 | 1 | initial version |
This has to do with the way the capture is made. Probably the monitor port used is setup to capture all ingress and egress packets from the network element (switch, FW, whatever). So packets traversing this network element do show up twice, once on ingress, once on egress. Either tune the monitor port, or use the command line tools, or editcap -d to be specific, to remove the duplicates from this capture.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
