[email protected] said: > I don't know how to read the damned output. I have barely > any idea what those columns mean. I can't tell descending > from ascending from middle-outwards!
It's what you want if you are trying to figure out who is using your server. A couple of examples from a handy server. lstint avgint rstr r m v count rport remote address =================================================== 489277 20422 180 . 3 4 74 123 dhcp-103 492043 13366 180 . 3 4 125 123 dhcp-102 1210927 33 180 . 4 4 31564 123 tim The count column is the total packets. I think it includes both replies from servers as well as requests from servers in case you have too systems looking at each other. I don't think it includes ntpq queries. The first/lstint column is the time since the last packet. The second/avgint column is the average time between requests. The rstr column is the restriction bits that apply to that IP Address. The m and v columns are the mode and version from the last packet. The above shows 2 clients and 1 server. The rport is the remote/source port from the last packet. The remote address should be obvious. Yes, the server has been up a while, and 5 days ago I was playing with a couple of new systems. --------- The mru section will take forever on any busy server. I think the default memory limit matches the old 600 slot default. It will probably screwup a nice clean API, but if you want to display the most recent slots, you can do something like: read the whole collection. They come back sorted by lstint - most recent last. remember the IP Addresses of several slots just below the ones you print. Next time, rather than read the whole thing, start with the IP Addresses you saved. display the new data and update the saved IP Addresses... If you want to play, you can add keyboard commands to fiddle the sort order. Oldest first should be easy. Just read as many as fit. Sorting by other columns will be hard. I'd like a q for quit. -- These are my opinions. I hate spam. _______________________________________________ devel mailing list [email protected] http://lists.ntpsec.org/mailman/listinfo/devel
