<div dir="ltr">Ok, I've fixed the problem on the physical machine, though I'm not sure what made it go away, and I still have it on the virtual machine.<br>On the physical machine there are three network cards, only one was actually connected to the network - the other two were unplugged. Moreover, the two unplugged cards had a static ip address configured which didn't match our network mask. Once I set those two cards to obtain a dynamic address, the duplication has stopped (weird, huh?). I've since tried to recreate the problem, but failed to do so; And as I've mentioned, I still got it on the virtual machine whose image was taken from the physical machine, even though on it all network cards are configured properly.<br>
<br><br><br><div class="gmail_quote">On Thu, May 13, 2010 at 6:45 PM, Gianluca Varenni <span dir="ltr"><<a href="mailto:gianluca.varenni@cacetech.com" target="_blank">gianluca.varenni@cacetech.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div style="padding-left: 10px; padding-right: 10px; padding-top: 15px;" name="Compose message area">
<div><font face="Calibri">Packet duplication is usually caused by the virtual NIC
drivers of vmware (or in any case their networking virtualization layer). I've
seen this kind of problems with vmware workstation, but I've never used vCenter
(which I believe is just a management tool for a cloud of VMs using VMware
server or something similar).</font></div><div>
<div><font face="Calibri"></font> </div>
<div><font face="Calibri">Have a nice day</font></div>
<div><font face="Calibri">GV</font></div>
</div><div style="font: 10pt Tahoma;">
<div><br></div>
<div style="background: none repeat scroll 0% 0% rgb(245, 245, 245);">
<div><b>From:</b> <a title="rouli.net@gmail.com" href="mailto:rouli.net@gmail.com" target="_blank">rouli</a> </div>
<div><b>Sent:</b> Thursday, May 13, 2010 8:31 AM</div>
<div><b>To:</b> <a title="gianluca.varenni@cacetech.com" href="mailto:gianluca.varenni@cacetech.com" target="_blank">Gianluca Varenni</a> </div>
<div><b>Cc:</b> <a title="mailto:winpcap-users@winpcap.org
CTRL + Click to follow link" href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users</a> </div>
<div><b>Subject:</b> Re: [Winpcap-users] Injected packets are duplicated on
vmware</div></div></div><div><div></div><div>
<div><br></div>
<div dir="ltr">vCenter 4.0.0<br>After some digging, I don't believe the problem is
with the VMWare, but rather with vista.<br>I have installed the same vista image
on a physical machine, and still see packet duplication.<br><br>Since it's only
got Service Pack 1 installed, I'm now installing Service Pack 2 and will check
whether the problem persists.<br><br><br><br><br><br>
<div class="gmail_quote">On Thu, May 13, 2010 at 5:59 PM, Gianluca Varenni <span dir="ltr"><<a title="mailto:gianluca.varenni@cacetech.com
CTRL + Click to follow link" href="mailto:gianluca.varenni@cacetech.com" target="_blank">gianluca.varenni@cacetech.com</a>></span>
wrote:<br>
<blockquote style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;" class="gmail_quote">
<div style="padding-left: 10px; padding-right: 10px; padding-top: 15px;" name="Compose message area">
<div><font face="Calibri">Which version of vmware are you using?</font></div>
<div><font face="Calibri"></font> </div>
<div><font face="Calibri">Have a nice day</font></div>
<div><font face="Calibri">GV</font></div>
<div style="font: 10pt Tahoma;">
<div><br></div>
<div style="background: none repeat scroll 0% 0% rgb(245, 245, 245);">
<div><b>From:</b> <a title="rouli.net@gmail.com" href="mailto:rouli.net@gmail.com" target="_blank">rouli</a> </div>
<div><b>Sent:</b> Thursday, May 13, 2010 6:04 AM</div>
<div><b>To:</b> <a title="winpcap-users@winpcap.org" href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users</a> </div>
<div><b>Subject:</b> [Winpcap-users] Injected packets are duplicated on
vmware</div></div></div>
<div>
<div></div>
<div>
<div><br></div>
<div dir="ltr">I'm trying to figure out a setup issue and would appreciate any
help.<br>I have a vista virtual machine and a program that injects packet to
the network using winpcap.<br>Every injected packet is duplicated, where the
second packet is the exact copy of the original packet but only the IP's
checksum and TTL are changed (TTL decreased by one).<br>For example, if I
inject an ICMP echo request using winpcap, the target machine actually gets
two requests.<br><br>The duplication happens on the vista machine - I've
validated this by using wireshark.<br><br>Any ideas of what can cause such an
issue?<br><br>Thanks</div></div></div>
<p></p>
<hr>
<p></p>_______________________________________________<br>Winpcap-users
mailing list<br><a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br><a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><br>
</div></blockquote></div><br></div></div></div></div>
</blockquote></div><br></div>