How to get 'rid' of this constant broadcast message my laptop keeps doing ...

Posted on 2009-02-08
Last Modified: 2012-05-06
I have attached a wireshark .JPG to this question, so you can see exactly what I'm talking about.

It is hard to describe the problem, but I'll try ...

For about 2 weeks last year, I was contracting at a site as a daily IT helper ...
The netBIOS name of each PC on site was something like this:


The AL was the company name ... the number is the location of the PC ... and the last part is the OS on the system.

Since that time ... I always see these DARN broadcast messages from my laptop when I do any Wireshark work (I've cleared my DNS cache dozens of times ... I'm using DHCP 99.99% of the time, and I've check all the TABS for network configuration (even the advance TABS ... etc.)

I simply cannot find 'where' on my laptop this reference to the old company is located at.

I hope this make sense.

I have not been back to the site where this started at in nearly 6 months ...

I have no idea why, how, or where this is 'stuck' in my networking configuration process.

Question by:pugdog_fan
    LVL 7

    Expert Comment

    Could be something left over in my network places
    LVL 12

    Expert Comment

    go to a cmd prompt and do a 'net use' and see if anything is still registered for the old network..

    it looks like a DNS name query on an old share that hasnt been removed..
    LVL 5

    Accepted Solution

    I captured a few minutes and I got those broadcasts about an computer in my network.
    I searched for that name in my registry and I found that name under my Antivirus directory.

    Try to search your registry entries and see if that computer name appears somewhere. Maybe you will find something that you can erase.
    LVL 1

    Author Comment

    ionut mir:

    Good suggestion ... I did exactly what you said, and I found three entries in my Windows XP registry files for that NBMS 'name'.  I removed the entries ... rebooted my PC ... and I've run Wireshark a bunch of times.  They are GONE.

    I get different NBMS broadcasts now (they don't bother me because they look like 'normal' stuff for announcements and browser election related ...).

    I'll close this question in a bit ... and award you the points, but I wanted to put in another screen shot of a capture I got to see if anyone has any pointers on it ...

    LVL 1

    Author Comment

    After getting the NBNS stuff to 'stop' showing 'false' stuff ... I rebooted my PC (to get my Windows registry to reload fresh).  I kept the CAT-5e Ethernet cable out of the NIC card, so I could get control of my desktop 1st (to relaunch Wireshark with a clean capture).

    When I that, I noticed some 'incoming' Internet traffic from Microsoft that I'm not sure why/how my PC would have 'asked' or generated it.

    NOTE:  The picture below is like after the 2nd or 3rd reboot and Wireshark capture.  It might show my PC 1st 'asking' for traffic from the 65.x.x.x network ... but in the earlier captures ... the 65.x.x.x network traffic came in without my launching any Internet stuff (so maybe something in the registry is asking Microsoft for information)????

    Can you tell what the traffic in this picture is about?

    LVL 5

    Assisted Solution

    If you paste that IP in Internet explorer... and if you have connection to internet it will go to, so I hope this will answer your question :).

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    A few months ago I attended the Rocky Mountain IPv6 Summit which was a two-day educational event; it was the 3rd annual conference held here in Denver, Colorado that was held at the Hyatt Regency Denver at the Colorado Convention Center. It was an e…
    Understanding FTPS File transfer is a common requirement in most Enterprises. While there are numerous ways to get a file from Point A to Point B over a network, perhaps the most common method still in use is FTP – File Transfer Protocol. FTP is …
    Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now