[Winpcap-users] PacketReceivePacket returns same packet twice?

[Ranju V]

On 10/6/06, Gianluca Varenni <gianluca.varenni at cacetech.com> wrote:
> Why are you using the packet.dll API instead of the pcap one? Please
> remember that the packet.dll is subject to change between different versions
> of WinPcap, as documented here
>
> http://www.winpcap.org/docs/docs40b1/html/group__packetapi.html
> http://www.winpcap.org/docs/docs31/html/group__packetapi.html

Thanks for your reply.  I had started work on this app a couple of
years back and at that time the packet capture interface did not
expose a packet sending API.  Now that you mentioned, I checked the
winpcap docs to discover that there is support for sending packets now
via a function called "pcap_sendpacket".  There is no reason for me to
continue using "packet.dll" therefore.  I'll switch to the pcap API
itself.

> > can winpcap return the same network packet twice or
> > more than that?
>
> This sometimes happens when the machine is running some sort of personal
> firewall or similar software based on an intermediate driver. In this case
> WinPcap is sometimes notified twice for every received packet. In order to
> double check this, please try capturing with wireshark or windump.

Hmm.  In that case I guess I'll just have to handle it.  I'll look up
"wireshark" and "windump" as you have suggested.

Thanks again!

-- 
Ranju. V
http://blogorama.nerdworks.in/
--