Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] Unexplained Netbios Traffic

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 1 Oct 2008 12:25:44 -0700


On Oct 1, 2008, at 12:13 PM, Jon Ziminsky wrote:

Attached is a snippet of the capture files, as i tried to post the entire file and was told by the bot that my message was too big.

Are those the only packets coming from that host, or was that capture done with a filter that only captured NBNS packets? If there's other traffic coming from that host, is it trying to do DNS reverse lookups on those IP addresses as well?

  • Follow-Ups:
    • Re: [Wireshark-users] Unexplained Netbios Traffic
      • From: Jon Ziminsky
  • References:
    • [Wireshark-users] Unexplained Netbios Traffic
      • From: Jon Ziminsky
    • Re: [Wireshark-users] Unexplained Netbios Traffic
      • From: Guy Harris
    • Re: [Wireshark-users] Unexplained Netbios Traffic
      • From: Jon Ziminsky
  • Prev by Date: Re: [Wireshark-users] Unexplained Netbios Traffic
  • Next by Date: Re: [Wireshark-users] Unexplained Netbios Traffic
  • Previous by thread: Re: [Wireshark-users] Unexplained Netbios Traffic
  • Next by thread: Re: [Wireshark-users] Unexplained Netbios Traffic
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation