Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

In your pcapng file, I see that there are two systems both (trying) to use the IP address 10.29.0.38. The mac-addresses are:

  1. Address: IntelCor_50:4b:b9 (f8:94:c2:50:4b:b9)
  2. Address: SamsungE_cb:39:93 (64:1c:b0:cb:39:93)

You will have to locate this Samsung device and see why it uses an IP address in the DHCP pool.

You can see the duplicate when you filter on arp.src.proto_ipv4 == 10.29.0.38.