LLMNR

Who would have thought that it's possible to resolve a name to an address, using a DNS-based protocol, without a DNS server.  It turns out that there's a protocol called Link Local Multicast Name Resolution (LLMNR) that can do just that.

As we continue to wander through the Waterloo Sunrise trace we discover how my PC uses LLMNR to check names, how my PC has a preset IPv6 Link Local Address and how an ICMPv6 protocol is used to announce the filtering of multicast traffic.

Since recording this video we found an excellent TechNet article covering the use of LLMNR by Windows.  The article also compares LLMNR to NetBIOS Name Query Request messages and states:

When a host running Windows Vista [and later] starts, it verifies name uniqueness by sending LLMNR Name Query Request messages for its authoritative name, which is its computer name as a single-label name.

More on LLMNR later in the series.

Last modified: Thursday, 15 October 2015, 10:36 PM