>> Another possibility occurs to me, based mostly on watching traffic
>> in real time
> You must have better eyes than me! I tried it briefly on one of my
> boxes that are in the NTP Pool[1] and it's getting about 40-50
> qps[2].
...so? Mine is seeing about 20pps (snooping 1000 packets took 50
seconds), so a bit over 10qps ("a bit over" because of blocked hosts,
which are 1 ppq, whereas responded-to hosts are 2ppq.)
But I wasn't talking about watching _all_ traffic in real time. I was
talking about watching worst-offender traffic, ie, filtered to watch a
particularly ill-behaving host's traffic and nothing else. (In tcpdump
terms, "host A.B.C.D" where A.B.C.D is picked based on traffic stats.)
/~\ The ASCII Mouse
\ / Ribbon Campaign
X Against HTML [email protected]
/ \ Email! 7D C8 61 52 5D E7 2D 39 4E F1 31 3E E8 B3 27 4B
_______________________________________________
timekeepers mailing list
[email protected]
https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers