NTP Issue
-
That is an LAN based ntp server I've shown above. It's a crap ntp server but it's still local and is reachable just fine.
So something about your servers is different, hence my list of questions. When I read back through the thread at one point you said the state table showed one way traffic. That implies some network issue rather than anything ntp specific.
I'll try and repair my true GPS module. That used pps over a real serial port. Unfortunately the antenna connector was pulled off the board so it requires some delicate surgery!
-
@stephenw10
Well, I'm amazed that you have a LAN based NTP server turning up as being available.I can see that my pfsense box is contacting both my ntp servers because they report the last 100 hosts.
I have opt 2 configured with zero firewall rules and it goes to the second port of the main NTP server. That port serves only port 123, so it's a handy test.
That port of the NTP server is configured to broadcast NTP every thirty seconds AND I can see that traffic turn up as measured by the firewall, every 30 seconds. I ditched the broadcast and seeing as nothing but NTP traffic is on that port, it clearly shows traffic going to and from the NTP server.
So we know that the the network is just fine between the firewall and three ports between both NTP servers.A little while ago, I disabled all the LAN firewall rules, then restarted the NTP service.
As per usual, all of the LAN NTP servers were unreachable and yet time.apple.com quickly was selected out of the six other options.
(For anyone who cares, I logged various NTP servers around the world for over two and half years at my work. time.apple.com is by far the most reliable and fastest. I'm pretty sure they have a decent time server in most countries, even if the traceroute takes you back to the USA. Not ONE of ANY of the public pools of NTP servers were reliable. I would NEVER recommend using pools of any NTP servers.
I've established several times to my satisfaction that my firewall is contacting both NTP servers and totally ignoring them.
I'm thinking that it's a kernel level problem now. -
I'm thinking that it's a kernel level problem now.
no its not.. I use a local ntp server - and there are zero issues syncing time from it both on 24.11 and 2.8..
There are many people here running their own local ntp - its not a pfsense issue.. Its something unique to your setup.
"Anyway, the second NTP server has two interfaces which can be independently configured"
Why would you have your ntp server mult-homed. But that could be a problematic if firewall is blocking it because of changes in rules - where traffic not allowed unless you set states back to floating.
the only way I can duplicate your problem is if I set custom acl so that my ntp server is ignored
-
@johnpoz
Well, it's not unique to mine if at least five other people had the same thing happen when they updated to 2.7.Ordinarily, I wouldn't have the NTP server multi homed.
That particular server has two ports. One for admin and NTP and the other for only responding to NTP requests. That's the side that I'd have available to the internet if I wasn't on asynchronous It occurred to me that I could simulate another network for faultfinding with that port, so I configured it to have it's own A class network. It works perfectly for everything plugged into it, except the firewall.On the weekend, I'm going to configure the SG-1100 and see what it does when it's plugged into that port.
It is just incredibly annoying that my original NTP test lab setup had up to six stratum one NTP servers of various types and everything talked to them. I've designed and installed industry best practice NTP systems for federal government departments and absolutely everything in them never had an issue once it was correctly configured. I'd never seen literally thousands of machines all within sub millisecond sync before.
And then I got my pfsense box and had it graphing with good numbers and then excellent numbers with a local NTP server, so was starting to increase the count when 2.7 turned up.... and then that was the end of things.I was hoping that 2.8 would mysteriously fix it, particularly when people were talking about patches. I have one resource who is a FreeBSD god and I'm at the point of inviting him over, but I'll never hear the end of not keeping my FreeBSD server running...
-
but I'll never hear the end of not keeping my FreeBSD server running...
Ha! Sometimes it's a price you have to pay.
But I'd be amased if the ntp client in pfSense is actually seeing the replies from the server. It's almost certainly being dropped somehow before it reaches it.The only other thing I can think of would be the client itself rejecting the replies but since you're not using any sort of ntp auth I have no idea why it would.
