I was doing a network trace to trouble shoot an unrelated problem and noticed some interesting traffic from my N5200.

My configuration is a 192.168.1.x subnet on the WAN port. Static address for the unit of 192.168.1.7 and not using DHCP as client or server. Load balancing and IP sharing are both disabled.

The LAN port is set up for 192.168.0.x subnet, with IP address of 192.168.0.3....but it doesn't even have a cable plugged into that interface. Yet on a network trace I can see a broadcast from 192.168.0.3 for a NBTNS query looking for my Domain controller.

Why is my 192.168.1.x interface broadcasting a query to find the domain controller from the interface which is not even plugged in? It may sound to be minor issue but it is actually triggering logs in an intrusion detection system so I would like to know if it is a config error or something that is known issue.

Thanks,

Mickey