[time] deleted my server from the dns pool for the time being
Jos J.A.C.M. van de Ven
Fri Mar 30 12:07:25 UTC 2007
> -----Original Message-----
> From: timekeepers-bounces at fortytwo.ch [mailto:timekeepers-
> bounces at fortytwo.ch] On Behalf Of Koos van den Hout
> Sent: Tuesday, March 27, 2007 10:34 PM
> To: timekeepers at fortytwo.ch
> Subject: Re: [time] deleted my server from the dns pool for the time being
> 10000 ntp queries per minute sounds like a lot. But when I calculate it to
> pure bytes traffic:
> 10000 queries/minute -> 167 per second.
> given the ntp packets I see (76 bytes) that would mean 12692 bytes payload
> traffic per second, which will take somewhere near 126 kbit (including
> overhead) of those 512 kbit up.
My numbers are not calculated, but seen with /proc/net/dev and "ntpdc -c
iostats" received bytes (mrtg).
The peaks are steady at around 5900 packets/minute and outgoing traffic with
last peak was 18,2 kB/sec. 18,2*1024=18636,8 bytes, 5900/60=98,33
packets/sec, 18636,8/98,33=189,53 bytes/packet
These numbers are not exact and are read from graphs, but I think I can
conclude something is wrong with these numbers. It could be that my linux
box (Clarkconnect distro) is calculating something wrong or can't keep up
but I trust the output of /proc/net/dev.
Anyway, I have stopped monitoring scripts, because I see load peaks around
3,5 while tcpdump runs on port 123 and heavy processor use of tcpdump with
My last output from monitoring scripts is:
Estimated active ntp pool clients: 1567
Estimated abusive ntp pool clients: 21
Estimated inactive ntp pool clients: 86911
Total ntp pool clients being tracked: 88478
I think 88000+ is quite impressive and caused by the Turkish provider. Has
someone already contacted them?
Jos van de Ven
More information about the pool