[Winpcap-users] Capturing the packets without the callback example

Gianluca Varenni gianluca.varenni at gmail.com
Sun Oct 2 17:42:35 GMT 2005


Hi Abdul.

Are you using some sort of personal firewall/antivirus software on your  machine?

What you are seeing is a duplication of the trasmitted packets, and this is usually due to some network software using non standard techniques to access the network.

Have a nice day
GV

  ----- Original Message ----- 
  From: Abdul Qayum 
  To: Winpcap-users at winpcap.org 
  Sent: Monday, September 26, 2005 9:04 AM
  Subject: [Winpcap-users] Capturing the packets without the callback example


  Hello Everybody

  I have confusion about traffic capture by example program given in winpcap tutorial. I copied the program and compile it. I am using  Winpcap 3.1 original version

  To simulate Traffic i just use ping command to send 50 byte at its reqular interval 
  ping 10.56.18.1 -t -l 50

  The output shows that
  two packet send contineously by sender 
  but only one packet received from receiver
  and this pattern is contineous
  But in Ping command as many packet send , same should  received.  I used DU meter ( bandwidth software www.dumeter.com ) for comparison its give me exact result but packer capturing routine giving me differnet result. 

  One packet for two packet
  If someone could help me. I will be greatful

  Muhammad Abdul Qayum

  Reslut of capturing packet programe. 

  1:17:17.727451 len:92 10.56.18.24.8 -> 10.56.18.1.29261
  1:17:17.727486 len:92 10.56.18.24.8 -> 10.56.18.1.29261
  1:17:17.728696 len:92 10.56.18.1.0 -> 10.56.18.24.29269
  1:17:18.733117 len:92 10.56.18.24.8 -> 10.56.18.1.29260
  1:17:18.733125 len:92 10.56.18.24.8 -> 10.56.18.1.29260
  1:17:18.733127 len:92 10.56.18.1.0 -> 10.56.18.24.29268
  1:17:19.730743 len:92 10.56.18.24.8 -> 10.56.18.1.29259
  1:17:19.730776 len:92 10.56.18.24.8 -> 10.56.18.1.29259
  1:17:19.731981 len:92 10.56.18.1.0 -> 10.56.18.24.29267
  1:17:19.940309 len:90 10.56.18.2.258 -> 224.0.0.5.14336
  1:17:20.736450 len:92 10.56.18.24.8 -> 10.56.18.1.29258 
  1:17:20.736457 len:92 10.56.18.24.8 ->10.56.18.1.29258
  1:17:20.736459 len:92 10.56.18.1.0 -> 10.56.18.24.29266
  1:17:21.734230 len:92 10.56.18.24.8 -> 10.56.18.1.29257
  1:17:21.734263 len:92 10.56.18.24.8 -> 10.56.18.1.29257
  1:17:21.735244 len:92 10.56.18.1.0 -> 10.56.18.24.29265
  1:17:22.269719 len:90 10.56.18.6.258 -> 224.0.0.5.14336
  1:17:22.736412 len:92 10.56.18.24.8 -> 10.56.18.1.29256
  1:17:22.736447 len:92 10.56.18.24.8 -> 10.56.18.1.29256
  1:17:22.737467 len:92 10.56.18.1.0 -> 10.56.18.24.29264
  1:17:23.595840 len:90 10.56.18.5.258 -> 224.0.0.5.14336
  1:17:23.743066 len:92 10.56.18.24.8 -> 10.56.18.1.29255 
  1:17:23.743072 len:92 10.56.18.24.8 -> 10.56.18.1.29255
  1:17:23.743074 len:92 10.56.18.1.0 -> 10.56.18.24.29263


------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20051002/449defe0/attachment.htm


More information about the Winpcap-users mailing list