[time] IDS492 "NTPDX-BUFFER-OVERFLOW"

[Rob Oats]

On Saturday 15 January 2005 18:34, Tim Shoppa wrote:
> > The request was on port 123/udp and is not a peer
>
> Well, ntpd was attempting to process the packet as if it was a peer.
> Maybe if you post your ntpd.conf file and detail which ntpd you are
> running (which distro?  or built from source?  which source?) you can clean
> up your ntpd.conf such that it will never consider the martian packets
> as peer associations.  The meaning of the config file options has changed
> over time so we have to know what you're running to get the config file
> right.
>
> Tim.

The server is running a standard Debian Woody system with the Woody ntpd 
setup. The ntp.conf is;

# /etc/ntp.conf, configuration for ntpd

# ntpd will use syslog() if logfile is not defined
logfile /var/log/ntpd

driftfile /etc/ntp.drift
statsdir /var/log/ntpstats/

statistics loopstats peerstats clockstats
filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable
filegen clockstats file clockstats type day enable

### lines starting 'server' are auto generated,
### use dpkg-reconfigure to modify those lines.

server ntp.my-inbox.co.uk
server chronos.csr.net
server ntp.cis.strath.ac.uk
server ntp2c.mcc.ac.uk
server time-server.ndo.com
server 81.187.242.38

Rob