server core WINS repl error 4232

I'm in the process of replacing two Server 2003 systems, whose only funtion
is WINS, with two new Server 2008 system. Because of the very light load on
these systems, it seemed like Server Core would be a good option. I replaced
the first system without a hitch (details below).

However, I can't get the second server core system to replicate with the
first. I get lots of WINS EventID 4232 log entries on one or both systems.
I've tried disabling the firewalls on both systems.

http://support.microsoft.com/kb/321208 suggests doing a packet capture to
get more info. However, I'm at a loss as to how to go about capturing
traffic. I can't install winpcap as far as I can tell. Does network monitor
work on server core?

Anyone have any suggestions? I'm stumped. Perhaps server core wasn't such a
great choice on my part. But it seemed like the right thing to do at the
time. :-)

* Here's my situation and approach:

Servers A and B, the primary and secondary WINS servers for our enterprise,
run Server 2003 Std.

1. install new server core instance C, to replace A
2. configure it with WINS, make it a partner of B
3. replication worked just fine.
4. turn off A.
5. stop WINS on C
6. delete (move/rename) WINS data files on C
7. Re-IP C with A's address, fix wins server address config
8. Restart WINS, which reloads its data from B

This worked like a champ. Replication continues to work between C and B. But
when I have tried to repeat this process with a new server core system D (to
replace B), I can't get D to communicate with C.

Thanks for any ideas.

--Geoff