Why do I see duplicate packets in a capture taken from a ProxySG

book

Article ID: 167569

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

The duplicate entries are the effects of bypassed traffic. It is only true with the assumption of packet capture being done on all interfaces on the ProxySG.

The reasons you are seeing the duplicate entries are because packet comes in from one interface are being bypassed, the proxy does not do anything to alter the packet and it sends out to the other interface.

The packets are being captured once in the incoming interface and another in the outgoing interface hence the identical packets noticed in the packet capture.