Ethereal-dev: Re: [ethereal-dev] minor problems with RPC dissector

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 11 Nov 1999 12:19:21 -0800 (PST)
> I have attached a very short trace of local portmap activity caused by
> killing and restarting ypbind. Note the reply packets after each of the
> requests. (I don't know why it's doubled btw.)

Note tha the time stamps of the packet and its duplicate are identical,
and that "localhost" appears in all address fields, and that it's a
DLT_NULL capture file.

It was probably done on the loopback interface; perhaps the OS on which
you ran this supplies loopback packets to the raw packet capture
interface when sent *and* when received, so that you see two copies of
every packet sent over the loopback interface?