[ntp:questions] Re: abuse or bug ?

Henk Penning henkp at cs.uu.nl
Mon Jan 31 21:07:00 UTC 2005


In <cte0qc$kpp$1 at dewey.udel.edu> "David L. Mills" <mills at udel.edu> writes:

>                                                                      If 
>it was reachable by ping but not for ntpq and not returning a ICMP 
>destination port unreachable, I would suspect a Netgear client.

  Sorry to bother you some more; here is a 1 PPS client that
  responds to ping, ntpdc and ntpq:

    83.140.64.206

  2179540 packets in the last 613 hours.

% ntpq 83.140.64.206
ntpq> pee
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
 doei.cs.uu.nl   .RSTR.          16 u    -   64    0    0.000    0.000 4000.00
ntpq> ass
ind assID status  conf reach auth condition  last_event cnt
===========================================================
  1 19508  8000   yes   yes  none    reject
ntpq> q

--------------------------------------------------------------------

% ntpdc 83.140.64.206
ntpdc> dm
     remote           local      st poll reach  delay   offset    disp
=======================================================================
 doei.cs.uu.nl   83.140.64.206   16   64    0 0.00000  0.000000 0.00000
ntpdc> loo
offset:               0.000000 s
frequency:            0.000 ppm
poll adjust:          0
watchdog timer:       2205677 s
ntpdc> sysi
system peer:          0.0.0.0
system peer mode:     unspec
leap indicator:       11
stratum:              16
precision:            -20
root distance:        0.00000 s
root dispersion:      33.08517 s
reference ID:         [73.78.73.84]
reference time:       00000000.00000000  Thu, Feb  7 2036  7:28:16.000
system flags:         auth monitor ntp kernel stats 
jitter:               0.000000 s
stability:            0.000 ppm
broadcastdelay:       0.003998 s
authdelay:            0.000000 s
ntpdc> ps doei.cs.uu.nl
remote host:          doei.cs.uu.nl
local interface:      7.0.0.0
time last received:   2205687s
time until next send: 0s
reachability change:  2205687s
packets sent:         2179710
packets received:     0
bad authentication:   0
bogus origin:         0
duplicate:            0
bad dispersion:       0
bad reference time:   0
candidate order:      0
ntpdc> sh doei.cs.uu.nl
remote 131.211.80.155, local 83.140.64.206
hmode client, pmode mode#33, stratum 16, precision -20
leap 11, refid [82.83.84.82], rootdistance 0.00000, rootdispersion 0.00000
ppoll 10, hpoll 6, keyid 0, version 4, association 19508
reach 000, unreach 129, flash 0x0000, boffset 0.00400, ttl/mode 0
timer 0s, flags config, bclient
reference time:      00000000.00000000  Thu, Feb  7 2036  7:28:16.000
originate timestamp: 00000000.00000000  Thu, Feb  7 2036  7:28:16.000
receive timestamp:   00000000.00000000  Thu, Feb  7 2036  7:28:16.000
transmit timestamp:  00000000.00000000  Thu, Feb  7 2036  7:28:16.000
filter delay:  0.00000  0.00000  0.00000  0.00000 
               0.00000  0.00000  0.00000  0.00000 
filter offset: 0.000000 0.000000 0.000000 0.000000
               0.000000 0.000000 0.000000 0.000000
filter order:  7        6        5        4       
               3        2        1        0       
offset 0.000000, delay 0.00000, error bound 0.00000, filter error 4.00000
ntpdc> quit

  Henk Penning
--
----------------------------------------------------------------   _
Henk P. Penning, Computer Systems Group       R Uithof CGN-A232  _/ \_
Dept of Computer Science, Utrecht University  T +31 30 253 4106 / \_/ \
Padualaan 14, 3584CH Utrecht, the Netherlands F +31 30 251 3791 \_/ \_/



More information about the questions mailing list