[Winpcap-users] Large number of duplicate messages

Gianluca Varenni gianluca.varenni at cacetech.com
Thu Jul 23 15:27:36 PDT 2009


I would say it's some sort of artifact of the VMWre networking stack.
Do you have any personall firewall install on the host and/or the host?

Have a nice day
GV

----- Original Message ----- 
From: "Jack Jackson" <jack at pebbleridge.com>
To: <winpcap-users at winpcap.org>
Sent: Thursday, July 23, 2009 2:20 PM
Subject: [Winpcap-users] Large number of duplicate messages


>I just installed WinPcap 4.1 beta 5 on a Win 2008 Server 64-bit virtual
> machine (running on VMWare Server 2).
>
> Wireshark (1.2.1) shows a large number of duplicate copies of many (but 
> not
> all) messages.  For example, if I ping the virtual machine from another
> machine, I see about 126 ping requests and replies for each ping request
> sent.  ARP messages do not appear to be duplicated, but most others are
> (all TCP as far as I can tell, but few if any UDP).  Dumpcap shows the 
> same
> number of messages as Wireshark.
>
> If I install WinPcap 4.1 beta 5 on the host Win 2008 64-bit machine and do
> the same ping as above, I see much fewer duplicates, 2-3.
>
> Any idea what is happening?  Is this some artifact of the VMWare network
> drivers?
>
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users 



More information about the Winpcap-users mailing list