Hello everyone !
Has anybody experienced this before ?
With kernel (2.6) compiled with PF_RING AND libpcap with pf_ring enabled i 
capture twice every packet...
Here is an example of tcpdump output...

08:25:30.890591 IP XX > XX ack 113 win 1002 <nop,nop,timestamp 3478119[|tcp]>
08:25:30.890591 IP XX > XX ack 113 win 1002 <nop,nop,timestamp 3478119[|tcp]>
08:25:30.892572 IP XX > XX ack 273 win 1002 <nop,nop,timestamp 3478120[|tcp]>
08:25:30.892572 IP XX > XX ack 273 win 1002 <nop,nop,timestamp 3478120[|tcp]>
08:25:30.892637 IP XX > XX ack 417 win 1002 <nop,nop,timestamp 3478120[|tcp]>
08:25:30.892637 IP XX > XX ack 417 win 1002 <nop,nop,timestamp 3478120[|tcp]>
08:25:30.892705 IP XX > XX ack 561 win 1002 <nop,nop,timestamp 3478120[|tcp]>
08:25:30.892705 IP XX > XX ack 561 win 1002 <nop,nop,timestamp 3478120[|tcp]>
08:25:30.892792 IP XX > XX ack 705 win 1002 <nop,nop,timestamp 3478120[|tcp]>
08:25:30.892792 IP XX > XX ack 705 win 1002 <nop,nop,timestamp 3478120[|tcp]>

This thing happens with every application that uses libpcap ... 
any  ideas ?

                
---------------------------------
 Χρησιμοποιείτε Yahoo!
 Βαρεθήκατε τα ενοχλητικά μηνύ ματα (spam); Το Yahoo! Mail διαθέτει την 
καλύτερη δυνατή προστασία κατά των ενοχλητικών μηνυμάτων 
 http://login.yahoo.com/config/mail?.intl=gr 
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Reply via email to