Wireshark · Wireshark-users: Re: [Wireshark-users] Gratuitous and duplicate differences

[Bayu Notonegoro <kotakmilis@xxxxxxxxx>]

On Fri, Sep 16, 2016 at 12:58 AM, Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> wrote:

If Wireshark flags an ARP as duplicate-address-detected then that means Wireshark has seen 2 or more hosts saying they have the same IP address (or, more specifically, 2 or more MAC addresses advertising the same IP address) - obviously that's (usually) a bad thing.

Hi Jeff,

Thank you.

Just wondering, what it could be the bad thing? Because I'm also getting a lot of duplicate-address-detected.

TIA,