What could DUP mean when using ping?


DUP means duplicate packet.

From man ping:

Duplicate and Damaged Packets

ping will report duplicate and damaged packets. Duplicate packets should never occur, and seem to be caused by inappropriate link-level retransmissions. Duplicates may occur in many situations and are rarely (if ever) a good sign, although the presence of low levels of duplicates may not always be cause for alarm.

Damaged packets are obviously serious cause for alarm and often indicate broken hardware somewhere in the ping packet's path (in the network or in the hosts).

There are different reasons for this, did you capture your network traffic with an interface in promiscous mode? Sometimes this is the reason for dupplicated packets.

  • I have an interface in promiscous mode. I receiev DUP packets in ping. So what's happening in this case?. I have a raw socket program that sends the received packets to the tun/tap interface. Ping is done through tap interface which will be sent via raw socket through the interface that is in promiscous mode. If that interface is not in promiscous mode I am unable to receive ping reply. – Ramana Reddy Jun 20 '17 at 12:44

It means the reply packet is a duplicate. ICMP responses contain a sequence number. Sometimes you'll actually get more than one reply with the same sequence number. This is usually caused by faulty networks. Wireless networks often rely on re-sending packets if they don't get proper verification, and if the first one actually worked, the re-send will be a duplicate. In normal usage duplicates are discarded. In ping replies they are noted because they tell you something about how the network is functioning. For example, if you are getting 100% duplicates some fault detection mechanism is likely broken.


Check out if couple machines aren't using same IP. It was my case for that message.

I run into this when I cloned a vm machine and run both at the same time. Network configuration was in a bridge mode and IP linked to mac. So when second machine start using network I experienced problems with ssh:

write: Connection reset by peer
ssh: connect to host port 22: Connection refused
ssh_exchange_identification: read: Connection reset by peer

And the ping error when ping.


You have the same MAC addresses on the MAC table, you should watch your ARP tables on all of your GNU/Linux machines to do the following tasks:

  1. ifconfig | grep "ether".
  2. Copy and paste all of MAC addresses that you have seen.
  3. In, Notepad check that duplicate MAC addresses exist or not. If duplicates exist, make them unique.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.