How are you checking this traffic? I would want to use pcaps on either end to be sure. Make sure the IPs and MACs all line up.
But also checking the outbound ntp state on the firewall. That must show two way traffic if replies are coming back and being passed.
Yes the interface bound states change would be my first suspect here except that it wasn't in 2.7.X.
-
@stephenw10 said in NTP Issue:
But also checking the outbound ntp state on the firewall. That must show two way traffic if replies are coming back and being passed.
Yup that is a very simple sanity check for sure.
-
@stephenw10
The thought occurred to me that the easiest way to ensure that the firewall can actually see the traffic is to let the NTPmonitor running on my workstation, query the second port of the NTP server via OPT2.There are no other paths to get to it, as it's one ethernet cable joining the firewall to the NTP server.
NTPmonitor found it instantly, and can poll it constantly, so that traffic is going back and forth through the port on the firewall, and is also being routed from the LAN port to the OPT2 port and back, by the firewall.
This tends to suggest to me that there are no firewall rules obstructing it and the traffic is just fine. -
@admacdo and what does your states show - there is a difference from sending a query from a different network. For when pfsense asks?
If you do not see return traffic via the state - then for some reason that traffic was not processed.. Even if there was something as you mention in the kernel - which is no way the issue.. The state would still be listed as traffic was returned.
While its clear there is something going on - nobody else that I am aware has been able to duplicate the problem.. pfsense talks to my ntp server just fine. Steve can not duplicate it either.
But if your state is not showing return traffic - then the ntp client which is farther up the stack, if the firewall isn't allowing it via completion of the state. The ntp client would never see it.
-
@johnpoz
Can we pretend (or not pretend)at this point that I'm an idiot and demo the commands I can put in a command line to show this information? -
Just go to Diag > States in the webgui and filter by
:123to see the ntp states.You should see a state on the interface connected to the ntp server with no corresponding state on another interface. That will be the state opened from the firewall itself.
It's usually pretty obvious but you likely have a bunch of ntp states so it might be more difficult to spot.
-
I note that the states can timeout so may not always be there. I restarted ntpd to force it to reach out to get that screenshot. But you could just wait. You can see two way traffic on that state though.
-
@stephenw10
The top two are the local NTP servers.
-
@stephenw10 said in NTP Issue:
Just go to Diag > States in the webgui and filter by
:123to see the ntp states.You should see a state on the interface connected to the ntp server with no corresponding state on another interface. That will be the state opened from the firewall itself.
It's usually pretty obvious but you likely have a bunch of ntp states so it might be more difficult to spot.
Thanks for that, by the way. I tend to only look and remember exactly what I'm looking for in a list. I had no idea this option was available.
-
That's in 2.7.2? I note the states are shown as on 'all' interfaces. Which should be fine but potentially could hide an asymmetric route. It wouldn't block ntp though.
So it looks like two traffic to both servers. I assume they are still reported as 'unreach'?
I would next run a pcap for that traffic and see what's actually being sent.
If you enable all the logging in ntpd do you see any additional errors?
-
Only error is the bad checksum.
