Comment 10 for bug 1818060

The arping output is suppressed, and we are using a catchall exception to assume somebody has our address.

I'll start by enhancing the output and error handling of that part, for example arping unsuppressed output includes the mac address of the replier directly, so there is no need to explicitly check the arp table for case 2

I'll also increase information gathering, starting with the suggested command for case 1,

If the meantime, I'll try to understand if we can query the forwarding database in the switches we have access to so we can start tracking down the port with the rogue MAC.

Also, for case 2, is something using a proxy arp somewhere ?