NST: update to ntpq -c nts

Hal Murray hmurray at megapathdsl.net
Wed Apr 10 08:11:28 UTC 2019


The old code had several cases where there were 2 counters for things like 
received NTS packets, total and bad.  I changed that to good and bad.

A mix of old/new ntpq/ntpd won't show the total or good.

------

There is a lot of crap out there on the big bad internet.

NTS KE serves good:          21
NTS KE serves_bad:           81

I assume most of that is bad guys looking for SSH running on alternate ports 
or something similar.

 1 Apr 10:09:05 ntpd[825]: NTSs: TCP accept-ed from 106.75.3.52:44784
 1 Apr 10:09:06 ntpd[825]: NTSs: SSL accept from 106.75.3.52:44784 failed, 
0.360 sec
 1 Apr 10:09:06 ntpd[825]: NTS: error:1408F09C:SSL 
routines:ssl3_get_record:http request

 1 Apr 10:09:16 ntpd[825]: NTSs: TCP accept-ed from 106.75.3.52:40560
 1 Apr 10:09:16 ntpd[825]: NTSs: SSL accept from 106.75.3.52:40560 failed, 
0.433 sec
 1 Apr 10:09:16 ntpd[825]: NTS: error:1408F10B:SSL 
routines:ssl3_get_record:wrong version number


-- 
These are my opinions.  I hate spam.





More information about the devel mailing list