Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] Sent packets captured twice

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Hansang Bae <hbae@xxxxxxxxxx>
Date: Wed, 25 May 2005 00:48:59 -0400
On 06:55 AM 5/21/2005, Harry J Moyes wrote:
>Attached is the summary printout of a standard Windows ping exchange 
>between a Windows XP client and a Linux server.
>The capture is recorded on the client issuing the ping.
>The apparent doubling of all outgoing packets is the issue.
>I suspect that the issue is related to fire walling on the client, but 
>would appreciate any assistance that the Ethereal team can offer.
>This irritating feature is a fairly recent innovation and affects all our 
>standard build clients. 
>
>No.     Time        Source                Destination           Protocol 
>[snip]
>      4 0.000382    156.71.13.234         156.71.12.4           ICMP Echo 
>(ping) request 
>      5 0.000397    156.71.13.234         156.71.12.4           ICMP Echo 
>(ping) request 
>      6 0.000588    156.71.12.4           156.71.13.234         ICMP Echo 
>(ping) reply 

[snip]

Have you captured from the 12.4 machine to see if you are actually getting duplicates?  Do you have QOS Schedular or a VPN client installed on these machines?

hsb