Wireshark-users: Re: [Wireshark-users] FW: TCP Packets being sent twice? Ever seen this?
From: "Luis EG Ontanon" <luis@xxxxxxxxxxx>
Date: Fri, 25 Apr 2008 14:17:23 +0200
A <5K pcap file might contain the information to understand this. The
attached >95K snapshot is worthless, provides less useful information
than the <1K e-mail you wrote.



On Fri, Apr 25, 2008 at 2:01 PM, Brian Biales <BBIALES@xxxxxxxxxxxxxxx> wrote:
> I was using Wireshark to view the SMTP traffic on my Windows SMTP
>  server.  What I found was very odd...  Each packet my server was sending
>  appears to be sent twice!
>
>  Is this for real?  Or a Wireshark fluke?  Anybody seen such a thing?
>  Any explanations would be greatly appreciated!
>
>  My local machine in the trace is 192.168.1.9.  All the packets out to
>  the internet  appear to be sent twice.  And the time between them is
>  very, very small...  The identical packet seems to go out immediately.
>  I can attach the trace file itself if it would be useful (it is 250k or
>  so...)
>
>  I am using Wireshark 1.0.0 install on this Windows 2k server SP4 with
>  all updates applied...
>
>  Brian
>
> _______________________________________________
>  Wireshark-users mailing list
>  Wireshark-users@xxxxxxxxxxxxx
>  http://www.wireshark.org/mailman/listinfo/wireshark-users
>
>



-- 
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan