41 41 41 41 41 00 00 21 00 01        AAAAAAAAA..!..

and reply:
Src: 10.226.41.224 udp/137
Dst: 10.226.24.50 udp/32823
0000   00 00 00 01 00 06 00 12 44 4e cc 00 00 00 08 00  ........DN......
0010   45 00 01 25 cc 34 00 00 7f 11 16 be 0a e2 29 e0  E..%.4........).
0020   0a e2 18 32 00 89 80 37 01 11 f1 96 a2 48 84 00  ...2...7.....H..
0030   00 00 00 01 00 00 00 00 20 43 4b 41 41 41 41 41  ........ CKAAAAA
0040   41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41  AAAAAAAAAAAAAAAA
0050   41 41 41 41 41 41 41 41 41 00 00 21 00 01 00 00  AAAAAAAAA..!....
0060   00 00 00 ad 07 45 42 49 5a 50 45 4e 31 20 20 20  .....EBIZPEN1   
0070   20 20 20 20 00 44 00 45 42 49 5a 50 45 4e 31 20      .D.EBIZPEN1 
0080   20 20 20 20 20 20 20 44 00 45 42 49 5a 50 45 4e         D.EBIZPEN
0090   31 20 20 20 20 20 20 20 03 44 00 46 54 42 43 4f  1       .D.FTBCO
00a0   20 20 20 20 20 20 20 20 20 20 00 c4 00 46 54 42            ...FTB
00b0   43 4f 20 20 20 20 20 20 20 20 20 20 1e c4 00 45  CO          ...E
00c0   42 49 5a 50 45 4e 31 24 20 20 20 20 20 20 03 44  BIZPEN1$      .D
00d0   00 41 37 30 30 36 37 20 20 20 20 20 20 20 20 20  .A70067         
00e0   03 44 00 00 09 6b 45 35 d0 00 00 00 00 00 00 00  .D...kE5........
00f0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0100   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0110   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0120   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
0130   00 00 00 00 00                                   .....

