Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] How to find the application sending a name request?

From: Bob Frottner <frotty22@xxxxxxxxx>
Date: Sun, 29 Oct 2006 12:11:34 -0800 (PST)
Addition:
When I disable NETBios over TCP/IP in the WINS settings the waiting time and the name queries do not happen. But I don't know for certain that disabling this does not do any harm to other functions.

Has anybody an idea where I can find the entry of the wrong server address so that I can correct that? It seems to be not in hosts or lmhosts.sam.

Thanks once more,
  Bob



Bob Frottner <frotty22@xxxxxxxxx> wrote:
Thanks again, Jim!

It is indeed my own PC sending these name requests (but it seems like most of the computers of my colleagues are set up like this). Thus, I have to find out which application or service is doing that.

I have tried out all service which could potentially be the culprits but without success.

I describe the annoying behavior again, which makes me doing this:
Whenever one tries to open a file or right click on it, it takes like 10-20 seconds before something happens. I noticed that right after the event there is a lot of network activity.
Using Wireshark I found that some application or service is sending name requests regarding a server which does not exist any more through the DNS service. There are also request via netbios NBNS. Now I need to know the application or service which in whose name DNS searches for the name resolution.

I've also searched the registry in hope that there is some entry containing that old servers name but also without success.

If somebody has another idea about this, please let me know!

Many thanks,
  Bob
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com _______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users


Check out the New Yahoo! Mail - Fire up a more powerful email and get things done faster.