Intrusion Detection FAQ: I have the NBT name of a system in the security log of Windows NT. How can I translate this to the IP address?

Windows NT doesn't provide a command-line tool that would translate a NetBIOS name to an IP address. However, if the target system is up and running, you can use nbtstat to do the translation. Here's how:

nbtstat -a NBT_NAME establishes a connection to the remote system. Then, nbtstat -c displays the IP address.

Dirk Lehmann
Siemens CERT