Ethereal-users: Re: [Ethereal-users] duplicate packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Moshe Haviv <mhaviv2000@xxxxxxxxxxx>
Date: Fri, 24 Sep 2004 13:30:37 +0100 (BST)
Hi,
 
Check the source MAC addresses of the seemingly same packets. If a router with one interface is sitting in the network. If a destination address is not in the same subnet and utilizing that router you will see tow packets in the network both with the same source and destination IP addresses:
1st packet with the MAC address(Physical address)of the PC initiating the transfer
2nd packet with the MAC address(Physical adrdress) of the router as thye source MAC address.
 
Bye
 
Moshe
Hansang Bae <hbae@xxxxxxxxxx> wrote:
On 08:48 AM 9/22/2004, Bob Fawcett wrote:
>When I capture traffic on my PC, I see a duplicate of every packet sent. I am
>filtering on the IP address of my PC. Connecting my PC through my Agilent
>Advisor shows that the PC is actually only sending one copy of the packet. The
>time stamps for the packets are very close 0.000050 apart.
>Anyone seen this or know the cure?


QoS Scheduler in XP (Network, Properties) can cause this. So can vpn adapters (Nortel contivity or Checkpoint's vpn client)

hsb

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users


ALL-NEW Yahoo! Messenger - all new features - even more fun!