before cross validate the duplicate IP with PCAP