I found the answer (don't remember where, probably in the winpcap
mailing list archive). My laptop had a Cisco VPN adapter (similar to
your Nortel VPN). Had to disable "Deterministic Network Enhancer" in the
Properties dialog of the network interface.
Thanks,
Hari
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Ian Schorr
Sent: Tuesday, July 20, 2004 11:28 AM
To: Ethereal user support
Subject: Re: [Ethereal-users] Duplicate packets displayed on win2000
I used to have problems like this when using certain device drivers that
would "attach" at various points to NIC drivers or other points in the
stack.
For example, using Virtual PC's virtual networking drivers, Nortel's
Contivity VPN software, and others would produce this behavior for me.
Depending on the software and platform, software like this would cause
problems for me in Ethereal/winpcap, Sniffer Pro, NI Observer, Netmon,
and others.
I'd look for something like this installed and see if there are known
issues with the product that might be resolved with an update, or if
it's something that you can remove. If you're running Ethereal 0.9.11
I'm assuming that you're also running a somewhat older version of
Winpcap. I have NO idea if there have been any changes to Winpcap that
have avoided/worked around these kind of situations, but you might
consider trying a newer version, or bringing up the question with the
Winpcap folks (particularly since if the problem is software-related or
can be fixed/worked around in software, it's almost certainly more
related to Winpcap than to Ethereal)
Otherwise, are you really connected to a hub and not, say, a small
switch? Does the connection to the hub make a difference (i.e. if you
connect to other devices, like switches, you don't have a problem)?
Ian
On Jul 20, 2004, at 1:36 PM, T. Hariharan wrote:
> Hello,
>
> When I capture packets from the ethernet interface connected to a hub,
> I see duplicates of packets sent by the laptop.
> Packets received are ok - only one copy is displayed.
>
> Every once in a while, this problem seems to go away by itself. It
> also comes back.
>
> Details:
> System: Dell Latitude laptop
> OS: Windows 2000
> Adapter: 3Com EtherLink PCI:
> \Device\Packet_{C03E0430-2F79-4150-B947-6285D725DC12}
> Ethereal version: 0.9.11
>
> Thanks for any help,
> Hari
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>
>
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users