Wins in a Sniffer Trace

[Guest_imported]

Does anyone know how to tell what type of Wins broadcast a computer is doing in a cpature file. I have a capture file that has a Wins lookup every two minutes and I want to know if it is a P-Node, B-node, M-node or H-node but I am not sure what to look for in the trace file.

 

[jgercken]

Wow, havn't heard that in a long time. If the capture can detect a wins broadcast (uses port 139) look to see if the destination address is always broadcast (B-node) unicast to the WINS server (P-mode) or both (H-node). Outa curiosity why do you even care?
----------------------------------------
Wassabi Pop Tarts! Write Kellogs today!