I was using Wireshark to view the SMTP traffic on my Windows SMTP
server. What I found was very odd... Each packet my server was sending
appears to be sent twice!
Is this for real? Or a Wireshark fluke? Anybody seen such a thing?
Any explanations would be greatly appreciated!
My local machine in the trace is 192.168.1.9. All the packets out to
the internet appear to be sent twice. And the time between them is
very, very small... The identical packet seems to go out immediately.
I can attach the trace file itself if it would be useful (it is 250k or
so...)
I am using Wireshark 1.0.0 install on this Windows 2k server SP4 with
all updates applied...
Brian
Attachment:
doublePackets.gif
Description: doublePackets.gif
