Re: SNTP test bench

Dag-Erling,

The rate violation is caught in the MRU list, which can be retrieved using ntpdc and the monlist command. When the number of clients is small, the list can be retrieved over the net. When the number of clients is larte, like several hundred, there are many UDP packets and one or more are usually dropped. The solution at present is to run ntpdc on the server machine and pipe the monlist output to a local file.

Each time a KoD is sent a counter is increased by one. Once each second the counter is decreased by one. If an offending packet arrives and the counter is less than 2, a KoD is sent; otherwise, the packet is dropped without further action. There probably should be some triage, but not without additional complexity.

Dave

Dag-Erling Smørgrav wrote:

"David L. Mills" <mills@xxxxxxxx> writes:

These configurable features are in the current snapshot, so that can
do the same things.


One question, what is the range of the "monitor" value on a "discard"
line in ntp.conf?

My understanding is that if "monitor" is e.g. 10%, it will only send out
KoD for 10% of offending requests, is that correct?

DES
.

Relevant Pages

  • Re: SNTP test bench
    ... using ntpdc and the monlist command. ... When the number of clients is ... If an offending packet arrives ...
    (comp.protocols.time.ntp)
  • Re: Generating keys for ntpdc control
    ... so I can use ntpdc to make on the fly changes to ntpd? ... The autokey scheme is used to let NTP clients be able to verify that a NTP ... packet received from a NTP server has indeed been sent by that server and ... Those symmetric keys can also be used with ntpdc. ...
    (comp.protocols.time.ntp)
  • Re: SNTP test bench
    ... The monitor and rate semantics are further elaborated in the recent documentation posted to the web page. ... using ntpdc and the monlist command. ...
    (comp.protocols.time.ntp)
  • Re: Max number of lines that ntpdc -c monlist could display
    ... number of IPv4 addresses that can be returned to ntpdc without changing ... Can you file a bug report on this? ... "ntpdc -nc monlist output failure when amount of clients is over 512" ... limitations by firewalls not expecting such large packets. ...
    (comp.protocols.time.ntp)