Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: RE: [Ethereal-users] duplicated IP packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Tue, 22 Apr 2003 13:56:56 +0100
Alberto,

Are you spanning multiple ports through which each packets would traverse?

You may find this is a feature, not a bug. :-)  It happens to me all the
time when I span multiple ports on Cisco 6509's, I just need to be more
selective about where I capture my data. Other sniffers may automatically
remove these packets w/o telling you.

HTH

Alistair


> -----Original Message-----
> From: Alberto Ferrari [mailto:alberto.ferrari@xxxxxxxxxxxxxxxxx] 
> Sent: 18 April 2003 07:55
> To: ethereal-users@xxxxxxxxxxxx
> Subject: [Ethereal-users] duplicated IP packets
> 
> 
> Hello all,
> 	I'm sniffing a network trough a monitor port of a cisco 
> catalyst switch, and I saw that all the packet captured are 
> duplicated, another not free sniffer-like software that I 
> tested capture exactly the same situation.
> 
> 	Has anybody seen a situation like that ? How this can 
> happen ? It can be a misconfiguration of the switch ?
> 
> 	I'm using ethereal in Win2K with winpcap 2.3 but I also 
> try to donwgrade winpcap to a stable version version and the 
> problem is still there.
> 
> Alberto Ferrari
> alberto.ferrari@xxxxxxxxxxxxxxxxx
> 
> 
> Tracking #: D866C3C5C795BB41B48710A1B96940830826A29A
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx 
> http://www.ethereal.com/mailman/listinfo/ether> eal-users
> 


-----------------------------------------------------------------------


Registered Office:
Marks & Spencer p.l.c
Michael House, Baker Street,
London, W1U 8EP
Registered No. 214436 in England and Wales.

Telephone (020) 7935 4422 
Facsimile (020) 7487 2670

www.marksandspencer.com

Please note that electronic mail may be monitored.

This e-mail is confidential. If you received it by mistake, please let us know and then delete it from your system; you should not copy, disclose, or distribute its contents to anyone nor act in reliance on this e-mail, as this is prohibited and may be unlawful.

The registered office of Marks and Spencer Financial Services PLC, Marks and Spencer Unit Trust Management Limited, Marks and Spencer Life Assurance Limited and Marks and Spencer Savings and Investments Limited is Kings Meadow, Chester, CH99 9FB.