cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

How to disable NETBIOS / WINS traffic from ADS 12.x

herman_2
Inactive

It is normal functionality for the ADS to try to resolve NETBIOS / WINS and DNS names for any ip address received from the AMD and saved in its database. But DNS is the preferred method. So if you have it well set / configured in your corporate network, you can disable NETBIOS / WINS in order to stop this traffic (TCP port 137) from ADS. Follow these steps:

  1. Stop the ADS service
  2. Edit <ADS INSTALL>\config\nameresolver-httplog.properties file and comment out the following lines with "#" sign:

#WINS_RESOLVER_TASK.1 = winsTask_ItiClientIP

#winsTask_ItiClientIP.TASK_CLASS=adlex.iti.resolver.DnsNameResolverTask

#winsTask_ItiClientIP.RESOLVER= wins

#winsTask_ItiClientIP.TABLE= ItiClientIP

#winsTask_ItiClientIP.COLUMN= clientIP

#winsTask_ItiClientIP.SCHEDULE= 60

#winsTask_ItiClientIP.NEW_ID_NAME = winsId

#

#adlex.iti.resolver.WinsNameResolver.DEL_NOT_USED_IP_ON_START = true

3. Start the ADS service

Note: Please refer from ADS install manual: It advises to disable all NETBIOS network components and services from ADS NICs.

For CAS related article look at How to disable NETBIOS / WINS traffic from CAS 12.x

15 REPLIES 15

adam_piotrowicz
Dynatrace Pro
Dynatrace Pro

Herman,

Thank you for the procedure, we will put it also in DCRUM FAQ.

herman_2
Inactive

Great!

ulf_thorn222
Inactive

I suppose this applies to both CAS and ADS - but what about the oter platforms?

 

herman_2
Inactive

No. CAS has another procedure. I've updated this article with the link to the CAS instructions.

Hi

So I was under the impression that both CAS and ADS used the same "engine" and would be subjected to using Netbios if it existed during the installation.

I was also thinking about the CSS and possibly the EP/BSM but then again, they are from another code base

remeber that part of the recomendations from manuals for both installations, ADS and CAS, the NETBIOS protocol and services should not be installed or should be disabled.

purnavenkatesh_
Newcomer

HI All,

We have followed the same link .. Traffic has now not going out with 137 port , instead it is going out with port 80 and doing reverse dns lookup. 
Can anyone one help us here..

Thanks,
Purna. 

ulf_thorn222
Inactive

Hi

If you go into https://<yourCAS>/diagConsole and search for DNS under Advanced Properties Editor, you have several options there to disable or control what is executed.

 

tahir_ghulam1
Contributor

I am facing the same issue.

The link behind CAS procedure is not working anymore.

If i look into diagConsole

the dns properties are OFF, but firewall-admin complains about traffic on Port 137.

i could not find CAS configurations steps. Any idea @Gomez H. ?

Hi Tahir,

please go to http://CAS_IP/DiagConsole#/diag/ and execute:

  • "NAME RESOLVERS SHOW DETAILS" to check if the wins resolver is running
  • "NAME RESOLVERS STOP SPECIFIC RESOLVER" with "wins" provided as Parameter 1
  • "NAME RESOLVERS SHOW DETAILS" to check if the wins resolver is sleeping

At this point CAS shouldn't use wins anymore.

Let me know if this helps.

Thanks,

Harshal.

harshal_pujari
Dynatrace Pro
Dynatrace Pro

@Adam P.

Can we please update the FAQ to include this updated information? Also, can we also add this to the knowledge base?

tahir_ghulam1
Contributor

@Harshal P.thank you for responding that fast.

i tried to set this configuration but after waiting more than 30 minutes, the status check still responds than wins is still running. Is it possible to set a config file on the Server ?

Thanks

Tahir

Hi @Tahir G.

Try this:

The file location for CAS is "c:\Program
Files\Dynatrace\CAS\config\nameresolver-rtmbs.properties" and you'd have
to comment out following lines:



NAME_RESOLVER.3 = wins
wins.CLASS = adlex.iti.resolver.WinsNameResolver
wins.RERESOLVE = 7
wins.TRANSACTION_SIZE = 10

Let me know if that works.

Regards,

Harshal

tahir_ghulam1
Contributor

Ok, i was too unpatient, resolver is sleeping now.

Thank you.

Kind Regards

Tahir Ghulam

Cool, glad I could help.

Regards,

Harshal.