Display Filter Reference: NetBIOS Name Service

Protocol field name: nbns

Versions: 1.0.0 to 2.6.5

Back to Display Filter Reference

Field name Description Type Versions
nbns.addr Addr IPv4 address 2.0.0 to 2.6.5
nbns.class Class Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.count.add_rr Additional RRs Unsigned integer, 2 bytes 1.0.0 to 2.6.5
nbns.count.answers Answer RRs Unsigned integer, 2 bytes 1.0.0 to 2.6.5
nbns.count.auth_rr Authority RRs Unsigned integer, 2 bytes 1.0.0 to 2.6.5
nbns.count.queries Questions Unsigned integer, 2 bytes 1.0.0 to 2.6.5
nbns.data Data Sequence of bytes 2.0.0 to 2.6.5
nbns.data_length Data length Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.flags Flags Unsigned integer, 2 bytes 1.0.0 to 2.6.5
nbns.flags.authoritative Authoritative Boolean 1.0.0 to 2.6.5
nbns.flags.broadcast Broadcast Boolean 1.0.0 to 2.6.5
nbns.flags.opcode Opcode Unsigned integer, 2 bytes 1.0.0 to 2.6.5
nbns.flags.rcode Reply code Unsigned integer, 2 bytes 1.0.0 to 2.6.5
nbns.flags.recavail Recursion available Boolean 1.0.0 to 2.6.5
nbns.flags.recdesired Recursion desired Boolean 1.0.0 to 2.6.5
nbns.flags.response Response Boolean 1.0.0 to 2.6.5
nbns.flags.truncated Truncated Boolean 1.0.0 to 2.6.5
nbns.id Transaction ID Unsigned integer, 2 bytes 1.0.0 to 2.6.5
nbns.incomplete_entry incomplete entry Label 2.0.0 to 2.6.5
nbns.jumpers Jumpers Unsigned integer, 1 byte 2.0.0 to 2.6.5
nbns.max_num_pending_sessions Max number of pending sessions Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.max_total_sessions_possible Max total sessions possible Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.name Name Character string 2.0.0 to 2.6.5
nbns.name_flags Name flags Unsigned integer, 2 bytes 1.10.0 to 2.6.5
nbns.name_flags.act Name is active Boolean 1.10.0 to 2.6.5
nbns.name_flags.cnf Name is in conflict Boolean 1.10.0 to 2.6.5
nbns.name_flags.drg Name is being deregistered Boolean 1.10.0 to 2.6.5
nbns.name_flags.group Name type Boolean 1.10.0 to 2.6.5
nbns.name_flags.ont ONT Unsigned integer, 2 bytes 1.10.0 to 2.6.5
nbns.name_flags.prm Permanent node name Boolean 1.10.0 to 2.6.5
nbns.nb_flags Name flags Unsigned integer, 2 bytes 1.10.0 to 2.6.5
nbns.nb_flags.group Name type Boolean 1.10.0 to 2.6.5
nbns.nb_flags.ont ONT Unsigned integer, 2 bytes 1.10.0 to 2.6.5
nbns.netbios_name Name Character string 2.0.0 to 2.6.5
nbns.num_alignment_errors Number of alignment errors Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.num_collisions Number of collisions Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.num_crcs Number of CRCs Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.num_good_receives Number of good receives Unsigned integer, 4 bytes 2.0.0 to 2.6.5
nbns.num_good_sends Number of good sends Unsigned integer, 4 bytes 2.0.0 to 2.6.5
nbns.num_no_resource_conditions Number of no resource conditions Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.num_send_aborts Number of send aborts Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.number_of_names Number of names Unsigned integer, 1 byte 2.0.0 to 2.6.5
nbns.numcommand_blocks Number of command blocks Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.numpending_sessions Number of pending sessions Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.numretransmits Number of retransmits Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.period_of_statistics Period of statistics Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.session_data_packet_size Session data packet size Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.test_result Test result Unsigned integer, 1 byte 2.0.0 to 2.6.5
nbns.ttl Time to live Unsigned integer, 4 bytes 2.0.0 to 2.6.5
nbns.type Type Unsigned integer, 2 bytes 2.0.0 to 2.6.5
nbns.unit_id Unit ID Ethernet or other MAC address 2.0.0 to 2.6.5
nbns.version_number Version number Unsigned integer, 2 bytes 2.0.0 to 2.6.5
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ AppResponse 11
  • • Full stack analysis – from packets to pages
  • • Rich performance metrics & pre-defined insights for fast problem identification/resolution
  • • Modular, flexible solution for deeply-analyzing network & application performance
Learn More