Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NTP driving me crazy: offset -1410.220612 sec

    Scheduled Pinned Locked Moved General pfSense Questions
    10 Posts 5 Posters 603 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mzeid
      last edited by

      Hello,

      There is a huge drift in time, I tried:

      • Change the NTP server (mikrotik) to have both broadcast and multicast
      • changing the upstream NTP server (local) to other global servers like google
      • Force update using: ntpdate -u time.google.com

      But the reply I keep getting:
      9 Dec 09:31:33 ntpdate[44917]: step time server 216.239.35.4 offset -1410.220612 sec

      There is nearly 20 minutes difference, pfsense is a head of time.

      1b8cff44-195c-434c-b171-e71bf72dca70-image.png

      2.7.2-RELEASE (amd64)
      built on Mon Mar 4 22:53:00 +03 2024
      FreeBSD 14.0-CURRENT

      It is a Hyper-V vm

      What can be the problem?

      GertjanG johnpozJ 2 Replies Last reply Reply Quote 0
      • GertjanG
        Gertjan @mzeid
        last edited by Gertjan

        @mzeid said in NTP driving me crazy: offset -1410.220612 sec:

        What can be the problem?

        Probably this :

        5dd62418-3610-4617-9a11-3f228582073d-image.png

        which makes me think ๐Ÿ˜Š it is unreachable.

        edit :

        216.239.35.4 works for me :

        40a33f5e-509e-4c32-87e7-ea6fba435525-image.png

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        M 1 Reply Last reply Reply Quote 0
        • provelsP
          provels
          last edited by

          Is Time Sync turned OFF in Host Integration Services for your VM? Should be if NTP is enabled in the FW.

          Peder

          MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
          BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

          M 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @mzeid
            last edited by

            @mzeid did you give it some time to sync.. That unreach/pending and the reach of 1 means it hasn't talk to the ntp server long enough to even start to sync.

            When you can talk to ntp server the reach should get to 377

            ntp.jpg

            377 means that in the last 8 times it has got an answer all 8 times. You can look up how that counter works.

            But yeah with a reach of 1 only - its never going to sync, does that counter go up? If not your having issues with talking to that ntp server.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 1
            • M
              mzeid @Gertjan
              last edited by mzeid

              @Gertjan
              @johnpoz

              I tried pinging it and it worked fine, other than this Reach= 1 , which afaik that the server responded.
              I don't know why it was stuck on "Unreach/Pending" but now it looks like this:

              6f0f6d45-fb58-424e-a588-3a08e46c71c3-image.png

              When I force update NTP, the response as mentioned above:
              9 Dec 09:31:33 ntpdate[44917]: step time server 216.239.35.4 offset -1410.220612 sec

              that the server replied, and maybe NTP was updated, but still there is offset.

              btw it was 377 using my NTP server as well, before I changed it to google server.

              1 Reply Last reply Reply Quote 0
              • M
                mzeid @provels
                last edited by mzeid

                @provels

                This is it

                As suggested, I found it turned on (Hyper-V), and time is wrong on the host itself.
                Before turning it off, I wanted to test the behavior so I fixed the time on host and synced again NTP on pfsense:

                ntpdate -u time.google.com
                10 Dec 10:58:52 ntpdate[28559]: step time server 216.239.35.8 offset -8.141192 sec
                And now the current time on the main page is correct.

                There is still some offset but it is clear that Time Sync was affecting it.
                yet:
                c768eae1-c544-4ca8-bf9d-80cbd0e44ad5-image.png

                After turning Time Sync off:
                10 Dec 11:14:36 ntpdate[43578]: adjust time server 216.239.35.12 offset +0.000224 sec

                79c1b569-5094-4e8f-92cd-6b600419c92d-image.png
                ( I had to restart the service, it made the offset even better)
                And current time is very accurate.

                Everything is fine now. Thanks for the help

                P GertjanG provelsP 3 Replies Last reply Reply Quote 1
                • P
                  Patch @mzeid
                  last edited by

                  @mzeid said in NTP driving me crazy: offset -1410.220612 sec:

                  Everything is fine now

                  Reach of 1 indicated ntp is not really functioning imo

                  1 Reply Last reply Reply Quote 0
                  • GertjanG
                    Gertjan @mzeid
                    last edited by

                    @mzeid

                    Instead of searching a service that works on some 'IP', why not get while collection of them, also called a pool, and let ntpd handle the details ?

                    Ask ntp how to set this up ( its here ) and you'll be good.

                    No "help me" PM's please. Use the forum, the community will thank you.
                    Edit : and where are the logs ??

                    1 Reply Last reply Reply Quote 0
                    • provelsP
                      provels @mzeid
                      last edited by

                      @mzeid said in NTP driving me crazy: offset -1410.220612 sec:

                      This is it

                      They say the man with 2 watches never really knows what time it is.

                      Peder

                      MAIN - pfSense+ 24.11-RELEASE - Adlink MXE-5401, i7, 16 GB RAM, 64 GB SSD. 500 GB HDD for SyslogNG
                      BACKUP - pfSense+ 23.01-RELEASE - Hyper-V Virtual Machine, Gen 1, 2 v-CPUs, 3 GB RAM, 8GB VHDX (Dynamic)

                      GertjanG 1 Reply Last reply Reply Quote 0
                      • GertjanG
                        Gertjan @provels
                        last edited by Gertjan

                        @provels said in NTP driving me crazy: offset -1410.220612 sec:

                        They say the man with 2 watches never really knows what time it is.

                        That's why you pool them up ๐Ÿ˜Š

                        No "help me" PM's please. Use the forum, the community will thank you.
                        Edit : and where are the logs ??

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.