With regards to your question about documentation for issues with Windows 2000, virtual adapters and duplicate packets:
1) We have seen this behavior on our machines, where disabling a VPN or other virtual adapter fixed the duplicate packet problem.
2) For some additional details, see the following FAQ for Etherpeek, which describes the symptoms and some example virtual adapters you might have such as Window's QoS Packet Scheduler. Etherpeek is a commercial software based packet analyzer from Wild Packets.
http://www.wildpackets.com/support/knowledge_base/etherpeek_nx#15
3) When researching this issue previously, I read additional references to this issue on the web, though I do not recall where.
Although this virtual adapter issue does fit the symptoms you describe, it is of course possible you may be seeing a separate issue, such as the one Eric Robinson described in his earlier reply.
Regards,
--PJ
At 02:21 PM 11/25/02, you wrote:
No, I don't think I have a VPN or any virtual adapters enabled. I am now using Intel(R)PRO/100 S Desktop Adapter, but I still saw the problem when I used a different adapter (Intel 8255x Based Integrated Fast Ethernet). I have two machines that have this problem. I reinstalled Windows on one, and I didn't see the problem any more. Do you know any reference document talking about this bug?Thanks, -Hai --- "P.J. Malloy" <[EMAIL PROTECTED]> wrote: > Hai, > > Do you have a VPN or other virtual adapters enabled > on the machine? If so, > you may be seeing a known Microsoft NDIS bug which > causes this behavior on > Windows 2000. > > My understanding is that the only work around is to > temporarily disable the > VPN and possibly other virtual adapters you have > installed on that machine. > > Note that this is a Microsoft bug, which is why you > would be seeing it even > when using different capture utilities. > > Regards, > --PJ > > At 01:53 PM 11/21/02, you wrote: > >Hi all, > >For some reasons, when I use a sniffer tool to > capture > >the network traffic on my machine (win2k server), I > >always saw twice for every packet sending from the > >local machine. Two packets are almost identical > except > >their timestamps are different. I used many > different > >sniffer tools (like tcpdump, ethereal, sniffer > basic > >4.5), I still saw the same problem. It happens only > to > >the traffic orginated from the local machine, not > to > >those that come from the other machines in the > local > >network. I can see this problem only when I run the > >sniffer program on the local machine. If I run it > on a > >different machine and capture traffic comming from > my > >machine, I don't see the problem. So it looks like > the > >duplicated packet doesn't go on the network, > otherwise > >I would see two of them. It's just somehow reported > >twice.. > >Does anyone know what wrong with my machine? Thanks > >for your help. > > > >-hn > > > > > >__________________________________________________ > >Do you Yahoo!? > >Yahoo! Mail Plus � Powerful. Affordable. Sign up > now. > >http://mailplus.yahoo.com > > > > > >================================================================== > > This is the WinPcap users list. It is archived at > > > http://www.mail-archive.com/[email protected]/ > > > > To unsubscribe use > > mailto: > [EMAIL PROTECTED]?body=unsubscribe > >================================================================== > > > > > ================================================================= > This is the WinPcap users list. It is archived at > > http://www.mail-archive.com/[email protected]/ > > To unsubscribe use > mailto: > [EMAIL PROTECTED]?body=unsubscribe > ================================================================== __________________________________________________ Do you Yahoo!? Yahoo! Mail Plus � Powerful. Affordable. Sign up now. http://mailplus.yahoo.com ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[email protected]/ To unsubscribe use mailto: [EMAIL PROTECTED]?body=unsubscribe ==================================================================
================================================================= This is the WinPcap users list. It is archived at http://www.mail-archive.com/[email protected]/ To unsubscribe use mailto: [EMAIL PROTECTED]?body=unsubscribe =================================================================
