[Winpcap-users] Large number of duplicate messages

[Jack Jackson]

No, not all are duplicated.

It seems to depend on whether or not the destination IP address is the 
virtual machine.

I will do some more investigation.  Thanks for your help.

At 03:54 PM 7/23/2009, Gianluca Varenni wrote:
>I don't have a Windows 2008 x64 guest off hand to test, unfortunately. Do
>all the packets get duplicated?
>
>Have a nice day
>GV
>
>----- Original Message -----
>From: "Jack Jackson" <jack at pebbleridge.com>
>To: <winpcap-users at winpcap.org>
>Sent: Thursday, July 23, 2009 3:37 PM
>Subject: Re: [Winpcap-users] Large number of duplicate messages
>
>
> > Just Windows Firewall, but the behavior is the same if it is turned off.
> >
> > Jack
> >
> > At 03:27 PM 7/23/2009, Gianluca Varenni wrote:
> >>I would say it's some sort of artifact of the VMWre networking stack.
> >>Do you have any personall firewall install on the host and/or the host?
> >>
> >>Have a nice day
> >>GV
> >>
> >>----- Original Message -----
> >>From: "Jack Jackson" <jack at pebbleridge.com>
> >>To: <winpcap-users at winpcap.org>
> >>Sent: Thursday, July 23, 2009 2:20 PM
> >>Subject: [Winpcap-users] Large number of duplicate messages
> >>
> >>
> >> >I just installed WinPcap 4.1 beta 5 on a Win 2008 Server 64-bit virtual
> >> > machine (running on VMWare Server 2).
> >> >
> >> > Wireshark (1.2.1) shows a large number of duplicate copies of many (but
> >> > not
> >> > all) messages.  For example, if I ping the virtual machine from another
> >> > machine, I see about 126 ping requests and replies for each ping
> >> > request
> >> > sent.  ARP messages do not appear to be duplicated, but most others are
> >> > (all TCP as far as I can tell, but few if any UDP).  Dumpcap shows the
> >> > same
> >> > number of messages as Wireshark.
> >> >
> >> > If I install WinPcap 4.1 beta 5 on the host Win 2008 64-bit machine and
> >> > do
> >> > the same ping as above, I see much fewer duplicates, 2-3.
> >> >
> >> > Any idea what is happening?  Is this some artifact of the VMWare
> >> > network
> >> > drivers?
> >
> > _______________________________________________
> > Winpcap-users mailing list
> > Winpcap-users at winpcap.org
> > https://www.winpcap.org/mailman/listinfo/winpcap-users
>
>_______________________________________________
>Winpcap-users mailing list
>Winpcap-users at winpcap.org
>https://www.winpcap.org/mailman/listinfo/winpcap-users