locked
Query Request for xxx RRS feed

  • Question

  • Hey,

    What does the value relate to? An actual machine?

    We're seeing requests to PRINTNCL02 <0x20> File Server Service.

    Is PRINTNCL02 some built-in Microsoft name for one of their services (printing maybe) because we have never had a computer or server named like this.

    Tuesday, August 5, 2014 12:04 PM

Answers

  • This is a NetBIOS name that is used by some program running on the machine sending this query.  <20> is a File Server service (http://support.microsoft.com/kb/163409).  I would look for services/processes running and try to associate this traffic to those.  Perhaps the process ID in Network Monitor will give you more information.

    Paul

    • Marked as answer by Paul E Long Thursday, September 4, 2014 2:59 PM
    Thursday, September 4, 2014 2:59 PM