[158069] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: [outages] NTP Issues Today

daemon@ATHENA.MIT.EDU (Colin Johnston)
Tue Nov 20 12:11:26 2012

From: Colin Johnston <colinj@mx5.org.uk>
In-Reply-To: <20121120170545.GA92205@icarus.home.lan>
Date: Tue, 20 Nov 2012 17:10:08 +0000
To: Jeremy Chadwick <jdc@koitsu.org>
Cc: outages <outages@outages.org>, Scott Voll <svoll.voip@gmail.com>,
 Colin Johnston <colinj@mx5.org.uk>, "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

no idea, re sigterm cause
checked firewall system logs and could not see cause from that either
times are GMT

Colin

On 20 Nov 2012, at 17:05, Jeremy Chadwick <jdc@koitsu.org> wrote:

> Colin,
>=20
> Signal 15 =3D SIGTERM, so something intentionally shut ntpd down on =
your
> side.  The logs I'd be interested in would be prior to what you've
> provided, i.e. what lead to the SIGTERM.
>=20
> Also, no timezone is mentioned anywhere in your timestamps, so please
> provide that (UTC offset would be best).
>=20
> --=20
> | Jeremy Chadwick                                   jdc@koitsu.org |
> | UNIX Systems Administrator                http://jdc.koitsu.org/ |
> | Mountain View, CA, US                                            |
> | Making life hard for others since 1977.             PGP 4BD6C0CB |
>=20
> On Tue, Nov 20, 2012 at 05:02:06PM +0000, Colin Johnston wrote:
>>=20
>> On 20 Nov 2012, at 15:38, Jeremy Chadwick <jdc@koitsu.org> wrote:
>>=20
>>> I'm still waiting for someone who was affected by this to provide
>>> coherent logs from ntpd showing exactly when the time change =
happened.
>>> Getting these, at least on an *IX system, is far from difficult =
folks.
>>>=20
>>=20
>> from firewall ntp logs
>> Nov 19 09:58:06 [192.168.0.1.128.176] 2012:11:19-09:58:06 =
ntpd[21385]: ntpd exiting on signal 15
>> Nov 19 09:58:19 [192.168.0.1.128.176] 2012:11:19-09:58:19 =
selfmonng[3503]: W check Failed increment ntpd_running counter 3 - 3
>> Nov 19 09:58:22 [192.168.0.1.128.176] 2012:11:19-09:58:22 =
selfmonng[3503]: W NOTIFYEVENT Name=3Dntpd_running Level=3DINFO Id=3D147 =
sent
>> Nov 19 09:58:22 [192.168.0.1.128.176] 2012:11:19-09:58:22 =
selfmonng[3503]: W triggerAction: 'cmd'
>> Nov 19 09:58:22 [192.168.0.1.128.176] 2012:11:19-09:58:22 =
selfmonng[3503]: W actionCmd(+):  '/var/mdw/scripts/ntp restart'
>> Nov 19 09:58:25 [192.168.0.1.128.176] 2012:11:19-09:58:25 =
ntpd[24120]: ntpd 4.2.4p8@1.1612-o Tue Feb  2 21:46:54 UTC 2010 (1)
>> Nov 19 09:58:25 [192.168.0.1.128.176] 2012:11:19-09:58:25 =
selfmonng[3503]: W child returned status: exit=3D'0' signal=3D'0'
>> Nov 19 09:58:35 [192.168.0.1.128.176] 2012:11:19-09:58:35 =
ntpd[24121]: kernel time sync status change 0001
>>=20
>> was sync'd to 84.25.175.98, stratum 2 at the time I believe
>>=20
>> Colin



home help back first fref pref prev next nref lref last post