A <5K pcap file might contain the information to understand this. The
attached >95K snapshot is worthless, provides less useful information
than the <1K e-mail you wrote.
On Fri, Apr 25, 2008 at 2:01 PM, Brian Biales <BBIALES@xxxxxxxxxxxxxxx> wrote:
> I was using Wireshark to view the SMTP traffic on my Windows SMTP
> server. What I found was very odd... Each packet my server was sending
> appears to be sent twice!
>
> Is this for real? Or a Wireshark fluke? Anybody seen such a thing?
> Any explanations would be greatly appreciated!
>
> My local machine in the trace is 192.168.1.9. All the packets out to
> the internet appear to be sent twice. And the time between them is
> very, very small... The identical packet seems to go out immediately.
> I can attach the trace file itself if it would be useful (it is 250k or
> so...)
>
> I am using Wireshark 1.0.0 install on this Windows 2k server SP4 with
> all updates applied...
>
> Brian
>
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-users
>
>
--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan