I've got a server here running standard ntpd as shipped by Debian.
Version is 1:4.2.0a+stable-2sarge1.

ntpq> peers
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
+67.128.71.75    18.145.0.30      2 u  843 1024  377   36.466  -10.013   5.982
*64.142.103.194  .GPS.            1 u  879 1024  377  109.434   -6.089   6.618
-69.17.7.16      192.5.41.41      2 u    2   16  377   37.439    0.492   9.246
+66.70.29.130    66.92.68.246     2 u  798 1024  377   25.071   -6.402   4.621


Notice 69.17.7.16 is being polled every 16s, which is less than
minpoll... WTF?!


ntpq> pstatus 55078
assID=55078 status=93f4 reach, conf, sel_outlyer, 15 events, event_reach,
srcadr=69.17.7.16, srcport=123, dstadr=172.16.1.31, dstport=123,
leap=00, stratum=2, precision=-6, rootdelay=34.668,
rootdispersion=38.483, refid=192.5.41.40, reach=377, unreach=0, hmode=3,
pmode=4, hpoll=10, ppoll=0, flash=00 ok, keyid=0, ttl=0, offset=-3.334,
delay=46.997, dispersion=15.631, jitter=5.900,
reftime=c751472f.f2f30000  Mon, Dec 19 2005  9:50:23.949,
org=c7514766.204a3000  Mon, Dec 19 2005  9:51:18.126,
rec=c7514766.27d2b6f1  Mon, Dec 19 2005  9:51:18.155,
xmt=c7514766.1678f25a  Mon, Dec 19 2005  9:51:18.087,
filtdelay=    67.76   54.42   58.21   47.00   53.28   72.72   57.52   51.18,
filtoffset=    4.45   -5.91   -4.48   -3.33   -6.61  -15.07   -7.77   -5.97,
filtdisp=     15.63   15.64   15.66   15.67   15.69   15.72   15.73   15.75

ntpq> rv
assID=0 status=06f4 leap_none, sync_ntp, 15 events, event_peer/strat_chg,
version="ntpd [EMAIL PROTECTED]:4.2.0a+stable-2-r Fri Aug 26 10:30:12 UTC 2005 
(1)"?,
processor="i686", system="Linux/2.4.27-2-686-smp", leap=00, stratum=2,
precision=-20, rootdelay=104.597, rootdispersion=40.974, peer=55077,
refid=64.142.103.194,
reftime=c75146f0.33bbf93f  Mon, Dec 19 2005  9:49:20.202, poll=10,
clock=0xc751480c.e23b256f, state=4, offset=-7.327, frequency=-78.042,
noise=2.730, jitter=4.329, stability=17.093

ntpdc> sysinfo
system peer:          64.142.103.194
system peer mode:     client
leap indicator:       00
stratum:              2
precision:            -20
root distance:        0.10458 s
root dispersion:      0.04211 s
reference ID:         [64.142.103.194]
reference time:       c75146f0.33bbf93f  Mon, Dec 19 2005  9:49:20.202
system flags:         auth monitor ntp kernel stats 
jitter:               0.004318 s
stability:            17.093 ppm
broadcastdelay:       0.003998 s
authdelay:            0.000000 s

ntpdc> iostats
time since reset:     968698
receive buffers:      9
free receive buffers: 9
used receive buffers: 9
low water refills:    0
dropped packets:      0
ignored packets:      0
received packets:     523873
packets sent:         527812
packets not sent:     0
interrupts handled:   523873
received by int:      523873

ntpdc> pstats 69.17.7.16
remote host:          69.17.7.16
local interface:      172.16.1.31
time last received:   0s
time until next send: 1s
reachability change:  2909s
packets sent:         524403
packets received:     520636
bad authentication:   0
bogus origin:         0
duplicate:            2
bad dispersion:       0
bad reference time:   0
candidate order:      3

(ACK! Even worse... Could it really be 1 packet per second‽)

# tcpdump -pn host 69.17.7.16
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
10:00:49.042270 IP 172.16.1.31.123 > 69.17.7.16.123: NTPv4 client, strat 2, 
poll 10, prec -20
10:00:49.079271 IP 69.17.7.16.123 > 172.16.1.31.123: NTPv4 server, strat 2, 
poll 0, prec -6
10:00:50.042177 IP 172.16.1.31.123 > 69.17.7.16.123: NTPv4 client, strat 2, 
poll 10, prec -20
10:00:50.079154 IP 69.17.7.16.123 > 172.16.1.31.123: NTPv4 server, strat 2, 
poll 0, prec -6
10:00:52.042012 IP 172.16.1.31.123 > 69.17.7.16.123: NTPv4 client, strat 2, 
poll 10, prec -20
10:00:52.080920 IP 69.17.7.16.123 > 172.16.1.31.123: NTPv4 server, strat 2, 
poll 0, prec -6
10:00:53.041935 IP 172.16.1.31.123 > 69.17.7.16.123: NTPv4 client, strat 2, 
poll 10, prec -20
10:00:53.084300 IP 69.17.7.16.123 > 172.16.1.31.123: NTPv4 server, strat 2, 
poll 0, prec -6
10:00:54.041855 IP 172.16.1.31.123 > 69.17.7.16.123: NTPv4 client, strat 2, 
poll 10, prec -20
10:00:54.078936 IP 69.17.7.16.123 > 172.16.1.31.123: NTPv4 server, strat 2, 
poll 0, prec -6
10:00:55.041775 IP 172.16.1.31.123 > 69.17.7.16.123: NTPv4 client, strat 2, 
poll 10, prec -20
10:00:55.080945 IP 69.17.7.16.123 > 172.16.1.31.123: NTPv4 server, strat 2, 
poll 0, prec -6

Ouch.

Debian ships a fairly simple ntpd.conf file, and that's basically what
is on that server. Here it is, with comments stripped:

driftfile /var/lib/ntp/ntp.drift
statsdir /var/log/ntpstats/
statistics loopstats peerstats clockstats
filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable
filegen clockstats file clockstats type day enable
server us.pool.ntp.org
server 0.us.pool.ntp.org
server 1.us.pool.ntp.org
server 2.us.pool.ntp.org
restrict default kod notrap nomodify nopeer noquery
restrict 127.0.0.1 nomodify

That's the entire file. Certainly nothing there that should allow a poll
of 16s, much less the 1s it is actually doing!
_______________________________________________
timekeepers mailing list
[email protected]
https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers

Reply via email to