why outbound packets logged twice on vEthernet
I'm using WSL on Windows and found that almost every packet sent from Windows to WSL is retransmitted
I captured the data on the host side,which is windows
Perhaps, as the vEthernet device is, in effect, a local loopback/wraparound device, any time a packet is transmitted on the adapter, it's then received by the "other side" of the adapter, and NDIS sees both packets and delivers both of them to the WinPcap or Npcap driver, so you get two copies.
If you're using Npcap (which is what current versions of Wireshark installs) rather than WinPcap (which hasn't been the default in a while), you might want to report this on the Npcap issue list, as the Npcap developers have more resources and time to look at this, and more familiarity with the Npcap code.
Asked: 2024-07-15 10:12:43 +0000
Seen: 71 times
Last updated: Jul 16
Did you do this capture with a Windows application (such as the Windows version of Wireshark), or did you do it with a Linux application (such as the "neither Windows nor macOS" version of Wireshark)?
hello harris,I captured the data on the host side,which is windows