[ntp:questions] Question on abusive clients.
sandler at ujf.cas.cz
Wed Dec 21 23:16:12 UTC 2005
My question is, if there is a possibility how to distinguish between a
misconfigured client or a grup of more or less standard clients behind a
NAT. Originally, I thought, it would be easy. Ideally, the timestamps of a
single client requests create an equidistant ladder with steps equal to some
integer (maybe with some slide besides of time delay disorder). But a look
on the two following graphs does not allow me to make any clear conclusion.
Are those requests from a single client? Generally, I expected other slides
for distinct clients.
Like a single client and then a sudden link improvement?
There are also 1_2.png, ... and so on, with higher resolution.
More information about the questions