it is easier to read than if you would have just pasted the text on here. I meant that I like your log.7z much better. i have installed wireshark 1.0.7, i have installed winpcap 4.0.2. there is no wireshark or winpcap-folder and no icons in my final build sorry, i mean the error, that i can't post my logfile.
If you don’t need it for smething else then it is safe to disable.Ģ) You can drop re-routed packets in WinpkFilter application.ģ) WinpkFilter has some filter flags to prevent loopback packet indications which are normally used in promiscuous mode. IP routing feature is required only for the Internet Gateway sample and it is enabled only if you install this sample. And thus there are several ways to fix it.ġ) You can disable IP routing feature on the host by going to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters registry key and changing IPEnableRouter from 1 to 0. Without going deep into details this behaviour is caused by single interface IP routing combined with loopback packet indications (required by Winpcap to collect packets). If you look at those packets closer then you will notice that TTL for each fllowed duplicated packet is decremented.