NetBios Broadcast/Browser
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
NetBios Broadcast/Browser

 
Post new topic   Reply to topic    Windows Server Forum Index -> Networking
Author Message
Harddrive747
Guest





Posted: Mon Jan 10, 2005 11:03 pm    Post subject: NetBios Broadcast/Browser Reply with quote

I have a few servers that are running Cisco Works. Lately they appear to be
running slow. Still working on it.

One of the ideas that my group is thinking about doing is to turn the
Computer Browser off. I have done that threw the services and I also told
the server not to maintain a list of servers.

We are currently in a peer to peer network. With that said, I have done
captures of the network packets and I still see broadcast packets coming from
the computer. The broadcast packets are coming out of port 138 that has the
computer name still in there.

I also have broadcast packets being sent out on port 137. I would like to
shut both of those down. Can I shut both of those ports down? If I do, what
will it effect?

I'm trying to eliminate excisive traffic coming out of the servers.

I thank you for all your help.
Terry
Back to top
Michael Giorgio - MS MVP
Guest





Posted: Mon Jan 10, 2005 11:30 pm    Post subject: Re: NetBios Broadcast/Browser Reply with quote

The broadcast packets are most likely the host name announcement
packets. You can hide the computers from the browse list and prevent
the host name announcement packets by editing the registry. Add the
following:

Hive: HKEY_LOCAL_MACHINE
Key: \SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
Name: Hidden
Data Type: dword
Value: 00000001

As far as closing the ports you could get away with this in a pure W2k
or higher environment.


"Harddrive747" <Harddrive747@discussions.microsoft.com> wrote in message
news:
Quote:
I have a few servers that are running Cisco Works. Lately they appear
to be
running slow. Still working on it.

One of the ideas that my group is thinking about doing is to turn the
Computer Browser off. I have done that threw the services and I also
told
the server not to maintain a list of servers.

We are currently in a peer to peer network. With that said, I have
done
captures of the network packets and I still see broadcast packets
coming from
the computer. The broadcast packets are coming out of port 138 that
has the
computer name still in there.

I also have broadcast packets being sent out on port 137. I would
like to
shut both of those down. Can I shut both of those ports down? If I
do, what
will it effect?

I'm trying to eliminate excisive traffic coming out of the servers.

I thank you for all your help.
Terry
Back to top
Herb Martin
Guest





Posted: Tue Jan 11, 2005 12:25 am    Post subject: Re: NetBios Broadcast/Browser Reply with quote

"Harddrive747" <Harddrive747@discussions.microsoft.com> wrote in message
news:7A7EFA48-BDE0-4F53-8D29-A02B1FF63BFA@microsoft.com...
Quote:
I have a few servers that are running Cisco Works. Lately they appear to
be
running slow. Still working on it.

One of the ideas that my group is thinking about doing is to turn the
Computer Browser off. I have done that threw the services and I also told
the server not to maintain a list of servers.

We are currently in a peer to peer network.

Then the odds of the NetBIOS traffic being your main
culprit OR your users being conformatable without
browsing are both very low.

You probably should LEAVE the NetBIOS support (MS
Windows, even Win2003 has troubles without it) and
add a WINS server.

The clients (by default or set through DHCP) can then
query WINS with directed data grams and other than
the service annoucement you won't have so much broacasts,
and the service announcements should NOT have to leave
a subnet.

ALL machines need to be "WINS clients" in this case,
include "servers" , even the WINS server itself.

Quote:
With that said, I have done
captures of the network packets and I still see broadcast packets coming
from
the computer. The broadcast packets are coming out of port 138 that has
the
computer name still in there.

I also have broadcast packets being sent out on port 137. I would like to
shut both of those down. Can I shut both of those ports down? If I do,
what
will it effect?

Use a WINS server and it will all work without most
of that.

How many stations do you have?

In a peer network it is not likely to be that many...

Quote:
I'm trying to eliminate excisive traffic coming out of the servers.


--
Herb Martin


Quote:

I thank you for all your help.
Terry
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Networking All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB