[Winpcap-users] Injected packets duplicated on Vista (was: vmware)

[rouli]

Ok, I've fixed the problem on the physical machine, though I'm not sure what
made it go away, and I still have it on the virtual machine.
On the physical machine there are three network cards, only one was actually
connected to the network - the other two were unplugged. Moreover, the two
unplugged cards had a static ip address configured which didn't match our
network mask. Once I set those two cards to obtain a dynamic address, the
duplication has stopped (weird, huh?). I've since tried to recreate the
problem, but failed to do so; And as I've mentioned, I still got it on the
virtual machine whose image was taken from the physical machine, even though
on it all network cards are configured properly.



On Thu, May 13, 2010 at 6:45 PM, Gianluca Varenni <
gianluca.varenni at cacetech.com> wrote:

>  Packet duplication is usually caused by the virtual NIC drivers of vmware
> (or in any case their networking virtualization layer). I've seen this kind
> of problems with vmware workstation, but I've never used vCenter (which I
> believe is just a management tool for a cloud of VMs using VMware server or
> something similar).
>
> Have a nice day
> GV
>
>  *From:* rouli <rouli.net at gmail.com>
> *Sent:* Thursday, May 13, 2010 8:31 AM
> *To:* Gianluca Varenni <gianluca.varenni at cacetech.com>
> *Cc:* winpcap-users <winpcap-users at winpcap.org>
> *Subject:* Re: [Winpcap-users] Injected packets are duplicated on vmware
>
> vCenter 4.0.0
> After some digging, I don't believe the problem is with the VMWare, but
> rather with vista.
> I have installed the same vista image on a physical machine, and still see
> packet duplication.
>
> Since it's only got Service Pack 1 installed, I'm now installing Service
> Pack 2 and will check whether the problem persists.
>
>
>
>
>
> On Thu, May 13, 2010 at 5:59 PM, Gianluca Varenni <
> gianluca.varenni at cacetech.com> wrote:
>
>>  Which version of vmware are you using?
>>
>> Have a nice day
>> GV
>>
>>  *From:* rouli <rouli.net at gmail.com>
>> *Sent:* Thursday, May 13, 2010 6:04 AM
>> *To:* winpcap-users <winpcap-users at winpcap.org>
>> *Subject:* [Winpcap-users] Injected packets are duplicated on vmware
>>
>> I'm trying to figure out a setup issue and would appreciate any help.
>> I have a vista virtual machine and a program that injects packet to the
>> network using winpcap.
>> Every injected packet is duplicated, where the second packet is the exact
>> copy of the original packet but only the IP's checksum and TTL are changed
>> (TTL decreased by one).
>> For example, if I inject an ICMP echo request using winpcap, the target
>> machine actually gets two requests.
>>
>> The duplication happens on the vista machine - I've validated this by
>> using wireshark.
>>
>> Any ideas of what can cause such an issue?
>>
>> Thanks
>>
>> ------------------------------
>>
>> _______________________________________________
>> Winpcap-users mailing list
>> Winpcap-users at winpcap.org
>> https://www.winpcap.org/mailman/listinfo/winpcap-users
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20100516/35feef18/attachment.htm