On Thu, Aug 28, 2008 at 08:10:33AM -0700, Nelson Minar wrote: > > > Yeah, in particular ones that are not at midnight local time (seen > > from the user). :-) Well, even those would be interesting I guess -- > > what I am going for is to find out if Big Corps are using the pool (in > > particular if they are in a braiddead ever midnight way) and - in > > particular - if DNS caching at big ISPs is significantly affecting the > > distribution of requests to the pool. > > Got it. I'm fairly certain the spikes on-the-hour are not a result of > DNS caching. I'm guessing some NTP client or cron job just refreshes the > client then. If we really needed to know, the way to figure this out > would be to probe the OS of the hosts making the requests on the hour, > and/or try to classify the NTP implementation based on packet captures. > More work than I want to do for what's just an amusing puzzle.
Wouldn't http://lcamtuf.coredump.cx/p0f.shtml make that simple? No outbound probing involved. -- Darrin Chandler | Phoenix BSD User Group | MetaBUG [EMAIL PROTECTED] | http://phxbug.org/ | http://metabug.org/ http://www.stilyagin.com/ | Daemons in the Desert | Global BUG Federation
pgpfBXVKT6K0F.pgp
Description: PGP signature
_______________________________________________ timekeepers mailing list [email protected] https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers
