On Wed, 18 May 2005 17:16:06 -0400, [EMAIL PROTECTED] (Tim Shoppa) wrote: >> 206.239.35.28 averaged 144720 pkt/hr (sent 201 pkts in 5 seconds). > >I'm assuming this is to port 80? > >The way some pool servers serve stuff up on port 80 can cause traffic >to machines that don't serve stuff up on port 80. If Google finds a >bunch of stuff at http://pool.ntp.org/ one day, it may come back the >next day and try to recursively fetch more content when pool.ntp.org >now points to a different machine! > >Tim.
This is on port 123/udp, and there is nothing in the webserver log to indicate http traffic. Delving back though my logs, it turns out I have been blocking addresses from Google for the last week or so, the traffic seems to come in short bursts. (I only fixed the pkt/hr reporting yesterday) script used is david/ntp-sniffer3 in www.morgad.no-ip.info/ntp/scripts.tgz Dave -- http://www.morgad.no-ip.info/index.html gpg:0x64B5E037 Distributed Proofreaders: http://www.pgdp.net The NTP server pool http://www.pool.ntp.org _______________________________________________ timekeepers mailing list [email protected] https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers
