Re: [tcptrace] Hardware duplicate?

From: Raffaele Bruno (raffaele.bruno@guest.cnuce.cnr.it)
Date: 05/27/02


Date: Mon, 27 May 2002 08:45:26 +0200
From: Raffaele Bruno <raffaele.bruno@guest.cnuce.cnr.it>
Subject: Re: [tcptrace] Hardware duplicate?
Message-id: <3CF1D607.1F826A2C@guest.cnuce.cnr.it>


Matt Muggeridge wrote:

> This occurs when tcptrace sees exactly the same packet more than once.
>
> My configuration was using a switched LAN, which normally bridges each port.
> So to run an indpendent sniffer requires port mirroring.

Thank you Matt for your answer. Now it is clear when a hardware duplicate
happens, but its not clear to me why it happens in my tests.

I am not considering a switched LAN, but a Wireless LAN operating in the ad hoc
mode. In my network there are 4 nodes, say A, B, C, D. I establish one TCP
connection between A and B and a second TCP connection between C and D. Via
tcpdump (without filtering anything) I capture all the TCP packets that arrives
to the network interface of each nodes.

In this configuration I have not mirroring, hence the reason why I receive two
identical packets is very confusing. Have you any idea?

Raffaele

----------------------------------------------------------------------------
To unsubscribe, send a message with body containing "unsubscribe tcptrace" to
majordomo@tcptrace.org.



This archive was generated by hypermail 2b30 : 05/27/02 EDT