How to Analyze Network Protocols, Learn More >>

Being able to support more than 300 protocols in the latest version, Capsa Network Sniffer make it easy to analyze protocols in network and understand what is happening.

Recommend Network Analysis Software >>


RFC 1002 http://tools.ietf.org/html/rfc1002

NetBIOS/IP is a standard protocol to support NetBIOS services in a TCP/IP environment. Both local network and Internet operations are supported. Various node types are defined to accommodate local and Internet topologies and to allow operation with or without the use of IP broadcast.
(Compliant with NETBIOS over IP 1992, IETF RFC1002 1987.)

NetBIOS types may be Name Service, Session or Datagram.

The format of the header is shown in the following illustration:

16
21
28
32 bits

Name_trn_id

Opcode

Nm_flags

Rcode

Qdcount (16 bits)

Ancount (16 bits)

Nscount (16 bits)

Arcount (16 bits)

 
NetBIOS/IP header structure

Name_trn_id
Transaction ID for the Name Service Transaction.

Opcode
Packet type code: Possible values are:

0 Query.
5 Registration.
6 Release.
7 WACK.
8 Refresh.

Nm_flags
Flags for operation.

Rcode
Result codes of request.

Qdcount
Unsigned 16 bit integer specifying the number of entries in the question section of a name.

Ancount
Unsigned 16 bit integer specifying the number of resource records in the answer section of a name service packet.

Nscount
Unsigned 16 bit integer specifying the number of resource records in the authority section of a name service packet.

Arcount
Unsigned 16 bit integer specifying the number of resource records in the additional records section of a name service packet.

Vulnerabilities for this protocol (from CVE)

CVE ID Protocol Source Port Targetport

TCP/IP Protocols:

AHARP/RARPATMPBGP-4COPSDCAPDHCPDNS
DVMRPEGPEIGRPESPFANPFingerFTPHSRP
HTTPICMPICMPv6IGMPIGRPIMAP4IPIPDC
IPv6ISAKMPL2FL2TPLDAPMARSMobile IPNARP
NetBIOS/IPNHRPNTPOSPFPIMPOP3PPTPRadius
RIP2RIPng for IPv6RLOGINRSVPRTSPRUDPS-HTTPSCTP
SLPSMTPSNMPSOCKS V5TACACSTALITCPTELNET
TFTPUDPVan JacobsonVRRPWCCPX-WindowXOT