huge netbios traffic - after print server removal, next part

After print server removal (guys responsible of print servers) every workstation is trying to find print server which is unavailable. We have still wins servers but addresses are removed from wins and dns servers. So every 30 seconds every of 20k workstations is trying to find names at first by querrying wins, later by broadcasts. Finally network traffic from this source is huge. I must try to remove registry entries for missing print servers.

huge netbios traffic

according to this link from spiceworks maybe some old printer causing huge network traffic on NetBIOS - 137 tcp/udp:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print\Providers\Client Side Rendering Print Provider\Servers*oldservername*

I've got such scenario - near 20k workstations with some missing printers causing huge network - netbios - traffic. Maybe there are resposible for it?

NetBIOS - suffixes and other info

NetBIOS (in Microsoft version) defines some suffixes. By design NetBIOS name is limited to 16 characters (single byte characters), but the last, 16th, character is the suffixes which has special meaning:

• unique names:
• 0x00 - workstation service - registered with name of workstation account name
• 0x00 - IIS
• 0x01 - messenger service - registered with name of user account name - on samba
• 0x03 - messenger service - registered with name of user account name - on windows
• 0x06 - remote access service - server
• 0x1b - domain master browser - PDC role for the domain
• 0x1d - master browser
• 0x1f - NetDDE service
• 0x20 - file server - by default is registered by all servers (if server service is running)
• 0x20 - DCA IrmaLan Gateway Server Service ('Forte_$ND800ZA')
• 0x21 - remote access service - client
• 0x22 - Microsoft Exchange Interchange - MsMail Connector
• 0x23 - Microsoft Exchange Store
• 0x24 - Microsoft Exchange Directory
• 0x2B - Lotus Notes Server Service
• 0x30 - modem sharing service - server
• 0x31 - modem sharing service - client
• 0x42 - McAfee anti-virus
• 0x43 - SMS clients remote control - SMS is a predecessor of SCCM
• 0x44 - SMS administrators remote control tool
• 0x45 - SMS clients remote chat
• 0x46 - SMS clients remote transfer
• 0x4c - DEC pathworks tcpip service
• 0x52 - DEC pathworks tcpip service
• 0x6a - Microsoft Exchange IMC - IMC was before Exchange 5.5 - it was acronym from Internet Mail Connector, on exchange 5.5 it was called IMS - Internet Mail Service
• 0x87 - Microsoft Exchange MTA - Mail Transfer Agent
• 0xbe - network monitor agent
• 0xbf - network monitor application
• group names
• 0x00 - workstation service - workgroup or domain name
• 0x1c - list of all domain controllers - at first position it should be PDC - when manually registering in WINS PDC should be registered at the end, so it will be the most recent and on the first place. 1C record can return up to 25 entries
• 0x1c - IIS ('INet~Services')
• 0x1e - for browser elections purpose
• 0x20 - internet group - introduced in Windows 2000 - can return up to 25 entries
• 0x2f - Lotus Notes ('IRISMULTICAST')
• 0x33 - Lotus Notes ('IRISNAMESERVER')