This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I was trying to capture the packet of RTP flow, but for every packet, i captured it twice, so the analyst in wireshark say "Suspected duplicate(MAC address) only delta time calculated". But when i captured it in another laptop, this problem is gone. I tried to read the source code of wireshark and found this code

else if (statinfo->flags & STAT_FLAG_DUP_PKT) {
    g_snprintf(status, sizeof(status), "Suspected duplicate(MAC address) only delta time calculated");

I still don't have any clue what is this about. Can anyone tell me? Thanks.

Regards

muyu

asked 23 Apr '14, 00:28

muyu's gravatar image

muyu
1112
accept rate: 0%

edited 23 Apr '14, 01:13


i captured it twice, so the analyst in wireshark say

You should stop capturing the frames twice, as that's (probably) causing the problem. Something seems to be wrong with your capture setup. As you did not add any information about your setup, it's impossible to give any advice what could have caused this. Please add more details.

Regards
Kurt

permanent link

answered 23 Apr '14, 11:58

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 23 Apr '14, 12:36

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×41

question asked: 23 Apr '14, 00:28

question was seen: 3,580 times

last updated: 23 Apr '14, 12:36

p​o​w​e​r​e​d by O​S​Q​A