Network Monitor Incorrectly Parses WINS Registration TTL (272408)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
This article was previously published under Q272408

SYMPTOMS

When parsing the output of a successful Windows Internet Naming Service (WINS) server response to a client name registration in Microsoft Network Monitor 2.0, the Time to Live (TTL) record is incorrectly displayed in milliseconds. It should be displayed in seconds.

STATUS

Microsoft has confirmed that this is a problem in Network Monitor 2.0.

MORE INFORMATION

When you read the TTL record of a WINS registration, interpret the TTL value as seconds, not milliseconds. The portion of the record containing this issue is in frames, with the following description:

NBT: NS: Registration (Node Status) resp. for [Computername], Success, Owner Addr. [x.x.x.x]

The following example illustrates an incorrectly parsed TTL for a registration that has a TTL of 345,600 seconds. It can be found near the end of the response:

NBT: Time To Live(Milliseconds) = 345600 (0x54600)

This should be displayed as:

NBT: Time To Live(Seconds) = 345600 (0x54600)

Modification Type:MinorLast Reviewed:1/26/2006
Keywords:kbbug kbNetTrace kbpending KB272408
©2004 Microsoft Corporation. All rights reserved.