RE: MicroSoft amplification?

The DUP packets resemble WLBS (Windows Load Balancing Service) in action.
What platform did you ping it from? A unix host? Windows ping command does
not show the extra icmp responses.

Just a thought.