This wiki has been migrated to and is now deprecated. Please use that site instead.

NetBIOS Name Service (NBNS)

The NetBIOS Name Service is part of the NetBIOS-over-TCP protocol suite, see the ["NetBIOS"] page for further information.

This protocol is often called WINS in ["CIFS"] documentation.


XXX - add a brief description of NBNS history

Protocol dependencies

Example traffic

XXX - Add example traffic here (as plain text or Ethereal screenshot).


The NBNS dissector is partially functional; it dissects NBNS-over-UDP, but not NBNS-over-TCP (I'm not sure we've ever seen any NBNS-over-TCP traffic).

Preference Settings

(XXX add links to preference settings affecting how NBNS is dissected).

Example capture file

XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.

Display Filter

A complete list of NBNS display filter fields can be found in the [ display filter reference]

Capture Filter

You cannot directly filter NBNS while capturing. However, as it runs atop ["UDP"] or ["TCP"] port 137, you can filter on those ports.