When I saw Failed to recv data from socket. from my VNC client and Network error: Software caused connection abort I immediately ran an arp scan to check for duplicate IP's:
[root@mbpc-pc ~]# arp-scan -I bond0 -l
Interface: bond0, datalink type: EN10MB (Ethernet)
Starting arp-scan 1.9 with 512 hosts (http://www.nta-monitor.com/tools/arp-scan/)
192.168.0.1 40:16:7e:a2:62:12 (Unknown)
192.168.0.2 78:24:af:e6:d9:78 (Unknown)
192.168.0.8 54:e6:fc:fb:ab:06 TP-LINK TECHNOLOGIES CO., LTD.
192.168.0.9 10:fe:ed:7f:22:80 TP-LINK TECHNOLOGIES CO., LTD.
192.168.0.13 dc:3a:5e:1e:0a:18 Roku, Inc
192.168.0.19 14:da:e9:19:95:b5 ASUSTek COMPUTER INC.
192.168.0.21 00:21:cc:cc:64:f4 Flextronics International
192.168.0.10 18:ee:69:00:7d:49 (Unknown)
192.168.0.23 00:23:cd:bc:6e:22 TP-LINK TECHNOLOGIES CO., LTD.
192.168.0.150 00:0c:29:8e:3e:86 VMware, Inc.
192.168.0.152 00:14:5e:d1:20:60 IBM Corp
192.168.0.153 00:14:5e:d1:20:60 IBM Corp
192.168.0.154 00:11:25:c0:a0:75 IBM Corp
To my surprise this didn't reveal anything at all. Sometime later after suffering with the disconnects, I fired up wireshark to see these messages:
60 Client pointer even
60 Who has 192.168.0.14? Tell 192.168.0.19 (duplicate use of 192.168.0.19)
Digging deaper into the issue and the details revealed our WII Nintendo DS gaming system was turned on which used the same IP as my laptop. The detailed message was:
Duplicate IP address detected for 192.168.0.19
With the sender MAC address showing:
Sender MAC address: Nintendo_f1
This image shows the details:
The interesting bit was the disconnects were only intermittent. Change IP on the laptop / workstation to something else and all is good with no more disconnects. This happened when we were cleaning out the armoir and rearranging things.