This wiki has been migrated to and is now deprecated. Please use that site instead.

NetBIOS (NetBEUI) Protocol

The NetBIOS (NetBEUI) protocol is a variant of the various NetBIOS API protocol implementations, see the NetBIOS page for further information.

The NetBIOS protocol is often called NetBIOS Extended User Interface (NetBEUI).

However, both the NetBIOS API and this Ethernet based networking protocol is/were often both called NetBIOS, leading to a lot of confusion.

Even the Wireshark dissection calls the NetBEUI part of the "NetBIOS world" simply NetBIOS, but this term ignores other NetBIOS protocol variants.

The NetBIOS protocol is obsolete and superseded by NetBIOS over TCP/IP (see NetBIOS).


XXX - add a brief description of NetBIOS protocol history

Protocol dependencies

Example traffic

XXX - Add example traffic here (as plain text or Wireshark screenshot).


The NetBIOS dissector is (fully functional, partially functional, not existing, ... whatever the current state is).

Preference Settings

(XXX add links to preference settings affecting how NetBIOS protocol is dissected).

Example capture file

XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Wireshark can open gzipped files automatically.

Display Filter

A complete list of NetBIOS protocol display filter fields can be found in the display filter reference

Beware: this will not show other NetBIOS variants such as NetBIOS-over-TCP/IP.

Capture Filter

This might not work with older versions of libpcap/WinPcap.

Beware: this will not capture other NetBIOS variants such as NetBIOS-over-TCP/IP.

See the NetBIOS page for further reference.


NetBIOS/NetBIOS (last edited 2008-04-12 17:50:15 by localhost)