[Winpcap-users] Injected packets are duplicated on vmware

[Gianluca Varenni]

Packet duplication is usually caused by the virtual NIC drivers of vmware (or in any case their networking virtualization layer). I've seen this kind of problems with vmware workstation, but I've never used vCenter (which I believe is just a management tool for a cloud of VMs using VMware server or something similar).

Have a nice day
GV


From: rouli 
Sent: Thursday, May 13, 2010 8:31 AM
To: Gianluca Varenni 
Cc: winpcap-users 
Subject: Re: [Winpcap-users] Injected packets are duplicated on vmware


vCenter 4.0.0
After some digging, I don't believe the problem is with the VMWare, but rather with vista.
I have installed the same vista image on a physical machine, and still see packet duplication.

Since it's only got Service Pack 1 installed, I'm now installing Service Pack 2 and will check whether the problem persists.






On Thu, May 13, 2010 at 5:59 PM, Gianluca Varenni <gianluca.varenni at cacetech.com> wrote:

  Which version of vmware are you using?

  Have a nice day
  GV


  From: rouli 
  Sent: Thursday, May 13, 2010 6:04 AM
  To: winpcap-users 
  Subject: [Winpcap-users] Injected packets are duplicated on vmware


  I'm trying to figure out a setup issue and would appreciate any help.
  I have a vista virtual machine and a program that injects packet to the network using winpcap.
  Every injected packet is duplicated, where the second packet is the exact copy of the original packet but only the IP's checksum and TTL are changed (TTL decreased by one).
  For example, if I inject an ICMP echo request using winpcap, the target machine actually gets two requests.

  The duplication happens on the vista machine - I've validated this by using wireshark.

  Any ideas of what can cause such an issue?

  Thanks


------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20100513/fed0c7c5/attachment-0001.htm