Ethereal-users: Re: [Ethereal-users] Displaying duplicates of all outbound packets
On Thu, May 08, 2003 at 11:24:13AM -0400, MCONNOR@xxxxxxxxxxxxxx wrote:
> Hi. After I end my capture and display the packets, ethereal shows two of
> every outbound packet that I send and correctly only one of every inbound
> packet. Why am I seeing duplicates?
I suspect none of us can give a definite answer to your question, as you
haven't said what version of what OS you're using, or what version of
libpcap you're using. The problem is probably somewhere in the
underlying packet capture mechanism libpcap is using, if this is UNIX,
or in the WinPcap driver and/or the NDIS mechanism and/or the driver, if
this is Windows.
If you're using WinPcap 0.9.11 or later, the "tethereal -v" or "ethereal
-v" commands, or the "About Ethereal" item under the Help menu in
Ethereal, should give you most if not all of that information, including
the OS version, although on Windows it can't give you the WinPcap
version. With earlier versions of Ethereal, you'd have to get the OS
version information yourself.
