Solved

netbios name translation problem

Posted on 2011-02-17
15
653 Views
Last Modified: 2012-05-11
Hi


forsome reason i have netbios problem and computer seeing incorrect IP to the server name,
the wins server also have the bad record.

let's say that servername=10.48.48.13, for some reason when pinging to the netbios name i receving 10.48.48.178 (ping to FQDN is fine) , computer doesnt set to use WIN'S , however the server also have 2 records of the computername =10.48.48.178 (the wronge ip), i deleting the record but they keep coming back.

when i ping to 10.48.48.178 to try to troubleshot the problem and find the computer or whaever it is i get no reply.

how do i troubleshot  this problem?


0
Comment
Question by:ymg800
  • 8
  • 4
  • 2
  • +1
15 Comments
 
LVL 5

Expert Comment

by:zippybungle2003
ID: 34914826
IS this over vlans?
0
 
LVL 2

Expert Comment

by:treetop3
ID: 34914882
Check you DNS server and remove the entries.

On the Client run ipconfig /displaydns and check the entries

then run ipconfig /flushdns and test
0
 

Author Comment

by:ymg800
ID: 34915227
dns only have the right record...

when it will happend again i will try to use ipconfig /displaydns to see if it's telling me something usfull

ipconfig /flushdns solving the problem but i sure it's not a DNS problem since FQDN is fine and i also have the bad record in the WINS server....
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 2

Expert Comment

by:treetop3
ID: 34915373
You shouldn't be using WINS if you have DNS on your network.

Is there a reason why you have both?
0
 

Author Comment

by:ymg800
ID: 34915478
hmmm..
wins reduce broadcasts when trying to find compuer by nebiose name...
u can access computer with UPN (\\servername) without wins?(not sure about that?)
also if old app trying to access single lable name...
and ... if some computer didnt registered in the dns server then i have backup...

please tell me with of my statment are correct and which isnt....
0
 
LVL 2

Expert Comment

by:treetop3
ID: 34915706
Microsoft is trying to Phase out WINS
You only require it if you have applications that still use NetBIOS to function

Have a look at this:
http://resources.metapress.com/pdf-preview.axd?code=lh7607x837375370&size=largest

I disabled it on my network and have a pure DNS lookup, now I migrated from an old NT WINS domain to a new AD domain and done away with WINS
0
 

Author Comment

by:ymg800
ID: 34915724
yes but global names had problems...(so i heard)

i know ms trying to get rid of it but it doent saying that this day has come

can u access computer with single lable name without wins , link the ups : " \\SERVERNAME"
0
 
LVL 2

Expert Comment

by:treetop3
ID: 34915739
Yes of course, the domain prefix only comes into effect when you are moving from the LAN to a WAN
0
 

Author Comment

by:ymg800
ID: 34915764
dont make sence...

u only need it when u moving from LAN
if u are in a LAN the domain prefix is added automaticlly as per as your domain name
there can be mulitype dns zones so the prefix is valid...
0
 
LVL 38

Expert Comment

by:ChiefIT
ID: 34931962
Don't confuse or try to integrate WINS with DNS... They are separate entities.

WINS should only be used to resolve Netbios names across a WAN. It's because netbios is not routable, and held to the broadcast domain. A WINS server will accept the netbios broadcast for its local LAN, and then replicate that database with outer WINS partners on the WAN...

The ONLY corelation between WINS and DNS is if a master browser server can not resolve a netibos name, then DNS can look for another netbios server...

If you do NOT have a faulty DNS record, then it would appear that your computer has an ALTERNATIVE IP address or a second nic that isn't registering within DNS.

Can you provide an IPconfig /all of this computer that has a bad record..

If IPconfig flushDNS resolves the issue, then we have a different problem of a compter that has the same name as your server on the network. IP of .178 would probably be a Dynamic IP address. So, do you have that IP allocated to a computer in the network?

One thing you can do as a network admin is go to explorer and as a URL type:

//10.10.10.10/C$   and look at the admin shares where 10.10.10.10 is the incorrect IP.

