Netbios Name Query retransmissions

[keithja]

I have a capture that my analysis software (Observer) is showing as lots of udp netbios name query retransmissions.

(the capture was obtained by spanning ingress only on our main VLAN)

When I look at the decode, I see station 1 making a name request, station 2 responding with a negative response, in half an ms, then station 1 asking again 3 seconds later.

This repeats twice (original plus 2 addtl requests for same info) Observer is counting the 2 followup requests as retransmissions

I wsa thinking it was normal behaviour for the extra requests if the WINS server doesnt know the queried name, is it not?

Or is there something else I should be looking at?

Thanks for your help!!

 

[keithja]

Oops, my mistake - I misread Network general as general network - is there another forum I should post this on?

 

[lerdalt]

I think you've got it. Sounds just like there isn't the appropriate entry on the WINS server. But I don't know how to go about fixing it for you.