Hello all,
Curious if anyone had seen this issue. I was running a diagnostic ping to one IPaddr (192.168.1.30) in a VLAN. I am getting dups in the response. There is only one 192.168.1.30 in the VLAN.
Any reason why?
PING 192.168.1.30 (192.168.1.30): 1 data bytes
9 bytes from 192.168.1.30: seq=0 ttl=128
9 bytes from 192.168.1.30: seq=0 ttl=128 (DUP!)
9 bytes from 192.168.1.30: seq=1 ttl=128
9 bytes from 192.168.1.30: seq=1 ttl=128 (DUP!)
9 bytes from 192.168.1.30: seq=2 ttl=128
9 bytes from 192.168.1.30: seq=2 ttl=128 (DUP!)
9 bytes from 192.168.1.30: seq=3 ttl=128
--- 192.168.1.30 ping statistics ---
4 packets transmitted, 4 packets received, 3 duplicates, 0% packet loss
I'm running 18.5 MR 1 - Thanks!
Hi SHtan,
Thank you for reaching out to Sophos Community.
Is this across VLAN communication?
Please check ARP entry for 192.168.1.30 on inline devices.
I'd also suggest to take packet capture file on XG and compare source/destination MAC address of ICMP request & reply packets with DUP packet.
Sophos Firewall: Create and download a packet capture
Do you have a randomized MAC address enabled on the end machine?
Thanks Yash - This is within the same VLAN.
I’ll run an arp check when I get in.