<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2722" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2>Hi Abdul.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Although other programs (like DU meter) do not show duplicated
packets, WinPcap can suffer from this problem (I don't know how DU meter
interfaces with the network stack). Can you please try disabling the firewall
and antivirus and see if the problem persists?</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Have a nice day</FONT></DIV>
<DIV><FONT size=2>GV</FONT></DIV>
<DIV> </DIV>
<DIV><FONT size=2></FONT> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=abdulqayum@gmail.com href="mailto:abdulqayum@gmail.com">Abdul
Qayum</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=gianluca.varenni@gmail.com
href="mailto:gianluca.varenni@gmail.com">Gianluca Varenni</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Cc:</B> <A title=Winpcap-users@winpcap.org
href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Sunday, October 02, 2005 9:37
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: [Winpcap-users] Capturing
the packets without the callback example</DIV>
<DIV><BR></DIV>
<DIV>hi Gianuluca Varenni</DIV>
<DIV> </DIV>
<DIV>I am using both firewall and antivirus but other programe like DU
metere( <A href="http://dumeter.com">dumeter.com</A> ) does not shows any
extra traffic. Meanwhile i also observe that my firewall also shows more
traffic. </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Thanks </DIV>
<DIV> </DIV>
<DIV>Muhammad Abdul Qayum</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV><BR><BR> </DIV>
<DIV><SPAN class=gmail_quote>On 10/2/05, <B class=gmail_sendername>Gianluca
Varenni</B> <<A
href="mailto:gianluca.varenni@gmail.com">gianluca.varenni@gmail.com</A>>
wrote:</SPAN>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<DIV><FONT size=2>Hi Abdul.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Are you using some sort of personal firewall/antivirus
software on your machine?</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>What you are seeing is a duplication of the trasmitted
packets, and this is usually due to some network software using non standard
techniques to access the network.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Have a nice day</FONT></DIV>
<DIV><FONT size=2>GV</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV><SPAN class=e id=q_106b26ddd142f0f1_1>
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV style="BACKGROUND: #e4e4e4; FONT: 10pt arial"><B>From:</B> <A
title=abdulqayum@gmail.com
onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:abdulqayum@gmail.com" target=_blank>Abdul Qayum</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=Winpcap-users@winpcap.org
onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:Winpcap-users@winpcap.org"
target=_blank>Winpcap-users@winpcap.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Monday, September 26, 2005 9:04
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [Winpcap-users] Capturing
the packets without the callback example</DIV>
<DIV><BR> </DIV>
<DIV>Hello Everybody</DIV>
<DIV> </DIV>
<DIV>I<FONT size=4> have confusion about traffic capture by example
program given in winpcap tutorial. I copied the program and compile it. I
am using Winpcap 3.1 original version</FONT></DIV>
<DIV><FONT size=4></FONT><FONT size=4></FONT> </DIV>
<DIV><FONT size=4>To simulate Traffic i just use ping command to
send 50 byte at its reqular interval </FONT></DIV>
<DIV><FONT size=4>ping <A
onclick="return top.js.OpenExtLink(window,event,this)"
href="http://10.56.18.1/" target=_blank>10.56.18.1</A> -t -l
50</FONT></DIV>
<DIV><FONT size=4></FONT> </DIV>
<DIV><FONT size=4>The output shows that</FONT></DIV>
<DIV><FONT size=4><FONT color=#ff0000>two packet</FONT> send contineously
by sender </FONT></DIV>
<DIV><FONT size=4>but only<FONT color=#ff6666> </FONT><FONT
color=#ff0000>one packet</FONT> received from receiver</FONT></DIV>
<DIV><FONT size=4>and this pattern is contineous</FONT></DIV>
<DIV><FONT size=4>But in Ping command as many packet send ,
same should received. I used DU meter ( bandwidth
software </FONT><A onclick="return top.js.OpenExtLink(window,event,this)"
href="http://www.dumeter.com/" target=_blank><FONT
size=4>www.dumeter.com</FONT></A><FONT size=4> ) for comparison its give
me exact result but packer capturing routine giving me differnet
result. </FONT></DIV>
<DIV><FONT size=4></FONT> </DIV>
<DIV><FONT size=4>One packet for two packet</FONT></DIV>
<DIV><FONT size=4>If someone could help me. I will be
greatful</FONT></DIV>
<DIV><FONT size=4></FONT> </DIV>
<DIV><FONT size=4>Muhammad Abdul Qayum</FONT></DIV>
<DIV><FONT size=4></FONT> </DIV>
<DIV><FONT size=4>Reslut of capturing packet programe. </FONT></DIV>
<DIV> </DIV>
<DIV>1:17:17.727451 len:92 10.56.18.24.8 ->
10.56.18.1.29261<BR>1:17:17.727486 len:92 10.56.18.24.8 ->
10.56.18.1.29261<BR>1:17:17.728696 len:92 10.56.18.1.0 ->
10.56.18.24.29269<BR>1:17:18.733117 len:92 10.56.18.24.8 ->
10.56.18.1.29260<BR>1:17:18.733125 len:92 10.56.18.24.8 ->
10.56.18.1.29260<BR>1:17:18.733127 len:92 10.56.18.1.0 ->
10.56.18.24.29268<BR>1:17:19.730743 len:92 10.56.18.24.8 ->
10.56.18.1.29259<BR>1:17:19.730776 len:92 10.56.18.24.8 ->
10.56.18.1.29259<BR>1:17:19.731981 len:92 10.56.18.1.0 ->
10.56.18.24.29267<BR>1:17:19.940309 len:90 10.56.18.2.258 ->
224.0.0.5.14336<BR>1:17:20.736450 len:92 10.56.18.24.8 ->
10.56.18.1.29258 <BR>1:17:20.736457 len:92 10.56.18.24.8
->10.56.18.1.29258<BR>1:17:20.736459 len:92 10.56.18.1.0 ->
10.56.18.24.29266<BR>1:17:21.734230 len:92 10.56.18.24.8 ->
10.56.18.1.29257<BR>1:17:21.734263 len:92 10.56.18.24.8 ->
10.56.18.1.29257<BR>1:17:21.735244 len:92 10.56.18.1.0 ->
10.56.18.24.29265<BR>1:17:22.269719 len:90 10.56.18.6.258 ->
224.0.0.5.14336<BR>1:17:22.736412 len:92 10.56.18.24.8 ->
10.56.18.1.29256<BR>1:17:22.736447 len:92 10.56.18.24.8 ->
10.56.18.1.29256<BR>1:17:22.737467 len:92 10.56.18.1.0 ->
10.56.18.24.29264<BR>1:17:23.595840 len:90 10.56.18.5.258 ->
224.0.0.5.14336<BR>1:17:23.743066 len:92 10.56.18.24.8 ->
10.56.18.1.29255 <BR>1:17:23.743072 len:92 10.56.18.24.8 ->
10.56.18.1.29255<BR>1:17:23.743074 len:92 10.56.18.1.0 ->
10.56.18.24.29263</DIV></SPAN></DIV>
<P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users
mailing list<BR><A onclick="return top.js.OpenExtLink(window,event,this)"
href="mailto:Winpcap-users@winpcap.org"
target=_blank>Winpcap-users@winpcap.org </A><BR><A
onclick="return top.js.OpenExtLink(window,event,this)"
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank>https://www.winpcap.org/mailman/listinfo/winpcap-users</A><BR>
<P></P>
<P></P></BLOCKQUOTE></BLOCKQUOTE></DIV><BR></BLOCKQUOTE></BODY></HTML>