AW: AW: nmbd & netbios name -> many addreses

Tue Mar 16 14:40:38 GMT 1999

134.83.16.25, 134.83.96.20 Are these the correct addresses?
Sorry the trace does not contain much information. I'd need a trace showing
all frames from the client's mac address in/out plus all broadcasts in
netmon or data general sniffer format.
I thought the client might have picked the wrong address - However as the
request is sent several times the client might discard the WINS response
altogether as invalid.

Martin

-----Ursprüngliche Nachricht-----
Von: Peter Polkinghorne [mailto:Peter.Polkinghorne at brunel.ac.uk]
Gesendet am: Dienstag, 16. März 1999 14:18
An: Martin Kuhne
Cc: Peter.Polkinghorne at brunel.ac.uk
Betreff: Re: AW: nmbd & netbios name -> many addreses

> 
> So it "complains". Would you care and elaborate? What is the error
message?
> Does the workstation retry the WINS query, or does it attempt a session
> setup to the target machine. If yes, what is the sender ip address in the
> session setup? What is the server response?
>
Sorry - more details - it appears to retry the WINS query, then gives up - I

append the full trace - from tcdump - queries on kudos - registered with 2 
addresses at biela the WINS server, and on willow & magda-8 which are
resolved 
by Samba via DNS to 1 address only.

The sequence on the NT machine is:

H:\>nbtstat -c

No names in cache

H:\>net use p: \\kudos\@gscratch
System error 53 has occurred.

The network path was not found.

H:\>nbtstat -c

No names in cache

> Any reason you use M-Node?
>
Sorry - I do not understand the question - I am not an expert on Windows NT

> Martin
> 
NB Callisto is a Sun on a hub with test-nt on it:

callisto.brunel.ac.uk% ~peter/tcpdump-solaris-2.5 -i le0 -s 200 port 137^M
tcpdump-solaris-2.5: listening on le0^M
12:03:06.227154 test-nt.brunel.ac.uk.netbios-ns >
biela.brunel.ac.uk.netbios-ns
:
^M
>>> NBT UDP PACKET(137): QUERY; REQUEST; UNICAST^M
TrnID=0x802C^M
OpCode=0^M
NmFlags=0x10^M
Rcode=0^M
QueryCount=1^M
AnswerCount=0^M
AuthorityCount=0^M
AddressRecCount=0^M
QuestionRecords:^M
Name=KUDOS           NameType=0x20 (Server)^M
QuestionType=0x20^M
QuestionClass=0x1^M
^M
^M
12:03:06.228233 biela.brunel.ac.uk.netbios-ns >
test-nt.brunel.ac.uk.netbios-ns
:
^M
>>> NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST^M
TrnID=0x802C^M
OpCode=0^M
NmFlags=0x58^M
Rcode=0^M
QueryCount=0^M
AnswerCount=1^M
AuthorityCount=0^M
AddressRecCount=0^M
^M
ResourceRecords:^M
Name=KUDOS           NameType=0x20 (Server)^M
ResType=0x20^M
ResClass=0x1^M
TTL=518141^M
ResourceLength=12^M
ResourceData=^M
[000] 40 00 86 53 10 19 40 00  86 53 60 14              @..S.. at . .S`.^M
^M
 (DF)^M
12:03:06.228681 test-nt.brunel.ac.uk.netbios-ns >
biela.brunel.ac.uk.netbios-ns
:
^M
>>> NBT UDP PACKET(137): QUERY; REQUEST; UNICAST^M
TrnID=0x802E^M
OpCode=0^M
NmFlags=0x10^M
Rcode=0^M
QueryCount=1^M
AnswerCount=0^M
AuthorityCount=0^M
AddressRecCount=0^M
QuestionRecords:^M
Name=KUDOS           NameType=0x20 (Server)^M
QuestionType=0x20^M
QuestionClass=0x1^M
^M
^M
12:03:06.229695 biela.brunel.ac.uk.netbios-ns >
test-nt.brunel.ac.uk.netbios-ns
:
^M
>>> NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST^M
TrnID=0x802E^M
OpCode=0^M
NmFlags=0x58^M
Rcode=0^M
QueryCount=0^M
AnswerCount=1^M
AuthorityCount=0^M
AddressRecCount=0^M
^M
ResourceRecords:^M
Name=KUDOS           NameType=0x20 (Server)^M
ResType=0x20^M
ResClass=0x1^M
TTL=518141^M
ResourceLength=12^M
ResourceData=^M
[000] 40 00 86 53 10 19 40 00  86 53 60 14              @..S.. at . .S`.^M
^M
 (DF)^M
12:04:06.840340 test-nt.brunel.ac.uk.netbios-ns >
biela.brunel.ac.uk.netbios-ns
:
^M
>>> NBT UDP PACKET(137): QUERY; REQUEST; UNICAST^M
TrnID=0x8030^M
OpCode=0^M
NmFlags=0x10^M
Rcode=0^M
QueryCount=1^M
AnswerCount=0^M
AuthorityCount=0^M
AddressRecCount=0^M
QuestionRecords:^M
Name=MAGDA-8         NameType=0x20 (Server)^M
QuestionType=0x20^M
QuestionClass=0x1^M
^M
^M
12:04:06.841387 biela.brunel.ac.uk.netbios-ns >
test-nt.brunel.ac.uk.netbios-ns
:
^M
>>> NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST^M
TrnID=0x8030^M
OpCode=0^M
NmFlags=0x58^M
Rcode=0^M
QueryCount=0^M
AnswerCount=1^M
AuthorityCount=0^M
AddressRecCount=0^M
^M
ResourceRecords:^M
Name=MAGDA-8         NameType=0x20 (Server)^M
ResType=0x20^M
ResClass=0x1^M
TTL=2404^M
ResourceLength=6^M
ResourceData=^M
AddrType=0x0^M
Address=134.83.8.1^M
^M
 (DF)^M
12:04:31.283110 test-nt.brunel.ac.uk.netbios-ns >
biela.brunel.ac.uk.netbios-ns
:
^M
>>> NBT UDP PACKET(137): QUERY; REQUEST; UNICAST^M
TrnID=0x8032^M
OpCode=0^M
NmFlags=0x10^M
Rcode=0^M
QueryCount=1^M
AnswerCount=0^M
AuthorityCount=0^M
AddressRecCount=0^M
QuestionRecords:^M
Name=WILLOW          NameType=0x20 (Server)^M
QuestionType=0x20^M
QuestionClass=0x1^M
^M
^M
12:04:31.290082 biela.brunel.ac.uk.netbios-ns >
test-nt.brunel.ac.uk.netbios-ns
:
^M
>>> NBT UDP PACKET(137): QUERY; POSITIVE; RESPONSE; UNICAST^M
TrnID=0x8032^M
OpCode=0^M
NmFlags=0x58^M
Rcode=0^M
QueryCount=0^M
AnswerCount=1^M
AuthorityCount=0^M
AddressRecCount=0^M
^M
ResourceRecords:^M
Name=WILLOW          NameType=0x20 (Server)^M
ResType=0x20^M
ResClass=0x1^M
TTL=7200^M
ResourceLength=6^M
ResourceData=^M
AddrType=0x0^M
Address=134.83.240.141^M
^M
 (DF)^M
^C^M
381 packets received by filter^M
0 packets dropped by kernel^M
callisto.brunel.ac.uk% ^
script done on Fri Mar 12 11:04:48 1999