This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

what is NBSTAT 00 00 00 00

0

Hi,

i tried to check my network security be monitoring packet on my computer (with win10), but i found that my computer exchange nbns packet with every website that i open facebook, google ...

this a screenshot from wireshark session

alt text

my computer is clean from malicious software, also i tried with a clean vm with win10 and i found the same packets. with my computer in work i found the same packets exchange with any website that i browse.

just wanna know what is the story of these packets.

thanks.

asked 24 Oct '17, 12:44

Huolsam's gravatar image

Huolsam
6113
accept rate: 0%

Not quite an answer but I'm just seeing exactly the same, apart from IP addresses but they are all public as well:

(24 Oct '17, 13:38) patkszen

yeah it's the same, for example in ur case the ip 66.110.49.38 is belong to kaspersky

https://www.whois.com/whois/66.110.49.38

(25 Oct '17, 12:11) Huolsam

One Answer:

0

I would disable NetBios altogether unless you have a specific need for it.

Check a previous answer: https://ask.wireshark.org/questions/2824/unexplained-netbios-traffic

answered 25 Oct '17, 08:48

Papa%20Packet's gravatar image

Papa Packet
63
accept rate: 0%

edited 25 Oct '17, 08:49