NetBIOS - suffixes and other info

NetBIOS (in Microsoft version) defines some suffixes. By design NetBIOS name is limited to 16 characters (single byte characters), but the last, 16th, character is the suffixes which has special meaning:

• unique names:
• 0x00 - workstation service - registered with name of workstation account name
• 0x00 - IIS
• 0x01 - messenger service - registered with name of user account name - on samba
• 0x03 - messenger service - registered with name of user account name - on windows
• 0x06 - remote access service - server
• 0x1b - domain master browser - PDC role for the domain
• 0x1d - master browser
• 0x1f - NetDDE service
• 0x20 - file server - by default is registered by all servers (if server service is running)
• 0x20 - DCA IrmaLan Gateway Server Service ('Forte_$ND800ZA')
• 0x21 - remote access service - client
• 0x22 - Microsoft Exchange Interchange - MsMail Connector
• 0x23 - Microsoft Exchange Store
• 0x24 - Microsoft Exchange Directory
• 0x2B - Lotus Notes Server Service
• 0x30 - modem sharing service - server
• 0x31 - modem sharing service - client
• 0x42 - McAfee anti-virus
• 0x43 - SMS clients remote control - SMS is a predecessor of SCCM
• 0x44 - SMS administrators remote control tool
• 0x45 - SMS clients remote chat
• 0x46 - SMS clients remote transfer
• 0x4c - DEC pathworks tcpip service
• 0x52 - DEC pathworks tcpip service
• 0x6a - Microsoft Exchange IMC - IMC was before Exchange 5.5 - it was acronym from Internet Mail Connector, on exchange 5.5 it was called IMS - Internet Mail Service
• 0x87 - Microsoft Exchange MTA - Mail Transfer Agent
• 0xbe - network monitor agent
• 0xbf - network monitor application
• group names
• 0x00 - workstation service - workgroup or domain name
• 0x1c - list of all domain controllers - at first position it should be PDC - when manually registering in WINS PDC should be registered at the end, so it will be the most recent and on the first place. 1C record can return up to 25 entries
• 0x1c - IIS ('INet~Services')
• 0x1e - for browser elections purpose
• 0x20 - internet group - introduced in Windows 2000 - can return up to 25 entries
• 0x2f - Lotus Notes ('IRISMULTICAST')
• 0x33 - Lotus Notes ('IRISNAMESERVER')