This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Dear all,

On our office VLAN we see numerous (about 10 percent of all traffic on all switchports) NBNS "UNDEFINED" queries:

1052 23.531946 10.1.1.28 10.1.1.255 NBNS 92 Name query NB UNDEFINED<00>

We also see normal NBNS queries for hostnames, wpad, etc. However we are unable to find any explanation for the "UNDEFINED" queries. Please can someone shed some light on this?

Many thanks :)

This question is marked "community wiki".

asked 26 Oct '17, 01:14

markvdb's gravatar image

markvdb
6112
accept rate: 0%

edited 26 Oct '17, 02:52

grahamb's gravatar image

grahamb ♦
19.8k330206

Can you share a capture?

(26 Oct '17, 08:08) Papa Packet

As a trace contains customer data, I prefer not to, but if you tell me what you're looking for (in the capture) I'll extract it or make a short trace. Thx!

(27 Oct '17, 00:25) markvdb
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×15
×12
×7

question asked: 26 Oct '17, 01:14

question was seen: 660 times

last updated: 27 Oct '17, 07:16

p​o​w​e​r​e​d by O​S​Q​A