Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Duplicate Packets when importing .pcap from Cisco NAM modu

From: Joerg Mayer <jmayer@xxxxxxxxx>
Date: Tue, 10 Aug 2010 10:04:37 +0200
On Mon, Aug 09, 2010 at 09:01:55PM +0400, Akhtar Rasool wrote:
> I am seeing duplicate packets when importing packet captures from Cisco NAM
> module into Wireshark. Would appreciate any ideas to avoid that. Thanks.

1) Learn how to avoid capturing packets twice
as you can't do that with an existing trace:
2) use editcap -d (and optionally -D #) to remove duplicates

ciao
   Joerg
-- 
Joerg Mayer                                           <jmayer@xxxxxxxxx>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.