I think it is called netmon.exe, under the control panel thingy/add remove programs/add remove windows components..on a server should have the network monitor as an option. Its just a packet sniffer...remember however that if you are on a switched network, you will only see the frames directed to the machine you are running the monitor on...so...chuck the monitor on your DNS server and bobs your uncle... cheers, Brianos :o) -----Original Message----- From: Costanzo, Ray [mailto:rcostanzo@xxxxxxxxxxx] Sent: 08 September 2003 15:51 To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: Find comps querying DNS and/or WINS server You wouldn't happen to know the name of the executable, would you? My search for network* turned up some shortcuts to some things like "Network Load Balancing Manager." I don't see anything in the reskit directory. Thank you, Ray at work > -----Original Message----- > From: Brian Lilley [mailto:Brian.Lilley@xxxxxxxxxxxxx] > > use network monitor that comes with win2k nt4 etc. this > product understands > the payload of each packet and will show DNS traffic. > > brianos :0) > > -----Original Message----- > From: Costanzo, Ray [mailto:rcostanzo@xxxxxxxxxxx] > > > Hi list, > > Does anyone know of a way that I can see where DNS requests are coming > from on our W2K DNS server? The information contained in this e-mail message is intended blah blah blah ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm _____________________________________________________________________ This message has been checked for all known viruses on behalf of Vivista by MessageLabs. http://www.messagelabs.com or Email: mailsweeper.info@xxxxxxxxxxxxx Vivista formerly Securicor Information Systems for further information http://www.vivista.co.uk ********************************************************************** The information contained in this e-mail message is intended only for the individuals named above. If you are not the intended recipient, you should be aware that any dissemination, distribution, forwarding or other duplication of this communication is strictly prohibited. The views expressed in this e-mail are those of the individual author and not necessarily those of Vivista Limited. Prior to taking any action based upon this e-mail message you should seek appropriate confirmation of its authenticity. If you have received this e-mail in error, please immediately notify the sender by using the e-mail reply facility. ********************************************************************** _____________________________________________________________________ This message has been checked for all known viruses on behalf of Vivista by MessageLabs. http://www.messagelabs.com or Email: mailsweeper.info@xxxxxxxxxxxxx Vivista formerly Securicor Information Systems for further information http://www.vivista.co.uk ********************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm