Wireshark-users: Re: [Wireshark-users] Duplicate Packets when importing .pcap from Cisco NAM modu

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Joerg Mayer <jmayer@xxxxxxxxx>
Date: Tue, 10 Aug 2010 10:04:37 +0200
On Mon, Aug 09, 2010 at 09:01:55PM +0400, Akhtar Rasool wrote:
> I am seeing duplicate packets when importing packet captures from Cisco NAM
> module into Wireshark. Would appreciate any ideas to avoid that. Thanks.

1) Learn how to avoid capturing packets twice
as you can't do that with an existing trace:
2) use editcap -d (and optionally -D #) to remove duplicates

ciao
   Joerg
-- 
Joerg Mayer                                           <jmayer@xxxxxxxxx>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.