[ntp:questions] ntp 4.2.0 and connected sockets
Wolfgang S. Rupprecht
wolfgang+gnus20031102T115808 at dailyplanet.dontspam.wsrcc.com
Sun Nov 2 20:03:29 UTC 2003
I'm seeing some weirdness with how ntpd 4.2.0 is initializing the UDP
sockets. 1) It seems to open quite a lot of redundant sockets if one
has alias IP's on one's interface. 2) It appears to use connected UDP
sockets with the totally off-the-wall remote address of [64.0.0.0].
Is this intentional?
*:* -> 64.0.0.0.ptr.us.xo.net:*
Here is the full output of "lsof -c ntpd":
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
ntpd 25129 ntpd cwd VDIR 0,4 512 272981 /var/chroot/ntpd
ntpd 25129 ntpd rtd VDIR 0,4 512 272981 /var/chroot/ntpd
ntpd 25129 ntpd txt VREG 0,5 337120 40641 /usr/sbin/ntpd
ntpd 25129 ntpd txt VREG 0,0 49724 3386 /libexec/ld.elf_so
ntpd 25129 ntpd txt VREG 0,0 115553 3094 /lib/libm.so.0.1
ntpd 25129 ntpd txt VREG 0,0 1094754 3366 /lib/libcrypto.so.2.0
ntpd 25129 ntpd txt VREG 0,0 25607 3012 /lib/libkvm.so.5.2
ntpd 25129 ntpd txt VREG 0,0 781257 3069 /lib/libc.so.12.106
ntpd 25129 ntpd 0u VCHR 2,2 0t33 3307 /dev/null
ntpd 25129 ntpd 1u VCHR 2,2 0t33 3307 /dev/null
ntpd 25129 ntpd 2u VCHR 2,2 0t33 3307 /dev/null
ntpd 25129 ntpd 3u unix 0xc1b09820 0t0 ->0xc16e70cc
ntpd 25129 ntpd 4u IPv4 0xc1a8b09c 0t0 UDP *:*->64.0.0.0.ptr.us.xo.net:*
ntpd 25129 ntpd 5u VBAD (revoked)
ntpd 25129 ntpd 6r VREG 0,6 126064 820772 /u/X11R6.4/lib/X11/fonts/Type1/cour.pfa
ntpd 25129 ntpd 7r VREG 0,6 126868 820773 /u/X11R6.4/lib/X11/fonts/Type1/courb.pfa
ntpd 25129 ntpd 8u IPv6 0xc1a87df0 0t0 UDP *:*
ntpd 25129 ntpd 9u IPv4 0xc1a8b6b4 0t0 UDP *:*->64.0.0.0.ptr.us.xo.net:*
ntpd 25129 ntpd 10u IPv6 0xc1a8b9c0 0t0 UDP [::fe80:1:0:0]:*->[280:c8ff:fef8:71bc::]:*
ntpd 25129 ntpd 11u IPv6 0xc1a878e0 0t0 UDP [::2001:240:580:0]:*->[0:0:0:1::]:*
ntpd 25129 ntpd 12u IPv4 0xc1a87f34 0t0 UDP *:*->64.0.0.0.ptr.us.xo.net:*
ntpd 25129 ntpd 13u IPv4 0xc1a87d84 0t0 UDP *:*->64.0.0.0.ptr.us.xo.net:*
ntpd 25129 ntpd 14u IPv4 0xc1a8b618 0t0 UDP *:*->64.0.0.0.ptr.us.xo.net:*
ntpd 25129 ntpd 15u IPv6 0xc1a8794c 0t0 UDP [::2001:5a8:4:7d0]:*->[0:0:0:1::]:*
ntpd 25129 ntpd 16u IPv4 0xc1a8bd68 0t0 UDP *:*->64.0.0.0.ptr.us.xo.net:*
ntpd 25129 ntpd 17u IPv6 0xc1a8b924 0t0 UDP [::fe80:2:0:0]:*->[280:c8ff:fef8:71bd::]:*
ntpd 25129 ntpd 18u IPv6 0xc1a8bccc 0t0 UDP [::2001:240:580:1]:*->[0:0:0:1::]:*
ntpd 25129 ntpd 19u IPv6 0xc1a87004 0t0 UDP [::2001:5a8:4:7d1]:*->[0:0:0:1::]:*
ntpd 25129 ntpd 20u IPv4 0xc1a8bb94 0t0 UDP *:*->64.0.0.0.ptr.us.xo.net:*
ntpd 25129 ntpd 21u IPv6 0xc1a8ba5c 0t0 UDP *:1->[0:0:0:1::]:*
ntpd 25129 ntpd 22u IPv6 0xc1a8baf8 0t0 UDP [::fe80:5:0:0]:*->[0:0:0:1::]:*
ntpd 25129 ntpd 23u IPv6 0xc1a8bf3c 0t0 UDP [::fe80:a:0:0]:*->[280:c8ff:fef8:71bc::]:*
ntpd 25129 ntpd 24u IPv6 0xc1a8b000 0t0 UDP [::2001:5a8:0:1]:*->[0:0:0:fb::]:*
ntpd 25129 ntpd 25u IPv6 0xc083c6c0 0t0 UDP [::fe80:b:0:0]:*->[280:c8ff:fef8:71bc::]:*
ntpd 25129 ntpd 26w VREG 0,4 1645428 272989 /var/chroot/ntpd/var/log/ntpstats/clockstats.20031102
ntpd 25129 ntpd 27u VCHR 8,524288 0t1294708 1903 /dev/dty00
ntpd 25129 ntpd 28u VREG 0,4 3584 272976 /var/chroot/ntpd/var/log/ntpstats/ONCORE
ntpd 25129 ntpd 29w VREG 0,4 136789 272999 /var/chroot/ntpd/var/log/ntpstats/peerstats.20031102
ntpd 25129 ntpd 30w VCHR 89,0 0t0 272983 /var/chroot/ntpd/dev/clockctl (like character special /dev/clockctl)
ntpd 25129 ntpd 31w VREG 0,4 22950 273000 /var/chroot/ntpd/var/log/ntpstats/loopstats.20031102
-wolfgang
--
Wolfgang S. Rupprecht http://www.wsrcc.com/wolfgang/
The From: address is valid. Don't mess with it.
irony: when the richest man in the world is struck using Microsoft products
More information about the questions
mailing list