Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: RE: [Ethereal-users] Strange Packet found - need some advice

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Andreas Sikkema" <andreas.sikkema@xxxxxxxxxxxx>
Date: Wed, 25 May 2005 15:26:32 +0200
ethereal-users-bounces@xxxxxxxxxxxx wrote:

> No.    Time        Source                Destination  Protocol Info
> 1335 23.703679   10.1.xxx.xxx           10.1.255.255
> NBNS     Name
> query NB WWW.ZONEAGE.NET<00>
> 0000  ff ff ff ff ff ff 00 40 ca 12 45 f3 08 00 45 00
> [email protected]. 0010  00 4e 66 79 00 00 80 11 b5 44 0a 01 0a e0 0a
> 01 .Nfy.....D...... 0020  ff ff 00 89 00 89 00 3a 83 02 a6 00 01 10
> 00 01 .......:........ 0030  00 00 00 00 00 00 20 46 48 46 48 46 48
> 43 4f 46 ...... FHFHFHCOF 0040  4b 45 50 45 4f 45 46 45 42 45 48 45
> 46 43 4f 45 KEPEOEFEBEHEFCOE 0050  4f 45 46 46 45 41 41 00 00 20 00
> 01               OEFFEAA.. .. 
> 

At my previous workplace we had this automatic proxy configuration 
thing for Internet Explorer. I don't know why or what, but there 
was a bug in the script where IE would do a WINS lookup for hostnames 
with domains of a certain length. I think it was smaller than 8 or 
something like that.

I'm sorry, but I don't have more information.

-- 
Andreas Sikkema                Rits tele.com
Van Vollenhovenstraat 3    3016 BE Rotterdam
t: +31 (0)10 2245544  f: +31 (0)10 413 65 45