This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi all. This is my first experience with Wireshark. It seems quite powerful, and I hope it can help me track down my issue.

I have 2 computers that I connect via a standard ethernet cable. They ping each other, and the pings connect solidly over the course of ~45 seconds. Then at that time, they fail to connect, and remain in that state permanently. I have the Wireshark output during all of this. But I don't know how to interpret the entries to troubleshoot the failed connection.

My 2 computers are:

192.168.1.5 - Desktop

192.168.1.6 - Laptop

They are the only 2 devices on my network, besides my iphone (192.168.1.4).

I'm so novice, I don't even know how to best insert Wireshark output into this post :-/ Here is the best I could do (sorry, no color coding--I'd love to learn how though). The first 2 entries are the last successful ping request/reply pair (I have omitted the previous). Then there are a bunch of entries that are unknown to me. Then the 3rd to last entry contains the first unanswered ping request.

3115    533.729890000   192.168.1.5 192.168.1.6 ICMP    74  Echo (ping) request  id=0x0001, seq=540/7170, ttl=128 (reply in 3116)

3116    533.730324000   192.168.1.6 192.168.1.5 ICMP    74  Echo (ping) reply    id=0x0001, seq=540/7170, ttl=128 (request in 3115)

3117    533.731652000   D-LinkIn_47:57:3c   Broadcast   ARP 42  Who has 192.168.1.1?  Tell 192.168.1.5 (duplicate use of 192.168.1.5 detected!)

3118    533.849742000   fe80::6406:d055:d00f:b955   ff02::16    ICMPv6  90  Multicast Listener Report Message v2

3119    533.873497000   fe80::6406:d055:d00f:b955   ff02::16    ICMPv6  90  Multicast Listener Report Message v2

3120    533.875137000   fe80::6406:d055:d00f:b955   ff02::16    ICMPv6  90  Multicast Listener Report Message v2

3121    533.891959000   fe80::6406:d055:d00f:b955   ff02::16    ICMPv6  90  Multicast Listener Report Message v2

3122    533.894931000   fe80::6406:d055:d00f:b955   ff02::1:3   LLMNR   84  Standard query 0x494c  A wpad

3123    533.896001000   fe80::6406:d055:d00f:b955   ff02::1:3   LLMNR   92  Standard query 0x3b26  ANY dragonblight

3124    533.905965000   fe80::6406:d055:d00f:b955   ff02::c UDP 1054    Source port: 61731  Destination port: 3702

3125    533.994791000   fe80::6406:d055:d00f:b955   ff02::1:3   LLMNR   84  Standard query 0x494c  A wpad

3126    533.995849000   fe80::6406:d055:d00f:b955   ff02::1:3   LLMNR   92  Standard query 0x3b26  ANY dragonblight

3127    534.096998000   fe80::6406:d055:d00f:b955   ff02::c UDP 1054    Source port: 61731  Destination port: 3702

3128    534.111754000   fe80::6406:d055:d00f:b955   ff02::c SSDP    179 M-SEARCH * HTTP/1.1

3129    534.139202000   fe80::6406:d055:d00f:b955   ff02::c SSDP    181 M-SEARCH * HTTP/1.1

3130    534.254803000   D-LinkIn_47:57:3c   Broadcast   ARP 42  Who has 192.168.1.1?  Tell 192.168.1.5 (duplicate use of 192.168.1.5 detected!)

3131    534.273732000   fe80::6406:d055:d00f:b955   ff02::16    ICMPv6  90  Multicast Listener Report Message v2

3132    534.730984000   192.168.1.5 192.168.1.6 ICMP    74  Echo (ping) request  id=0x0001, seq=541/7426, ttl=128 (no response found!)

3133    535.254859000   D-LinkIn_47:57:3c   Broadcast   ARP 42  Who has 192.168.1.1?  Tell 192.168.1.5 (duplicate use of 192.168.1.5 detected!)

3134    535.895965000   fe80::6406:d055:d00f:b955   ff02::16    ICMPv6  90  Multicast Listener Report Message v2

asked 17 Aug '15, 15:46

cag8f's gravatar image

cag8f
6114
accept rate: 0%


You have 2 devices assigned the same IPv4 address of 192.168.1.5. See packet 3117: "duplicate use of 192.168.1.5 detected!"

This may be caused by a network element assigned a static IP address of 192.168.1.5. I assume you are using a wireless router with LAN ports. If you have access to the router, look at the associated clients before connecting your desktop to the router

permanent link

answered 17 Aug '15, 19:15

Amato_C's gravatar image

Amato_C
1.1k142032
accept rate: 14%

Thanks for the reply. I saw that duplicate IP address notification. But I managed to resolve this particular issue. I set a static IP for each machine, then connected them directly via ethernet. Pings to each other connected without issue, indefinitely.

This is all however, in an attempt to troubleshoot a more overarching issue I'm having with my 2 computers. I will create a new post for that.

Thanks again.

edit: I should note that there were no other devices (that I know of) connected to this router. It is my personal router at home.

(17 Aug '15, 23:13) cag8f
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×43

question asked: 17 Aug '15, 15:46

question was seen: 2,945 times

last updated: 20 Dec '15, 00:47

p​o​w​e​r​e​d by O​S​Q​A