Another handy tool to get more information is to go to the server and type:
Browstat /status
To make sure your browser is a unique name.
0
 

Author Comment

by:ymg800
ID: 34967762
HI

let me put it in points:

1. do u say that WINS doesnt reduce the broadcast in a LAN? far as i understand client use the wins server in unicast mode to resolve netbiose name

2.how can DNS serach for another WINS server? where is the option for that? is that automatic?

3.there is no another IP or server or another NIC, only single IP also run ipconfig /all to confirm

4.well here is a new thing , while the record for wins for app-metro (server name) is not shown in WINS  anymore i now see that i have some DHCP for the 178 to the app-metro!!
but there is no ping to the IP and ping to the name app-metro gives me the right ip (12), well how can i trace that PC if it's exist??

5.when tring to access \\10.48.48.178\c$, no reply

6. i tried goint to the server and type Browstat /status but it's saying the command is not recodnized??


thank a head!

0
 
LVL 38

Expert Comment

by:ChiefIT
ID: 35042124
Sorry for the late reply:

I am bringing up a new domain.

1) Netbios broadcast are spit out by the client to populate a WINS server, If no WINS server exists, there is a WINS caching server, (called a domain master browser), that collects the information. Typically the domain master browser is the PDCe. So, no a WINS server really doesn't reduce netbios broadcasts.

2) http://support.microsoft.com/kb/142309

3) OK, is there a VPN connection. Those can also be considered and extra Netbios binding.
Multiple bindings can be a physical nic or virtual connection, when it comes to netbios.

4) It appears you may have created a manual IP address on app-metro, not a dynamic IP?? DHCP  updates are performed by the client. When the client releases the IP, the lease isn't immediately deleted from the DHCP database. It's held, (by default), for 4 hours called a reprieval time. Then once an hour, the DHCP server comes through and eliminates those leases so they can be used by other clients. It's my guess, you see the lease during this 4 hour period. If not, you have a machine that was once called app-metro that has a different mac address, and it was DISABLED in ADUC. Disabling a PC in ADUC will retain the lease in DHCP and not allow the DHCP server to clean up that lease. Leases are reserved by MAC addresses. So, look in ADUC to see if you have a computer called app-metro disabled.

I found this out myself during this problematic period:
http://www.experts-exchange.com/Networking/Protocols/DHCP/Q_22847336.html

5) that leads into a disabled computer in ADUC, as in my thread above.

6)Browstat is a part of the 2003 server admin pack. Do you have DCdiag on that computer?
0
 

Author Comment

by:ymg800
ID: 35067074
1. ok undertood

2.sorry but it cant see how it is related, where is the option it's mentioned how the DNS find another WINS in diffrent segment? also i didnt understood how can DNS help to resolve nebios name? do they mean that when netbouse name cant be resoved then it simply using DNS by adding the suffix?

3.no vpn

4. i dont have computer named   app-metro disabled... DHCP still showing app-metro = 10.x..x.178
by the way the server is using static DHCP so i cant understand why it's there...and no other name for app-metro there or record for the real address.

another thing, the name app-metro is not listed with the FQDN name but only the namebiose name while almost all other records listed with FQDN in the DHCP.

5.cant disbale as only the vailid on is there
6.Browstat /status svailble on the DC and the master browser is the DC which is the PDC

THX
0
 

Accepted Solution

by:
ymg800 earned 0 total points
ID: 35094341
well finnaly find the problematic computer...

it's appear someone created VM with that name and that IP... stupid stupid stupid... :)
0
 

Author Closing Comment

by:ymg800
ID: 35135808
that is the solution
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
I've written instructions for one router type, but this principle may be useful for others of the same brand and even other brands of router. Problem: I had an issue especially with mobile devices that refused to use DNS information supplied via…
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.
Along with being a a promotional video for my three-day Annielytics Dashboard Seminor, this Micro Tutorial is an intro to Google Analytics API data.

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question