[167647] in North American Network Operators' Group
Re: What's going on with NTP?
daemon@ATHENA.MIT.EDU (Javier Henderson)
Wed Dec 25 11:42:40 2013
From: Javier Henderson <javier@kjsl.org>
In-Reply-To: <20131225163540.13345.qmail@joyce.lan>
Date: Wed, 25 Dec 2013 11:42:26 -0500
To: John Levine <johnl@iecc.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Dec 25, 2013, at 11:35 AM, John Levine <johnl@iecc.com> wrote:
> I have two FreeBSD servers where the NTP daemons are using double =
digit CPU
> percentages today rather than the usual 0.01%. Restarting them didn't =
help.
>=20
> The clock on my Android phone is five hours slow. (It's not the time =
zone,
> I checked that.)
>=20
> Is this just my special Christmas present, or are there screwed up NTP =
servers?
I suspect your servers are being attacked. Are you seeing a lot of =
in/out NTP traffic on those FreeBSD servers?
-jav
