Wireshark-users: Re: [Wireshark-users] Gratuitous and duplicate differences

From: Bayu Notonegoro <kotakmilis@xxxxxxxxx>
Date: Fri, 16 Sep 2016 08:03:40 +0700


On Fri, Sep 16, 2016 at 12:58 AM, Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> wrote:
If Wireshark flags an ARP as duplicate-address-detected then that means Wireshark has seen 2 or more hosts saying they have the same IP address (or, more specifically, 2 or more MAC addresses advertising the same IP address) - obviously that's (usually) a bad thing.


Hi Jeff,
Thank you.
Just wondering, what it could be the bad thing? Because I'm also getting a lot of duplicate-address-detected.
TIA,