Getting a list of Sessions from your Windows machines

InternetPeriscope allows you to view a list of sessions on a remote Windows machine using NetBT.

When a user connects to a shared printer or directory on a remote machine, a "session" is created for that connection.

Before you can get a list of sessions, you must first add the machine to the console.

Then, right click on the machine's icon, move your mouse over the "NetBT (NetBios over TCP/IP)" menu, and then click on the "Get list of Sessions" menu item, as shown in the Figure.
NetBT dialog

If you are not currently logged in to the remote machine or it's domain, you will see the message shown in the figure.
Login Dialog

Click on the OK button to see the login dialog.
Ok Button

Enter your username and password, and click on OK. Note: this dialog can also be used to check for the "Null Session Vulnerability".

After a few moments, a dialog will appear, displaying the Sessions that are active on that machine.
NetBT Sessions Dialog

In this figure, there are currently three remote sessions to this machine.

  • The user named "administrator" has been logged on from the machine named "Anita" for one hour and 51 minutes.
  • There is a NULL Session from the machine named "Miso".
  • The user named "administrator" has been logged on from the machine named "Miso" for one hour and 52 minutes. This user is currently doing something with one of this machine's resources (perhaps a printer or share), as the idle time is shown as zero minutes.

Problems, Comments, Suggestions? Click here to contact Greg Thatcher

Please read my Disclaimer

Copyright (c) 2013 Thatcher Development Software, LLC. All rights reserved. No claim to original U.S. Gov't works.