Microsoft KB Archive/272408

From BetaArchive Wiki
Knowledge Base


Network Monitor Incorrectly Parses WINS Registration TTL

Article ID: 272408

Article Last Modified on 2/27/2007



APPLIES TO

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server



This article was previously published under Q272408

SYMPTOMS

When parsing the output of a successful Windows Internet Naming Service (WINS) server response to a client name registration in Microsoft Network Monitor 2.0, the Time to Live (TTL) record is incorrectly displayed in milliseconds. It should be displayed in seconds.

STATUS

Microsoft has confirmed that this is a problem in Network Monitor 2.0.

MORE INFORMATION

When you read the TTL record of a WINS registration, interpret the TTL value as seconds, not milliseconds. The portion of the record containing this issue is in frames, with the following description:

NBT: NS: Registration (Node Status) resp. for [Computername], Success, Owner Addr. [x.x.x.x]


The following example illustrates an incorrectly parsed TTL for a registration that has a TTL of 345,600 seconds. It can be found near the end of the response:

NBT: Time To Live(Milliseconds) = 345600 (0x54600)


This should be displayed as:

NBT: Time To Live(Seconds) = 345600 (0x54600)



Additional query words: netmon

Keywords: kbbug kbnettrace kbpending KB272408