Solved

NetBios name requests: Which service or application is sending them?

Posted on 2006-10-30
9
166 Views
Last Modified: 2010-03-18
Hi!

I have a problem: It all started when the IT services removed an old server from the net. Whenever one tries to open a simple text file or anything or right click some file or folder on whatever drive as e.g. C: or even the USB stick it takes more than 20 seconds till that action happens. Using a network protocol analyzer I found out that after the mouse event there are sent a number of name request via DNS and NetBios regarding that old server. When all of them returned an error after 20 seconds the chosen action is finally executed.

When I switch off NetBios over TCP/IP then opening files works without delay as it should. But this is probably not a clean solution since something in the background will still ask for the old server.

How can I find the application or service which is initiating the name requests so that I can change its settings?

I looked already for network drives but all the drives I can find are working correctly. It is also strange that the name requests are send no matter what file on what drive I try to access.

Since a lot of computers in our office have this problem and our IT services left us alone with this saying they can't find any problem, I would appreciate your help.

Thanks a million in advance!
0
Comment
Question by:mccoz
  • 4
  • 3
9 Comments
 
LVL 40

Expert Comment

by:Fatal_Exception
Comment Utility
Try flushing and refreshing the Browser Cache and DNS cache..

nbtstat -RR

ipconfig /flushdns
ipconfig /registerdns
0
 

Author Comment

by:mccoz
Comment Utility
Thanks for the suggestion!

I am not in my office right now but I will definitely try that later.

But shouldn't that happen automatically after shutting down Windows normally? This situation is enduring since over half a year already and I assume almost 20 PCs are affected so that it seems strange if old cashes are persisting for such a long time in so many PCs.
0
 
LVL 40

Expert Comment

by:Fatal_Exception
Comment Utility
Yes, it should, but try this as a first step to verify...  :)
0
 

Author Comment

by:mccoz
Comment Utility
Flushing those too cashes did not help. Any other suggestions?
0
6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

 
LVL 40

Expert Comment

by:Fatal_Exception
Comment Utility
Somewhere there is a lingering reference to that old server..  are you running a WINs server?  If so, ck it..

BTW:  turning off Netbios should not affect your PCs..  It is an older technology that is not necessary if you are running a DNS server...
0
 

Author Comment

by:mccoz
Comment Utility
Sorry, I neglected some "harmless" links in the registry: There were some file associations set to executables on the old server. Correcting these links solved the problem.

Thanks for your helpful comments!
0
 
LVL 40

Expert Comment

by:Fatal_Exception
Comment Utility
:)
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
Comment Utility
PAQed with points refunded (250)

Computer101
EE Admin
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Nslookup is a command line driven utility supplied as part of most Windows operating systems that can reveal information related to domain names and the Internet Protocol (IP) addresses associated with them. In simple terms, it is a tool that can …
We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now