Ethereal-users: [Ethereal-users] Repeated outbound frames

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Santos, Fabricio" <fsantos@xxxxxxxxxx>
Date: Tue, 11 Feb 2003 18:25:27 +0100
   Viva a todos,

   I have been using Ethereal in Windows for almost two years now, without any major issues. Currently I'm running:

      ethereal 0.9.9, with GTK+ 1.3.0, with GLib 1.3.2, with libpcap (version unknown), with libz 1.1.4, with Net-SNMP 5.0.6

   Recently I started using a different PC and since then, every time I do a trace, all the frames that are sent from my system show up in triplicate:

  1   0.000000  10.10.10.44  10.10.10.59   ICMP Echo (ping) request
Frame 1 (74 bytes on wire, 74 bytes captured)
    Arrival Time: Feb 11, 2003 17:47:16.959936000
Ethernet II, Src: 00:e0:00:bd:c4:3a, Dst: 00:06:5b:eb:a9:d3
    Destination: 00:06:5b:eb:a9:d3 (00:06:5b:eb:a9:d3)
    Source: 00:e0:00:bd:c4:3a (00:e0:00:bd:c4:3a)
Internet Control Message Protocol
    Sequence number: 8d:01

  2   0.000030  10.10.10.44  10.10.10.59   ICMP Echo (ping) request
Frame 2 (74 bytes on wire, 74 bytes captured)
    Arrival Time: Feb 11, 2003 17:47:16.959966000
Ethernet II, Src: 00:e0:00:bd:c4:3a, Dst: 00:06:5b:eb:a9:d3
    Destination: 00:06:5b:eb:a9:d3 (00:06:5b:eb:a9:d3)
    Source: 00:e0:00:bd:c4:3a (00:e0:00:bd:c4:3a)
Internet Control Message Protocol
    Sequence number: 8d:01

  3   0.000160  10.10.10.44  10.10.10.59   ICMP Echo (ping) request
Frame 3 (74 bytes on wire, 74 bytes captured)
    Arrival Time: Feb 11, 2003 17:47:16.960096000
Ethernet II, Src: 00:e0:00:bd:c4:3a, Dst: 00:06:5b:eb:a9:d3
    Destination: 00:06:5b:eb:a9:d3 (00:06:5b:eb:a9:d3)
    Source: 00:e0:00:bd:c4:3a (00:e0:00:bd:c4:3a)
Internet Control Message Protocol
    Sequence number: 8d:01

   The reply only shows up once:

  4   0.000505  10.10.10.59  10.10.10.44   ICMP Echo (ping) reply
Frame 4 (74 bytes on wire, 74 bytes captured)
    Arrival Time: Feb 11, 2003 17:47:16.960441000
Ethernet II, Src: 00:06:5b:eb:a9:d3, Dst: 00:e0:00:bd:c4:3a
    Destination: 00:e0:00:bd:c4:3a (00:e0:00:bd:c4:3a)
    Source: 00:06:5b:eb:a9:d3 (00:06:5b:eb:a9:d3)
Internet Control Message Protocol
    Sequence number: 8d:01


   Curiously, if a trace is taken also with Ethereal at the other end, one will see just one ping request but two replies show as being sent back:

  1   0.000000  10.10.10.44  10.10.10.59   ICMP Echo (ping) request
Frame 1 (74 bytes on wire, 74 bytes captured)
    Arrival Time: Feb 11, 2003 17:47:16.782721000
Ethernet II, Src: 00:e0:00:bd:c4:3a, Dst: 00:06:5b:eb:a9:d3
    Destination: 00:06:5b:eb:a9:d3 (00:06:5b:eb:a9:d3)
    Source: 00:e0:00:bd:c4:3a (00:e0:00:bd:c4:3a)
Internet Control Message Protocol
    Sequence number: 8d:01

  2   0.000030  10.10.10.59  10.10.10.44   ICMP Echo (ping) reply
Frame 2 (74 bytes on wire, 74 bytes captured)
    Arrival Time: Feb 11, 2003 17:47:16.782751000
Ethernet II, Src: 00:06:5b:eb:a9:d3, Dst: 00:e0:00:bd:c4:3a
    Destination: 00:e0:00:bd:c4:3a (00:e0:00:bd:c4:3a)
    Source: 00:06:5b:eb:a9:d3 (00:06:5b:eb:a9:d3)
Internet Control Message Protocol
    Sequence number: 8d:01

  3   0.000074  10.10.10.59  10.10.10.44   ICMP Echo (ping) reply
Frame 3 (74 bytes on wire, 74 bytes captured)
    Arrival Time: Feb 11, 2003 17:47:16.782795000
Ethernet II, Src: 00:06:5b:eb:a9:d3, Dst: 00:e0:00:bd:c4:3a
    Destination: 00:e0:00:bd:c4:3a (00:e0:00:bd:c4:3a)
    Source: 00:06:5b:eb:a9:d3 (00:06:5b:eb:a9:d3)
Internet Control Message Protocol
    Sequence number: 8d:01

   The only think I can relate to this is that my PC has three different network Interfaces. And the other PC has two networking interfaces. But all repeated frames show up with the same MAC address but at different timestamps.

   Is there a bug for this issue? If so, is there a workaround for it?

   Thanks in advance for your help.

   -fs