Why do I see duplicate packets in a capture taken from a ProxySG
Updated On:13-05-2017 10:36
ProxySG Software - SGOS
The duplicate entries are the effects of bypassed traffic. It is only true with the assumption of packet capture being done on all interfaces on the ProxySG.
The reasons you are seeing the duplicate entries are because packet comes in from one interface are being bypassed, the proxy does not do anything to alter the packet and it sends out to the other interface.
The packets are being captured once in the incoming interface and another in the outgoing interface hence the identical packets noticed in the packet capture.