Hi, I am trying to view a .pcap file in wireshark which has duplicate packets. Wireshark is not showing that packet only once. However when I read that packet via a JNetPcap library in Java or via notepad++ I see duplicate packet. One of mu colleague's wire shark has older version and his wireshark is showing the original and duplicate packets both. Seems like any setting in my wireshark is ignoring the duplicate packet. Could any one help me view the duplicate packets also(including the original packet). asked 08 Mar '16, 10:55  fixmessenger |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
I think we'll only be able to help if you post the capture in a public space, e.g. Google Drive, Dropbox, etc. and edit your question with a link to it.