<html>
<body>
Is your virtual machine running on VMWare Server or ESX?<br><br>
At 04:20 AM 5/16/2010, rouli wrote:<br>
<blockquote type=cite class=cite cite="">And on the virtual vista machine
duplication only occurs when IP routing is enabled.<br>
here's the routing table, can someone see what is configured wrong that
may cause such a problem?<br>
I'm inject a ping request packet whose destination address is
192.168.1.28 and send it through the interface owning
192.168.1.61<br><br>
<br>
===========================================================================<br>
Interface List<br>
23 ...00 50 56 85 06 aa ...... Intel(R) PRO/1000 MT Network
Connection #3<br>
21 ...00 50 56 85 36 4b ...... Intel(R) PRO/1000 MT Network
Connection #2<br>
19 ...00 50 56 85 5b 12 ...... Intel(R) PRO/1000 MT Network
Connection<br>
1 ........................... Software Loopback Interface 1<br>
26 ...00 00 00 00 00 00 00 e0
isatap.{EB4B88C1-BB53-44F4-93B1-4136C7DB6851}<br>
25 ...00 00 00 00 00 00 00 e0
isatap.{FDB3ED54-237A-4F75-801A-376BA00E0C25}<br>
27 ...00 00 00 00 00 00 00 e0
<a href="http://isatap.engulfix.net">isatap.engulfix.net</a><br>
===========================================================================<br>
<br>
IPv4 Route Table<br>
===========================================================================<br>
Active Routes:<br>
Network Destination
Netmask
Gateway Interface Metric<br>
127.0.0.0
255.0.0.0
On-link
127.0.0.1 306<br>
127.0.0.1
255.255.255.255
On-link
127.0.0.1 306<br>
127.255.255.255
255.255.255.255
On-link
127.0.0.1 306<br>
192.168.1.0
255.255.255.0
On-link
192.168.1.61 11<br>
192.168.1.61
255.255.255.255
On-link 192.168.1.61
266<br>
192.168.1.76
255.255.255.255
On-link 192.168.1.76
266<br>
192.168.1.77
255.255.255.255
On-link 192.168.1.77
266<br>
===========================================================================<br>
Persistent Routes:<br>
None<br><br>
IPv6 Route Table<br>
===========================================================================<br>
Active Routes:<br>
If Metric Network Destination
Gateway<br>
1 306
::1/128
On-link<br>
1 306
ff00::/8
On-link<br>
===========================================================================<br>
Persistent Routes:<br>
None<br><br>
<br><br>
On Sun, May 16, 2010 at 11:20 AM, rouli
<<a href="http://rouli.net">rouli.net</a>@<a href="http://gmail.com">
gmail.com</a>> wrote:<br>
<dl>
<dd>Ok, I've fixed the problem on the physical machine, though I'm not
sure what made it go away, and I still have it on the virtual
machine.<br>
<dd>On the physical machine there are three network cards, only one was
actually connected to the network - the other two were unplugged.
Moreover, the two unplugged cards had a static ip address configured
which didn't match our network mask. Once I set those two cards to obtain
a dynamic address, the duplication has stopped (weird, huh?). I've since
tried to recreate the problem, but failed to do so; And as I've
mentioned, I still got it on the virtual machine whose image was taken
from the physical machine, even though on it all network cards are
configured properly.<br><br>
<br><br>
<dd>On Thu, May 13, 2010 at 6:45 PM, Gianluca Varenni
<<a href="mailto:gianluca.varenni@cacetech.com">
gianluca.varenni@cacetech.com</a>> wrote:<br>
<dl>
<dd><font face="Calibri">Packet duplication is usually caused by the
virtual NIC drivers of vmware (or in any case their networking
virtualization layer). I've seen this kind of problems with vmware
workstation, but I've never used vCenter (which I believe is just a
management tool for a cloud of VMs using VMware server or something
similar).<br>
</font>
<dd> <br>
<dd><font face="Calibri">Have a nice day<br>
<dd>GV<br>
</font><br>
<dd>From:</b> <a href="mailto:rouli.net@gmail.com">rouli</a> <br>
<dd>Sent:</b> Thursday, May 13, 2010 8:31 AM<br>
<dd>To:</b> <a href="mailto:gianluca.varenni@cacetech.com">Gianluca
Varenni</a> <br>
<dd>Cc:</b> <a href="mailto:winpcap-users@winpcap.org">winpcap-users</a>
<br>
<dd>Subject:</b> Re: [Winpcap-users] Injected packets are duplicated on
vmware<br><br>
<dd>vCenter 4.0.0<br>
<dd>After some digging, I don't believe the problem is with the VMWare,
but rather with vista.<br>
<dd>I have installed the same vista image on a physical machine, and
still see packet duplication.<br><br>
<dd>Since it's only got Service Pack 1 installed, I'm now installing
Service Pack 2 and will check whether the problem persists.<br><br>
<br><br>
<br><br>
<dd>On Thu, May 13, 2010 at 5:59 PM, Gianluca Varenni
<<a href="mailto:gianluca.varenni@cacetech.com">
gianluca.varenni@cacetech.com</a>> wrote:<br>
<dl>
<dd><font face="Calibri">Which version of vmware are you using?<br>
</font>
<dd> <br>
<dd><font face="Calibri">Have a nice day<br>
<dd>GV<br>
</font><br>
<dd>From:</b> <a href="mailto:rouli.net@gmail.com">rouli</a> <br>
<dd>Sent:</b> Thursday, May 13, 2010 6:04 AM<br>
<dd>To:</b> <a href="mailto:winpcap-users@winpcap.org">winpcap-users</a>
<br>
<dd>Subject:</b> [Winpcap-users] Injected packets are duplicated on
vmware<br><br>
<dd>I'm trying to figure out a setup issue and would appreciate any
help.<br>
<dd>I have a vista virtual machine and a program that injects packet to
the network using winpcap.<br>
<dd>Every injected packet is duplicated, where the second packet is the
exact copy of the original packet but only the IP's checksum and TTL are
changed (TTL decreased by one).<br>
<dd>For example, if I inject an ICMP echo request using winpcap, the
target machine actually gets two requests.<br><br>
<dd>The duplication happens on the vista machine - I've validated this by
using wireshark.<br><br>
<dd>Any ideas of what can cause such an issue?<br><br>
<dd>Thanks
</dl>
</dl>
</dl></blockquote></body>
</html>