Hi folks! I have a strange issue. It seems that the GSM packets which I filter out by I use the following command from command line to capture the traffic:
Any clue why such behavior could occur? Thanks! asked 19 Apr '12, 07:47 Eugene S |
One Answer:
If you are capturing of an interface connected to a monitor/span port of a switch you might get packets written to your trace file twice ingress/egress depending on how you have set up your monitoring. answered 19 Apr '12, 09:23 Anders ♦ |
...or if you capture on the "any" interface of a Linux-based router and the traffic shows up on multiple physical interfaces.
@Anders and @Gerald Combs, thanks a lot for your comments! However I'm still a novice in this area and I'm not sure I understand your answers completely. Could you please provide a bit more details about what causing this behavior and how to solve this problem. Maybe you can provide some links for further reading.. Thanks again!