NBT Connection Activity

[dvrichard]

When I review my sniffer logs, I see that many of the computers on my network are making NBT connections to computers on different subnets. Computer1, for example, will go through all the workstations and servers on subnet2, then on subnet3, making a NBT connection to IPC$ on, then logging off that connection, and closing it. Computer1 seems to cycle through each subnet on the WAN, and within each subnet, cycle through each computer on the subnet.

We are running Windows NT4.0 as well as some Windows 2000 & Windows 95 on an NT-based domain.

Is this behavior normal? I have received conflicting answers from different consultants.

Thanks in advance,

Dick