WINS server question

[Cstorms]

So ok, if I have not disabled the use of wins and leave the option to default on each client machine NIC and have no WINS server in place, shouldnt I in theory be seeing alot of UDP broadcast traffic? (have no dhcp server, maybe this is the reason?)

I have been using the Microsoft Network Monitor in its default mode (after diggin around and not finding anything else to check for scanning for this type of traffic) and have yet to see any kind of broadcast like this.

Anyone want to send a good explanation if my thoughts are all goofy, or maybe some good links about the subject.

Thanks in advance!

Cory

 

[itsp1965]

I don't know exactly what UDP traffic you're expecting to see but you should be seeting traffic on ports 135, 137, 138, 139, 445 at minimum (137/138 I think are they only UDP ports for Netbios traffic -- I could be wrong). Regardless of WINS there is always going to be some Netbios over IP traffic on an MS network