Wireshark-users: [Wireshark-users] FW: TCP Packets being sent twice? Ever seen this?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Brian Biales" <BBIALES@xxxxxxxxxxxxxxx>
Date: Fri, 25 Apr 2008 08:01:11 -0400
I was using Wireshark to view the SMTP traffic on my Windows SMTP
server.  What I found was very odd...  Each packet my server was sending
appears to be sent twice!
 
Is this for real?  Or a Wireshark fluke?  Anybody seen such a thing?
Any explanations would be greatly appreciated!
 
My local machine in the trace is 192.168.1.9.  All the packets out to
the internet  appear to be sent twice.  And the time between them is
very, very small...  The identical packet seems to go out immediately.
I can attach the trace file itself if it would be useful (it is 250k or
so...)

I am using Wireshark 1.0.0 install on this Windows 2k server SP4 with
all updates applied...
 
Brian

Attachment: doublePackets.gif
Description: doublePackets.gif