What other packet capture utilities did you test with?
Ethereal itself does not capture packets at all and does not have the
ability to capture packets.
What can capture packets (and i assume you are on a windows host since you
get this issue)
on a windows host is the WinPcap dll from :
http://winpcap.polito.it/default.htm
Please test if the same thing occurs when you capture using other tools
other than ethereal
such as Analyzer and WinDump also available from the pcap guys :
http://netgroup-serv.polito.it/netgroup/tools.html
I bet that you will see the same issue.
Are you using BlackIce?
If so, BlackIce or WinPCap, or the combination of both are broken under
some circumstances and will
duplicate all incoming or outgoing packets exactly in the way you observe.
I would advice to contact the vendor of BlackIce to see if they can fix that
bug or that bad interaction their product has with WinPCap.
----- Original Message -----
From: "Chau Dang"
Sent: Tuesday, April 06, 2004 7:51 AM
Subject: [Ethereal-users] Duplicate packets captured in local machine.
> Hi,
>
> I got a little annoying problem. When I run Ethereal on my PC, it
captures
> packets sent from the PC duplicatedly with different time stamp. And I
know
> that this is Ethereal problem because I used other packet capture
utilities
> and that problem does not show up.
>
> Attached is the capture file, and you can open it with Ethereal (file
type:
> libpcap)
> The IP address on my machine is: 192.168.11.188
>
>
> Is there any way to disable/work around for the problem?
>
> Thanks,
> cdang
>
----------------------------------------------------------------------------
----
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>