This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Ping dropping-how to troubleshoot with Wireshark?

0

Hi all. This is my first experience with Wireshark. It seems quite powerful, and I hope it can help me track down my issue.

I have 2 computers that I connect via a standard ethernet cable. They ping each other, and the pings connect solidly over the course of ~45 seconds. Then at that time, they fail to connect, and remain in that state permanently. I have the Wireshark output during all of this. But I don't know how to interpret the entries to troubleshoot the failed connection.

My 2 computers are:

192.168.1.5 - Desktop

192.168.1.6 - Laptop

They are the only 2 devices on my network, besides my iphone (192.168.1.4).

I'm so novice, I don't even know how to best insert Wireshark output into this post :-/ Here is the best I could do (sorry, no color coding--I'd love to learn how though). The first 2 entries are the last successful ping request/reply pair (I have omitted the previous). Then there are a bunch of entries that are unknown to me. Then the 3rd to last entry contains the first unanswered ping request.

3115    533.729890000   192.168.1.5 192.168.1.6 ICMP    74  Echo (ping) request  id=0x0001, seq=540/7170, ttl=128 (reply in 3116)

3116 533.730324000 192.168.1.6 192.168.1.5 ICMP 74 Echo (ping) reply id=0x0001, seq=540/7170, ttl=128 (request in 3115)

3117 533.731652000 D-LinkIn_47:57:3c Broadcast ARP 42 Who has 192.168.1.1? Tell 192.168.1.5 (duplicate use of 192.168.1.5 detected!)

3118 533.849742000 fe80::6406:d055:d00f:b955 ff02::16 ICMPv6 90 Multicast Listener Report Message v2

3119 533.873497000 fe80::6406:d055:d00f:b955 ff02::16 ICMPv6 90 Multicast Listener Report Message v2

3120 533.875137000 fe80::6406:d055:d00f:b955 ff02::16 ICMPv6 90 Multicast Listener Report Message v2

3121 533.891959000 fe80::6406:d055:d00f:b955 ff02::16 ICMPv6 90 Multicast Listener Report Message v2

3122 533.894931000 fe80::6406:d055:d00f:b955 ff02::1:3 LLMNR 84 Standard query 0x494c A wpad

3123 533.896001000 fe80::6406:d055:d00f:b955 ff02::1:3 LLMNR 92 Standard query 0x3b26 ANY dragonblight

3124 533.905965000 fe80::6406:d055:d00f:b955 ff02::c UDP 1054 Source port: 61731 Destination port: 3702

3125 533.994791000 fe80::6406:d055:d00f:b955 ff02::1:3 LLMNR 84 Standard query 0x494c A wpad

3126 533.995849000 fe80::6406:d055:d00f:b955 ff02::1:3 LLMNR 92 Standard query 0x3b26 ANY dragonblight

3127 534.096998000 fe80::6406:d055:d00f:b955 ff02::c UDP 1054 Source port: 61731 Destination port: 3702

3128 534.111754000 fe80::6406:d055:d00f:b955 ff02::c SSDP 179 M-SEARCH * HTTP/1.1

3129 534.139202000 fe80::6406:d055:d00f:b955 ff02::c SSDP 181 M-SEARCH * HTTP/1.1

3130 534.254803000 D-LinkIn_47:57:3c Broadcast ARP 42 Who has 192.168.1.1? Tell 192.168.1.5 (duplicate use of 192.168.1.5 detected!)

3131 534.273732000 fe80::6406:d055:d00f:b955 ff02::16 ICMPv6 90 Multicast Listener Report Message v2

3132 534.730984000 192.168.1.5 192.168.1.6 ICMP 74 Echo (ping) request id=0x0001, seq=541/7426, ttl=128 (no response found!)

3133 535.254859000 D-LinkIn_47:57:3c Broadcast ARP 42 Who has 192.168.1.1? Tell 192.168.1.5 (duplicate use of 192.168.1.5 detected!)

3134 535.895965000 fe80::6406:d055:d00f:b955 ff02::16 ICMPv6 90 Multicast Listener Report Message v2

asked 17 Aug ‘15, 15:46

cag8f's gravatar image

cag8f
6114
accept rate: 0%


One Answer:

1

You have 2 devices assigned the same IPv4 address of 192.168.1.5. See packet 3117: "duplicate use of 192.168.1.5 detected!"

This may be caused by a network element assigned a static IP address of 192.168.1.5. I assume you are using a wireless router with LAN ports. If you have access to the router, look at the associated clients before connecting your desktop to the router

answered 17 Aug '15, 19:15

Amato_C's gravatar image

Amato_C
1.1k142032
accept rate: 14%

Thanks for the reply. I saw that duplicate IP address notification. But I managed to resolve this particular issue. I set a static IP for each machine, then connected them directly via ethernet. Pings to each other connected without issue, indefinitely.

This is all however, in an attempt to troubleshoot a more overarching issue I'm having with my 2 computers. I will create a new post for that.

Thanks again.

edit: I should note that there were no other devices (that I know of) connected to this router. It is my personal router at home.

(17 Aug '15, 23:13) cag8f