Ethereal-users: Re: [Ethereal-users] Things Happening In The Same Timestamp

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Andrew Hood <ajhood@xxxxxxxxx>
Date: Wed, 07 Jun 2006 12:06:39 +1000
Becky Vict wrote:
> Hello ethereal community.
> 
> I need help in explaining the capture I get. I'm downloading a file from
> an FTP server and I'm noticing a weird thing which is - in the exact
> same timestamp I get data packet transmission from server and a dupack
> from client. In another instance, out-of-order from server is followed
> by dupack from client also in the same timestamp.  And another instance
> which is even worse, TCP segment lost is followed by dupack and then
> retransmission all happening in the same timestamp
> (server-client-server). Even TCP window update comes in two, coming
> twice from client in the same timestamp (is this duplicated packet?)
> 
> How is this possible? Is there something wrong?
> 
> I'm using ethereal V 0.10.13 and winpcap 3.1.
> OS is XP Pro SP 1 both client and server.
> 
> I hope I have given a clear picture of my problem.
> 
> Thank you in advance.

This was discussed at length some time back. It might help if you said
what hardware you are using.

You are almost certainly seeing an interaction between parts of the
network stack causing packets to go past the point where winpcap
collects them twice.

Check you have the latest version of the driver for your network card.
That fixed it for me. (ThinkPad T40, Intel PRO/1000 MT)

It may also be caused by Windows firewall/connection sharing. Fiddling
wiht that fixed it for some others.

-- 
There's no point in being grown up if you can't be childish sometimes.
                -- Dr. Who
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users