Networking Tools Detecting Mystery 2nd Domain on my Network

Posted on 2004-11-19
Last Modified: 2010-05-18
The scenario:

Windows 2003 Server (Servers)
Windows XP Pro (workstations)

When I run Cain and Abel and a few other networking utilities I am seeing two domains instead of only one.  The first one is correct and contains all the entities it should.  The second domain "GALAN" is a mystery to me.  I've looked through the Active Directory and see no such domain or on the servers.  How can I trace this domain/workgroup down? If more information is needed please let me know.

Question by:srejja
    LVL 19

    Expert Comment

    by:Daniel Van Der Werken
    If you can find the NetBIOS hostname of the GALAN domain contoller, you can use nbtstat -a to find the address of the network adapter for this machine.

    For example, let's assume GALAN is on the system named GALAN:

    C:\>nbtstat -a itr2sdc001

               NetBIOS Remote Machine Name Table

           Name               Type         Status
        GALAN     <00>  UNIQUE      Registered
        GALAN     <00>  GROUP       Registered
        GALAN     <1C>  GROUP       Registered
        GALAN     <20>  UNIQUE      Registered
        ..__MSBROWSE__.<01>  GROUP       Registered

        MAC Address = 00-B0-D0-E1-5E-92


    Most network admins should have tools that tell you which port a specific network adapter is connected to.

    LVL 3

    Author Comment

    Can you name a few of these tools ?
    LVL 2

    Expert Comment

    Here are a few I use.

    The first one has a bunch of simple network tools. They are both free.
    LVL 87

    Accepted Solution

    Get gfi lannetscan ( There is a trial version which is fully usable during the trial period, With this scanner you can get as much info of all connected devices as possible.
    LVL 15

    Expert Comment

    GALAN - Guarded Authentic local AREA network

    Checkout to see if you are running security system on your LAN...

    LVL 3

    Author Comment

    No internal security system per say...we do have a ISA proxy server along with our firewalls.  

    I ran gfi lannetscan and it should the GALAN domain as well, but would give no further details.  When I tried to run a test on that domain I received an error message stating that "Error: You did not select any computer or domain"

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Join & Write a Comment

    Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
    Many companies are looking to get out of the datacenter business and to services like Microsoft Azure to provide Infrastructure as a Service (IaaS) solutions for legacy client server workloads, rather than continuing to make capital investments in h…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now