Ethereal-dev: Re: [Ethereal-dev] RTP Analysis and duplicated packets(Mirroring) problem

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Thomas Anders <thomas.anders@xxxxxxxxxxxxx>
Date: Tue, 12 Oct 2004 18:24:00 +0200
Anders Broman (AL/EAB) wrote:
When capturing off a mirroring port every second packet is often a duplicate.

Every second packet? You should definitely check your switch configuration then!

This causes problems for the RTPanalysis.
Would it be safe to not count packets with the same sequence number as the previous packet in a stream ? or if the packet
arrives within a to short time ? or a combination ? should such a feature be configurable ?

Not by default, please, as otherwise you wouldn't be able to identify if the
parties in questions *themselves* send duplicate packets.


+Thomas

--
Thomas Anders (thomas.anders at blue-cable.de)