No, not all are duplicated. It seems to depend on whether or not the destination IP address is the virtual machine.
I will do some more investigation. Thanks for your help. At 03:54 PM 7/23/2009, Gianluca Varenni wrote: >I don't have a Windows 2008 x64 guest off hand to test, unfortunately. Do >all the packets get duplicated? > >Have a nice day >GV > >----- Original Message ----- >From: "Jack Jackson" <[email protected]> >To: <[email protected]> >Sent: Thursday, July 23, 2009 3:37 PM >Subject: Re: [Winpcap-users] Large number of duplicate messages > > > > Just Windows Firewall, but the behavior is the same if it is turned off. > > > > Jack > > > > At 03:27 PM 7/23/2009, Gianluca Varenni wrote: > >>I would say it's some sort of artifact of the VMWre networking stack. > >>Do you have any personall firewall install on the host and/or the host? > >> > >>Have a nice day > >>GV > >> > >>----- Original Message ----- > >>From: "Jack Jackson" <[email protected]> > >>To: <[email protected]> > >>Sent: Thursday, July 23, 2009 2:20 PM > >>Subject: [Winpcap-users] Large number of duplicate messages > >> > >> > >> >I just installed WinPcap 4.1 beta 5 on a Win 2008 Server 64-bit virtual > >> > machine (running on VMWare Server 2). > >> > > >> > Wireshark (1.2.1) shows a large number of duplicate copies of many (but > >> > not > >> > all) messages. For example, if I ping the virtual machine from another > >> > machine, I see about 126 ping requests and replies for each ping > >> > request > >> > sent. ARP messages do not appear to be duplicated, but most others are > >> > (all TCP as far as I can tell, but few if any UDP). Dumpcap shows the > >> > same > >> > number of messages as Wireshark. > >> > > >> > If I install WinPcap 4.1 beta 5 on the host Win 2008 64-bit machine and > >> > do > >> > the same ping as above, I see much fewer duplicates, 2-3. > >> > > >> > Any idea what is happening? Is this some artifact of the VMWare > >> > network > >> > drivers? > > > > _______________________________________________ > > Winpcap-users mailing list > > [email protected] > > https://www.winpcap.org/mailman/listinfo/winpcap-users > >_______________________________________________ >Winpcap-users mailing list >[email protected] >https://www.winpcap.org/mailman/listinfo/winpcap-users _______________________________________________ Winpcap-users mailing list [email protected] https://www.winpcap.org/mailman/listinfo/winpcap-users
