Ethereal-dev: Re: [Ethereal-dev] Ethereal and IM drivers on Windows 2000

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 12 Sep 2002 04:20:15 -0700
On Wed, Sep 11, 2002 at 10:43:16PM +0000, Shashidhar Kura wrote:
> It seems like Ethereal on Windows 2000 displays duplicate
> packets when some other intermediate driver is present.
> Please refer to the URL for other user experiences.
> 
> http://www.ethereal.com/lists/ethereal-users/200105/msg00123.html
> 
> Does anybody know the technical reason for this behaviour.

I don't, except that it's almost certainly an issue with WinPcap, not
with Ethereal (most capture issues are issues with libpcap/WinPcap or
with the OS code that those libraries use).

If you want help on this, you should try it with WinDump and, if the
problem also occurs with WinDump, ask the WinPcap people about it:

	http://winpcap.polito.it/contact.htm

as I suspect they're the only people likely to have any idea why this
would be happening.

> Is it possible to fix this issue.

You'd probably have to ask the WinPcap developers if it's possible.

> If I need to use Ethereal along with the other IM
> driver, is there any workaround to overcome the
> duplicate packets issue ?

I don't know of any.