Wireshark · Ethereal-users: Re: [Ethereal-users] Duplicate packet display in MS Windows 0.8.17 - known bug?

[James Garrison <jhg@xxxxxxxxxxxxxxx>]

That must be my problem.  I'm running NetScreen remote.  Unfortunately
it doesn't seem to have a way to remove it without rebooting.  It's
already disabled (I use it only when connecting via the VPN from home) 
but I still get duplicate packets.  

Thanks for the explanation!

"Ronald W. Henderson" wrote:
> 
> James:
> 
> I have seen this on my W2K machine when one has a an additional shim or
> a component tied to a network adapter such as CheckPoint SecuRemote
> (client VPN for windows). What I do is to uncheck the component for
> Ethereal usage (don't have to reboot with the w2k OS) and the
> duplication of packets no longer occurs.
> 
> James Garrison wrote:
> 
> > The MS Windows port of 0.8.17 appears to be duplicating outgoing
> > packets in the display.  This may be a pcap problem since the
> > duplicates have slightly different timestamps (by about 75 us).
> > I have screen shots of the same interaction as seen from both
> > ends of the wire, one running Ethereal Windows and the other
> > Ethereal on Linux.  The Linux side has no duplicate packets.
> >
> > I wasn't sure if I should include binary attachments in posts
> > to this list.  If this isn't a known problem and someone wants
> > to see them, let me know.

-- 
James Garrison                                Athens Group, Inc.
mailto:jhg@xxxxxxxxxxxxxxx                    5608 Parkcrest Dr
http://www.athensgroup.com                    Austin, TX 78731
PGP: RSA=0x04B73B7F DH/DSS=0x70738D88         (512) 345-0600 x150