Wireshark-users: Re: [Wireshark-users] Duplicate packet with wireshark and winpcap

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Wed, 4 Oct 2006 16:20:13 -0700

On Wed, Oct 04, 2006 at 08:22:03PM +0200, alex loutrbringa' wrote:

> There is one millisecond each time between the two packets, the 
> packets are perfectly similar on ethernet, IP, TCP layers... Are the 
> packets really emitted two time or is this winpcap who capture 2 times 
> the packet?

This is most likely due to winpcap receiving two copies of the same data 
from Windows.  This happens due to extra drivers in the network control 
panel such as for VPNs or other packet sniffing programs.  Try 
unchecking the ones you don't need one-by-one until the problem goes 
away.


Steve