The GSS clients use a number of strategies to find servers, which are applied in this approximate sequence (depending on the exact version):
- If it has seen a server before, it attempts to query it using a unicast packet to the last IP address it remembered
- If that does not yield a result, or no previous IP is known, It attempts to locate the server by issuing a query to a well-known multicast IP address
- If that does not yield a result, it also attempts to locate the sever using a WINS (also known as NetBIOS Name Service) query for the name of the server, and if that results in an IP it then challenges the server directly
Of all these location methods, it's only the last that potentially uses broadcast, since the WINS/NBNS protocols use that as a fallback for workgroups where there is no WINS server present. If the client machines have a WINS server IP configured for a network (either statically or by DHCP) then NetBIOS name query traffic is sent unicast to that IP instead of being broadcast.
The client issues these location queries initially 20 seconds apart, and that frequency is backed off when no replies are received to once every three minutes, so the traffic load on a gigabit network for this is fairly inconsequential, especially if a WINS server is configured so that no broadcast NetBIOS traffic is ever generated.