Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Duplicate packets from VMware host

Hello,

I'm having an issue where I see duplicate packets sent from a virtual machine. The VMware workstation is running Linux with the network adapter in "Bridged: Connected directly to the physical network" mode. Additionally, the "Replicate physical network connection state" option is checked.

I have Wireshark running on my host machine running Windows 10. When I send ICMP messages from the virtual machine to another device connected to the local network, I see 2 instances of the same ICMP message being sent in Wireshark (that is running on the host machine). When I delve further into these two ICMP requests, I see that one of them has a response frame while the other does not. Am I correct in thinking that this is because I have a bridged connection between the host machine and the virtual machine? Is this expected behavior? Is there anything I can do to not sent duplicate packets? I am only using ICMP to demonstrate the issue. I am trying to setup a three-way handshake between a client and server using scapy, but the duplicate messages are messing up the response I'm expecting from the server (immediate RSTs are sent from the client).

I also have Wireshark running on the virtual machine with Linux. I do not see any duplicate packets on the machine. This makes me believe that this is expected behavior.

Please let me know if you would like any screenshots or further information. I would be happy to oblige.

BR