<div dir="ltr">And on the virtual vista machine duplication only occurs when IP routing is enabled.<br>here's the routing table, can someone see what is configured wrong that may cause such a problem?<br>I'm inject a ping request packet whose destination address is 192.168.1.28 and send it through the interface owning 192.168.1.61<br>
<br><br>===========================================================================<br>Interface List<br> 23 ...00 50 56 85 06 aa ...... Intel(R) PRO/1000 MT Network Connection #3<br> 21 ...00 50 56 85 36 4b ...... Intel(R) PRO/1000 MT Network Connection #2<br>
19 ...00 50 56 85 5b 12 ...... Intel(R) PRO/1000 MT Network Connection<br> 1 ........................... Software Loopback Interface 1<br> 26 ...00 00 00 00 00 00 00 e0 isatap.{EB4B88C1-BB53-44F4-93B1-4136C7DB6851}<br>
25 ...00 00 00 00 00 00 00 e0 isatap.{FDB3ED54-237A-4F75-801A-376BA00E0C25}<br> 27 ...00 00 00 00 00 00 00 e0 <a href="http://isatap.engulfix.net">isatap.engulfix.net</a><br>===========================================================================<br>
<br>IPv4 Route Table<br>===========================================================================<br>Active Routes:<br>Network Destination Netmask Gateway Interface Metric<br> 127.0.0.0 255.0.0.0 On-link 127.0.0.1 306<br>
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306<br> 127.255.255.255 255.255.255.255 On-link 127.0.0.1 306<br> 192.168.1.0 255.255.255.0 On-link 192.168.1.61 11<br>
192.168.1.61 255.255.255.255 On-link 192.168.1.61 266<br> 192.168.1.76 255.255.255.255 On-link 192.168.1.76 266<br> 192.168.1.77 255.255.255.255 On-link 192.168.1.77 266<br>
===========================================================================<br>Persistent Routes:<br> None<br><br>IPv6 Route Table<br>===========================================================================<br>Active Routes:<br>
If Metric Network Destination Gateway<br> 1 306 ::1/128 On-link<br> 1 306 ff00::/8 On-link<br>===========================================================================<br>
Persistent Routes:<br>
None<br><br><br><br><div class="gmail_quote">On Sun, May 16, 2010 at 11:20 AM, rouli <span dir="ltr"><<a href="http://rouli.net">rouli.net</a>@<a href="http://gmail.com">gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div dir="ltr">Ok, I've fixed the problem on the physical machine, though I'm not sure what made it go away, and I still have it on the virtual machine.<br>On the physical machine there are three network cards, only one was actually connected to the network - the other two were unplugged. Moreover, the two unplugged cards had a static ip address configured which didn't match our network mask. Once I set those two cards to obtain a dynamic address, the duplication has stopped (weird, huh?). I've since tried to recreate the problem, but failed to do so; And as I've mentioned, I still got it on the virtual machine whose image was taken from the physical machine, even though on it all network cards are configured properly.<br>
<br><br><br><div class="gmail_quote">On Thu, May 13, 2010 at 6:45 PM, Gianluca Varenni <span dir="ltr"><<a href="mailto:gianluca.varenni@cacetech.com" target="_blank">gianluca.varenni@cacetech.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div style="padding-left: 10px; padding-right: 10px; padding-top: 15px;" name="Compose message area">
<div><font face="Calibri">Packet duplication is usually caused by the virtual NIC
drivers of vmware (or in any case their networking virtualization layer). I've
seen this kind of problems with vmware workstation, but I've never used vCenter
(which I believe is just a management tool for a cloud of VMs using VMware
server or something similar).</font></div><div>
<div><font face="Calibri"></font> </div>
<div><font face="Calibri">Have a nice day</font></div>
<div><font face="Calibri">GV</font></div>
</div><div style="font: 10pt Tahoma;">
<div><br></div>
<div style="background: none repeat scroll 0% 0% rgb(245, 245, 245);">
<div><b>From:</b> <a title="rouli.net@gmail.com" href="mailto:rouli.net@gmail.com" target="_blank">rouli</a> </div>
<div><b>Sent:</b> Thursday, May 13, 2010 8:31 AM</div>
<div><b>To:</b> <a title="gianluca.varenni@cacetech.com" href="mailto:gianluca.varenni@cacetech.com" target="_blank">Gianluca Varenni</a> </div>
<div><b>Cc:</b> <a title="mailto:winpcap-users@winpcap.org
CTRL + Click to follow link" href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users</a> </div>
<div><b>Subject:</b> Re: [Winpcap-users] Injected packets are duplicated on
vmware</div></div></div><div><div></div><div>
<div><br></div>
<div dir="ltr">vCenter 4.0.0<br>After some digging, I don't believe the problem is
with the VMWare, but rather with vista.<br>I have installed the same vista image
on a physical machine, and still see packet duplication.<br><br>Since it's only
got Service Pack 1 installed, I'm now installing Service Pack 2 and will check
whether the problem persists.<br><br><br><br><br><br>
<div class="gmail_quote">On Thu, May 13, 2010 at 5:59 PM, Gianluca Varenni <span dir="ltr"><<a title="mailto:gianluca.varenni@cacetech.com
CTRL + Click to follow link" href="mailto:gianluca.varenni@cacetech.com" target="_blank">gianluca.varenni@cacetech.com</a>></span>
wrote:<br>
<blockquote style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;" class="gmail_quote">
<div style="padding-left: 10px; padding-right: 10px; padding-top: 15px;" name="Compose message area">
<div><font face="Calibri">Which version of vmware are you using?</font></div>
<div><font face="Calibri"></font> </div>
<div><font face="Calibri">Have a nice day</font></div>
<div><font face="Calibri">GV</font></div>
<div style="font: 10pt Tahoma;">
<div><br></div>
<div style="background: none repeat scroll 0% 0% rgb(245, 245, 245);">
<div><b>From:</b> <a title="rouli.net@gmail.com" href="mailto:rouli.net@gmail.com" target="_blank">rouli</a> </div>
<div><b>Sent:</b> Thursday, May 13, 2010 6:04 AM</div>
<div><b>To:</b> <a title="winpcap-users@winpcap.org" href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users</a> </div>
<div><b>Subject:</b> [Winpcap-users] Injected packets are duplicated on
vmware</div></div></div>
<div>
<div></div>
<div>
<div><br></div>
<div dir="ltr">I'm trying to figure out a setup issue and would appreciate any
help.<br>I have a vista virtual machine and a program that injects packet to
the network using winpcap.<br>Every injected packet is duplicated, where the
second packet is the exact copy of the original packet but only the IP's
checksum and TTL are changed (TTL decreased by one).<br>For example, if I
inject an ICMP echo request using winpcap, the target machine actually gets
two requests.<br><br>The duplication happens on the vista machine - I've
validated this by using wireshark.<br><br>Any ideas of what can cause such an
issue?<br><br>Thanks</div></div></div>
<p></p>
<hr>
<p></p>_______________________________________________<br>Winpcap-users
mailing list<br><a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br><a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><br>
</div></blockquote></div><br></div></div></div></div>
</blockquote></div><br></div>
</blockquote></div><br></div>