NTS Logging

Richard Laager rlaager at wiktel.com
Sat Nov 23 08:00:29 UTC 2019


This is probably a question for Hal:

I'm getting a lot of useless-to-me NTS log messages. I assume these are
just random things scanning open ports. I wonder if these should be
toned-down from ERR to DEBUG.

2019-11-23T01:56:32.467297-06:00 ntp2 ntpd[16212]: NTSs: TCP accept-ed from 23.91.196.81:49442
2019-11-23T01:56:32.471845-06:00 ntp2 ntpd[16212]: NTSs: SSL accept from 23.91.196.81:49442 failed, 0.005 sec
2019-11-23T01:56:32.471911-06:00 ntp2 ntpd[16212]: NTS: error:1408F10B:SSL routines:ssl3_get_record:wrong version number
2019-11-23T01:56:55.330967-06:00 ntp2 ntpd[16212]: NTSs: TCP accept-ed from 45.31.119.163:54791
2019-11-23T01:56:55.331135-06:00 ntp2 ntpd[16212]: NTSs: SSL accept from 45.31.119.163:54791 failed, 0.001 sec
2019-11-23T01:56:55.331177-06:00 ntp2 ntpd[16212]: NTS: error:1408F10B:SSL routines:ssl3_get_record:wrong version number
2019-11-23T01:57:06.531852-06:00 ntp2 ntpd[16212]: NTSs: TCP accept-ed from 100.7.71.194:49186
2019-11-23T01:57:06.531996-06:00 ntp2 ntpd[16212]: NTSs: SSL accept from 100.7.71.194:49186 failed, 0.000 sec
2019-11-23T01:57:06.532038-06:00 ntp2 ntpd[16212]: NTS: error:1408F10B:SSL routines:ssl3_get_record:wrong version number

Likewise for "JUNK", but it's not completely clear to me if that's NTS:

2019-11-23T00:49:43.157343-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/e3 0 6ec 48/e3 0 6ec from 24.96.130.163:1337, lng=96
2019-11-23T00:50:17.176444-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/e3 0 6ec 48/e3 0 6ec from 24.96.130.163:1337, lng=144
2019-11-23T00:50:47.195387-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/e3 0 6ec 48/e3 0 6ec from 24.96.130.163:1337, lng=192
2019-11-23T00:51:17.213065-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/e3 0 6ec 48/e3 0 6ec from 24.96.130.163:1337, lng=240
2019-11-23T00:51:17.977683-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/23 b aee 48/ 2 1 02c from 156.19.53.170:48939, lng=112
2019-11-23T00:52:23.979388-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/23 b aee 48/ 2 1 02c from 156.19.53.170:52226, lng=112
2019-11-23T00:53:30.978074-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/23 b aee 48/ 2 1 02c from 156.19.53.170:62415, lng=112
2019-11-23T01:10:50.980235-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/23 b aee 48/ 2 1 02c from 156.19.53.170:47187, lng=112
2019-11-23T01:11:56.984301-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/23 b aee 48/ 2 1 02c from 156.19.53.170:35678, lng=112
2019-11-23T01:13:02.980444-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/23 b aee 48/ 2 1 02c from 156.19.53.170:65417, lng=112
2019-11-23T01:30:27.986951-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/23 b aee 48/ 2 1 02c from 156.19.53.170:29868, lng=112
2019-11-23T01:31:31.990726-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/23 b aee 48/ 2 1 02c from 156.19.53.170:10321, lng=112
2019-11-23T01:32:38.986967-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/23 b aee 48/ 2 1 02c from 156.19.53.170:30443, lng=112
2019-11-23T01:50:36.992225-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/23 b aee 48/ 2 1 02c from 156.19.53.170:54482, lng=112
2019-11-23T01:51:42.994733-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/23 b aee 48/ 2 1 02c from 156.19.53.170:61911, lng=112
2019-11-23T01:52:49.994421-06:00 ntp2 ntpd[16212]: JUNK: M3 V4 0/23 b aee 48/ 2 1 02c from 156.19.53.170:50665, lng=112

-- 
Richard


More information about the devel mailing list