Duplicate pings

There's a W2K3 host on the network that occasionally (but frequently)
shows up as a dup...

[root@cerberus ~]# ping 10.0.0.2
PING 10.0.0.2 (10.0.0.2) 56(84) bytes of data.
64 bytes from 10.0.0.2: icmp_seq=0 ttl=128 time=0.140 ms
64 bytes from 10.0.0.2: icmp_seq=0 ttl=128 time=34.6 ms (DUP!)
64 bytes from 10.0.0.2: icmp_seq=1 ttl=128 time=0.108 ms
64 bytes from 10.0.0.2: icmp_seq=1 ttl=128 time=48.2 ms (DUP!)
64 bytes from 10.0.0.2: icmp_seq=2 ttl=128 time=0.103 ms
64 bytes from 10.0.0.2: icmp_seq=2 ttl=128 time=62.1 ms (DUP!)
64 bytes from 10.0.0.2: icmp_seq=3 ttl=128 time=0.106 ms
64 bytes from 10.0.0.2: icmp_seq=3 ttl=128 time=33.7 ms (DUP!)
64 bytes from 10.0.0.2: icmp_seq=4 ttl=128 time=0.118 ms
64 bytes from 10.0.0.2: icmp_seq=4 ttl=128 time=206 ms (DUP!)

There's only one ARP entry for that IP:

[root@cerberus ~]# arp -a
morpheus (10.0.0.2) at 00:15:C5:E5:FB:E2 [ether] on eth0

I logged on to that host to make sure that there wasn't more than one
interface (physical or logical) configured with that address.
Unfortunately, it's connected to one of those dumbass Dell 2724s, and no
username/password I have works, so I can't attack the switch angle until
I can reconfigure it, or find someone who remembers the correct login.
Any other ideas to try to figure this out?

--
* John Oliver http://www.john-oliver.net/ *

John Oliver <(E-Mail Removed)> wrote:

> Any other ideas to try to figure this out?

What does traceroute say? Is there more than one router on your network?
Does one of the computers have more than one network interface? Are
there any wireless devices on the network? Could you eliminate the
switch by using a crossover cable for the purposes of testing? What sort
of networking topology do you have?

An initial guess for a multiple router network is that there is more
than one gateway at some point on the network, and no default gateway is
configured, and ICMP route discovery messages are being dropped or ignored at
some point on the network, or maybe there is a connection break or
unexpected connection between two of the routers. You haven't got cable
crossing the ports of the switch have you?

Mark.

--
Mark Hobley,
393 Quinton Road West,
Quinton, BIRMINGHAM.
B32 1QE.