Yes, I have observed this, but not only in Wireshark, but also directly in the NAM module decoder.
But I think sometimes is normal (e.g. same packet as it's travelling through different VLANs). If you look at the lines, looks exactly the same, but if you do a deeper investigation, you'll find something different.
This was in my case.
You are looking at the exact sam file / portion of the file in the wireshark and NAM decoder and it looks different?
Re: NAM captures imported into Wireshark(duplication)
You are right Calin, duplicate packets have also been seen in the NAM decoder. This thing really makes troubleshooting difficult. I am really wondering whether this is a problem/ bug with NAM image(3.6(1b)) or a problem with RSPAN/SPAN. Calin which NAM image version you are using ?
Instead of using NAM when we plug in a PC for capturing using same SPAN I find no duplication in that, so i think this has something to do with NAM or SPAN when it spans the data to switch backplane and then to NAM data ports.
Would appreciate if anyone shares their observations.
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...