[Winpcap-users] Injected packets are duplicated on vmware

[Fish" (David B. Trout]

It can also happen if  "IP Routing"  is enabled.

 

 

C:\> ipconfig -all

 

Windows IP Configuration

 

   Host Name . . . . . . . . . . . . : censored

   Primary Dns Suffix  . . . . . . . :

   Node Type . . . . . . . . . . . . : Unknown

   IP Routing Enabled. . . . . . . . : No     <<<<------ (look here)
-----<<<<<<

   WINS Proxy Enabled. . . . . . . . : Yes

 

Ethernet adapter Local Area Connection:

 

   Connection-specific DNS Suffix  . :

   Description . . . . . . . . . . . : Realtek RTL8169/8110 Family Gigabit
Ethernet NIC

   Physical Address. . . . . . . . . : 08-54-3F-00-F0-EF

   Dhcp Enabled. . . . . . . . . . . : No

   IP Address. . . . . . . . . . . . : 192.168.0.20

   Subnet Mask . . . . . . . . . . . : 255.255.0.0

   Default Gateway . . . . . . . . . : 192.168.1.1

   DNS Servers . . . . . . . . . . . : 68.238.128.14

                                       68.238.64.14

C:\>

 

-- 
  "Fish"  (David B. Trout) 
    fish at softdevlabs.com

 

From: winpcap-users-bounces at winpcap.org
[mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Gianluca Varenni
Sent: Thursday, May 13, 2010 8:46 AM
To: rouli.net at gmail.com
Cc: winpcap-users
Subject: Re: [Winpcap-users] Injected packets are duplicated on vmware
Importance: High

 

Packet duplication is usually caused by the virtual NIC drivers of vmware
(or in any case their networking virtualization layer). I've seen this kind
of problems with vmware workstation, but I've never used vCenter (which I
believe is just a management tool for a cloud of VMs using VMware server or
something similar).

 

Have a nice day

GV

 

From: rouli <mailto:rouli.net at gmail.com>  

Sent: Thursday, May 13, 2010 8:31 AM

To: Gianluca Varenni <mailto:gianluca.varenni at cacetech.com>  

Cc: winpcap-users <mailto:winpcap-users at winpcap.org>  

Subject: Re: [Winpcap-users] Injected packets are duplicated on vmware

 

vCenter 4.0.0
After some digging, I don't believe the problem is with the VMWare, but
rather with vista.
I have installed the same vista image on a physical machine, and still see
packet duplication.

Since it's only got Service Pack 1 installed, I'm now installing Service
Pack 2 and will check whether the problem persists.






On Thu, May 13, 2010 at 5:59 PM, Gianluca Varenni
<gianluca.varenni at cacetech.com> wrote:

Which version of vmware are you using?

 

Have a nice day

GV

 

From: rouli <mailto:rouli.net at gmail.com>  

Sent: Thursday, May 13, 2010 6:04 AM

To: winpcap-users <mailto:winpcap-users at winpcap.org>  

Subject: [Winpcap-users] Injected packets are duplicated on vmware

 

I'm trying to figure out a setup issue and would appreciate any help.
I have a vista virtual machine and a program that injects packet to the
network using winpcap.
Every injected packet is duplicated, where the second packet is the exact
copy of the original packet but only the IP's checksum and TTL are changed
(TTL decreased by one).
For example, if I inject an ICMP echo request using winpcap, the target
machine actually gets two requests.

The duplication happens on the vista machine - I've validated this by using
wireshark.

Any ideas of what can cause such an issue?

Thanks

  _____  

_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org
https://www.winpcap.org/mailman/listinfo/winpcap-users

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20100513/31cc8a48/attachment.htm