Thanks for your reply.
I dumped the packets generated by Ethereal,
and I confirmed Ethereal sent no netbios queries in fact.
If Ethereal uses gethostbyaddr() or getnameinfo() in Windows2000 or older,
Ethereal would send netbios name service queries for addr-to-name
resolution.
Except the case of getnameinfo() in WindowsXP,
Netbios name service queries cannot be prevented.
I guess that Ethereal uses a special function, not a standard API,
for addr-to-name resolution. Right?
---
Mimic Fox <mimic31319@xxxxxxxxxxx>
From: Guy Harris <gharris@xxxxxxxxx>
To: Mimic Fox <mimic31319@xxxxxxxxxxx>
CC: ethereal-dev@xxxxxxxxxxxx
Subject: Re: [Ethereal-dev] Name Resolution
Date: Sun, 27 Apr 2003 14:59:39 -0700
On Sun, Apr 27, 2003 at 01:56:22AM +0000, Mimic Fox wrote:
> I wonder that Ethereal prevents netbios name service queries.
Ethereal doesn't prevent NetBIOS name service queries when doing
address-to-name resolution, which is one reason why address-to-name
resolution can be even more painfully slow on Windows than it is on
UNIX.
_________________________________________________________________
Tired of spam? Get advanced junk mail protection with MSN 8.
http://join.msn.com/?page=features/junkmail
