[Winpcap-users] Large number of duplicate messages

[Gianluca Varenni]

I don't have a Windows 2008 x64 guest off hand to test, unfortunately. Do 
all the packets get duplicated?

Have a nice day
GV

----- Original Message ----- 
From: "Jack Jackson" <jack at pebbleridge.com>
To: <winpcap-users at winpcap.org>
Sent: Thursday, July 23, 2009 3:37 PM
Subject: Re: [Winpcap-users] Large number of duplicate messages


> Just Windows Firewall, but the behavior is the same if it is turned off.
>
> Jack
>
> At 03:27 PM 7/23/2009, Gianluca Varenni wrote:
>>I would say it's some sort of artifact of the VMWre networking stack.
>>Do you have any personall firewall install on the host and/or the host?
>>
>>Have a nice day
>>GV
>>
>>----- Original Message -----
>>From: "Jack Jackson" <jack at pebbleridge.com>
>>To: <winpcap-users at winpcap.org>
>>Sent: Thursday, July 23, 2009 2:20 PM
>>Subject: [Winpcap-users] Large number of duplicate messages
>>
>>
>> >I just installed WinPcap 4.1 beta 5 on a Win 2008 Server 64-bit virtual
>> > machine (running on VMWare Server 2).
>> >
>> > Wireshark (1.2.1) shows a large number of duplicate copies of many (but
>> > not
>> > all) messages.  For example, if I ping the virtual machine from another
>> > machine, I see about 126 ping requests and replies for each ping 
>> > request
>> > sent.  ARP messages do not appear to be duplicated, but most others are
>> > (all TCP as far as I can tell, but few if any UDP).  Dumpcap shows the
>> > same
>> > number of messages as Wireshark.
>> >
>> > If I install WinPcap 4.1 beta 5 on the host Win 2008 64-bit machine and 
>> > do
>> > the same ping as above, I see much fewer duplicates, 2-3.
>> >
>> > Any idea what is happening?  Is this some artifact of the VMWare 
>> > network
>> > drivers?
>
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users at winpcap.org
> https://www.winpcap.org/mailman/listinfo/winpcap-users