What is a typical NBNS query?

Prepare for the Wireshark Traffic Analysis Exam. Study with flashcards and multiple choice questions, each question includes hints and explanations. Ace your exam!

Multiple Choice

What is a typical NBNS query?

Explanation:
NetBIOS Name Service uses a name query to map NetBIOS names to IP addresses. The typical NBNS query is a name query sent as a broadcast on the local network (UDP port 137) so any host owning the NetBIOS name can respond with its IP. This broadcast approach is common in environments without a centralized NBNS/WINS server, making it the usual behavior you’d expect to see in a capture. Other possibilities, like a time query, are unrelated to NBNS, and while a unicast NBNS query can occur when a WINS server is present, it is not the typical local-network behavior. Resolving an A record is a DNS operation, not NBNS.

NetBIOS Name Service uses a name query to map NetBIOS names to IP addresses. The typical NBNS query is a name query sent as a broadcast on the local network (UDP port 137) so any host owning the NetBIOS name can respond with its IP. This broadcast approach is common in environments without a centralized NBNS/WINS server, making it the usual behavior you’d expect to see in a capture. Other possibilities, like a time query, are unrelated to NBNS, and while a unicast NBNS query can occur when a WINS server is present, it is not the typical local-network behavior. Resolving an A record is a DNS operation, not NBNS.

Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy