[Winpcap-users] Large number of duplicate messages
gianluca.varenni at cacetech.com
Thu Jul 23 15:54:16 PDT 2009
I don't have a Windows 2008 x64 guest off hand to test, unfortunately. Do
all the packets get duplicated?
Have a nice day
----- Original Message -----
From: "Jack Jackson" <jack at pebbleridge.com>
To: <winpcap-users at winpcap.org>
Sent: Thursday, July 23, 2009 3:37 PM
Subject: Re: [Winpcap-users] Large number of duplicate messages
> Just Windows Firewall, but the behavior is the same if it is turned off.
> At 03:27 PM 7/23/2009, Gianluca Varenni wrote:
>>I would say it's some sort of artifact of the VMWre networking stack.
>>Do you have any personall firewall install on the host and/or the host?
>>Have a nice day
>>----- Original Message -----
>>From: "Jack Jackson" <jack at pebbleridge.com>
>>To: <winpcap-users at winpcap.org>
>>Sent: Thursday, July 23, 2009 2:20 PM
>>Subject: [Winpcap-users] Large number of duplicate messages
>> >I just installed WinPcap 4.1 beta 5 on a Win 2008 Server 64-bit virtual
>> > machine (running on VMWare Server 2).
>> > Wireshark (1.2.1) shows a large number of duplicate copies of many (but
>> > not
>> > all) messages. For example, if I ping the virtual machine from another
>> > machine, I see about 126 ping requests and replies for each ping
>> > request
>> > sent. ARP messages do not appear to be duplicated, but most others are
>> > (all TCP as far as I can tell, but few if any UDP). Dumpcap shows the
>> > same
>> > number of messages as Wireshark.
>> > If I install WinPcap 4.1 beta 5 on the host Win 2008 64-bit machine and
>> > do
>> > the same ping as above, I see much fewer duplicates, 2-3.
>> > Any idea what is happening? Is this some artifact of the VMWare
>> > network
>> > drivers?
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
More information about the Winpcap-users