Microsoft KB Archive/272408

= Network Monitor Incorrectly Parses WINS Registration TTL =

Article ID: 272408

Article Last Modified on 2/27/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server

-



This article was previously published under Q272408



SYMPTOMS
When parsing the output of a successful Windows Internet Naming Service (WINS) server response to a client name registration in Microsoft Network Monitor 2.0, the Time to Live (TTL) record is incorrectly displayed in milliseconds. It should be displayed in seconds.



STATUS
Microsoft has confirmed that this is a problem in Network Monitor 2.0.



MORE INFORMATION
When you read the TTL record of a WINS registration, interpret the TTL value as seconds, not milliseconds. The portion of the record containing this issue is in frames, with the following description:

NBT: NS: Registration (Node Status) resp. for [Computername], Success, Owner Addr. [x.x.x.x]

The following example illustrates an incorrectly parsed TTL for a registration that has a TTL of 345,600 seconds. It can be found near the end of the response:

NBT: Time To Live(Milliseconds) = 345600 (0x54600)

This should be displayed as:

NBT: Time To Live(Seconds) = 345600 (0x54600)

Additional query words: netmon

Keywords: kbbug kbnettrace kbpending KB272408

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.