This wiki has been migrated to https://gitlab.com/wireshark/wireshark/-/wikis/home and is now deprecated. Please use that site instead.
Differences between revisions 2 and 3
Revision 2 as of 2005-03-20 20:41:11
Size: 1749
Editor: GuyHarris
Comment: "wellknown" -> "well known", NBDS is UDP-only.
Revision 3 as of 2005-03-20 20:41:40
Size: 1751
Editor: GuyHarris
Comment: More UDP-onliness.
Deletions are marked like this. Additions are marked like this.
Line 38: Line 38:
You cannot directly filter NBDS while capturing. However, as it runs atop ["UDP"] port 138, you can filter on those ports. You cannot directly filter NBDS while capturing. However, as it runs atop ["UDP"] port 138, you can filter on that port.
Line 41: Line 41:
 port 138 }}}  udp port 138 }}}

NetBIOS Datagram Service (NBDS)

The NetBIOS Datagram Service is part of the NetBIOS-over-TCP protocol suite, see the ["NetBIOS"] page for further information.

History

XXX - add a brief description of NBDS history

Protocol dependencies

  • ["UDP"]: Typically, NBDS uses ["UDP"] as its transport protocol. The well known UDP port for NBDS traffic is 138.

Example traffic

XXX - Add example traffic here (as plain text or Ethereal screenshot).

Ethereal

The NBDS dissector is partially functional; it should dissect all of the protocol, but does not reassemble datagrams fragmented at the NBDS layer.

Preference Settings

(XXX add links to preference settings affecting how NBDS is dissected).

Example capture file

XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.

Display Filter

A complete list of NBDS display filter fields can be found in the [http://www.ethereal.com/docs/dfref/n/nbdgm.html display filter reference]

  • Show only the NBDS based traffic:

     nbdgm 

Capture Filter

You cannot directly filter NBDS while capturing. However, as it runs atop ["UDP"] port 138, you can filter on that port.

  • Capture NBDS traffic:

     udp port 138 

Discussion

NetBIOS/NBDS (last edited 2008-04-12 17:49:42 by localhost)