Wireshark-users: Re: [Wireshark-users] wireshark on windows showing duplicates that are not reall
From: Bill Meier <wmeier@xxxxxxxxxxx>
Date: Fri, 18 Apr 2008 11:50:42 -0400
Robert Guthrie wrote:
I did a test that involves 3 computers:
Machine A - Windows IP 9.53.23.38 sending ICMP ping requests
Machine B - Windows IP 9.48.150.77 receiving ICMP ping requests
Machine C - Linux machine on the same bridge as Machine A and can see all traffic to/from Machine A Running wireshark on machine A shows duplicate ping requests. Running wireshark on machine B shows no duplicates, but shows ping requests/replies
Running wireshark on machine C shows no duplicates.

One thing I note:

The destination MAC address of the ping request is
All-HSRP-Routers_01 (00:00:0c:07:ac:01).

I'm not familiar with HSRP (Hot Standby Routing Protocol) but this suggests to me that there's something more going on than just plain vanilla Ethernet + IP and so on.

(Maybe someone with HSRP knowledge can jump in and explain what is going on).

What network hardware is being used and what is the network configuration ?