This is logging everything on the OPT2 port because that's all that port does.22:12:10.232164 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 16199, offset 0, flags [none], proto UDP (17), length 76)
172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0x55a7!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.002059, Reference-ID: 0x11fd422d
Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
Originator Timestamp: 3958891863.227000500 (2025-06-14T12:11:03Z)
Receive Timestamp: 3958891863.230474057 (2025-06-14T12:11:03Z)
Transmit Timestamp: 3958891930.232146500 (2025-06-14T12:12:10Z)
Originator - Receive Timestamp: +0.003473557
Originator - Transmit Timestamp: +67.005146000
22:12:10.232256 a6:4c:5e:80:2e:fb > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Ethernet (len 6), IPv4 (len 4), Request who-has 172.16.1.1 tell 172.16.1.2, length 46
22:12:10.232299 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Reply 172.16.1.1 is-at 60:be:b4:07:c6:17, length 28
22:12:10.232450 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49682, offset 0, flags [none], proto UDP (17), length 76)
172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958891930.000000000 (2025-06-14T12:12:10Z)
Originator Timestamp: 3958891930.232146500 (2025-06-14T12:12:10Z)
Receive Timestamp: 3958891930.229000500 (2025-06-14T12:12:10Z)
Transmit Timestamp: 3958891930.229000500 (2025-06-14T12:12:10Z)
Originator - Receive Timestamp: -0.003146000
Originator - Transmit Timestamp: -0.003146000
22:12:18.274942 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 10695, offset 0, flags [none], proto UDP (17), length 76)
172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0x198e!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.002166, Reference-ID: 0x11fd422d
Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
Originator Timestamp: 3958891930.229000500 (2025-06-14T12:12:10Z)
Receive Timestamp: 3958891930.232486680 (2025-06-14T12:12:10Z)
Transmit Timestamp: 3958891938.274935417 (2025-06-14T12:12:18Z)
Originator - Receive Timestamp: +0.003486180
Originator - Transmit Timestamp: +8.045934917
22:12:18.275251 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49683, offset 0, flags [none], proto UDP (17), length 76)
172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958891938.000000000 (2025-06-14T12:12:18Z)
Originator Timestamp: 3958891938.274935417 (2025-06-14T12:12:18Z)
Receive Timestamp: 3958891938.272000500 (2025-06-14T12:12:18Z)
Transmit Timestamp: 3958891938.272000500 (2025-06-14T12:12:18Z)
Originator - Receive Timestamp: -0.002934917
Originator - Transmit Timestamp: -0.002934917
22:12:26.228118 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 61166, offset 0, flags [none], proto UDP (17), length 76)
172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0x043c!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.002288, Reference-ID: 0x11fd422d
Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
Originator Timestamp: 3958891938.272000500 (2025-06-14T12:12:18Z)
Receive Timestamp: 3958891938.275257606 (2025-06-14T12:12:18Z)
Transmit Timestamp: 3958891946.228090332 (2025-06-14T12:12:26Z)
Originator - Receive Timestamp: +0.003257106
Originator - Transmit Timestamp: +7.956089831
22:12:26.228379 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49684, offset 0, flags [none], proto UDP (17), length 76)
172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958891946.000000000 (2025-06-14T12:12:26Z)
Originator Timestamp: 3958891946.228090332 (2025-06-14T12:12:26Z)
Receive Timestamp: 3958891946.225000500 (2025-06-14T12:12:26Z)
Transmit Timestamp: 3958891946.225000500 (2025-06-14T12:12:26Z)
Originator - Receive Timestamp: -0.003089831
Originator - Transmit Timestamp: -0.003089831
22:13:31.239311 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 162, offset 0, flags [none], proto UDP (17), length 76)
172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0xe087!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.003265, Reference-ID: 0x11fd422d
Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
Originator Timestamp: 3958891946.225000500 (2025-06-14T12:12:26Z)
Receive Timestamp: 3958891946.228384771 (2025-06-14T12:12:26Z)
Transmit Timestamp: 3958892011.239279145 (2025-06-14T12:13:31Z)
Originator - Receive Timestamp: +0.003384270
Originator - Transmit Timestamp: +65.014278645
22:13:31.239617 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49685, offset 0, flags [none], proto UDP (17), length 76)
172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958892011.000000000 (2025-06-14T12:13:31Z)
Originator Timestamp: 3958892011.239279145 (2025-06-14T12:13:31Z)
Receive Timestamp: 3958892011.236000500 (2025-06-14T12:13:31Z)
Transmit Timestamp: 3958892011.236000500 (2025-06-14T12:13:31Z)
Originator - Receive Timestamp: -0.003278645
Originator - Transmit Timestamp: -0.003278645
22:13:39.240470 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 17131, offset 0, flags [none], proto UDP (17), length 76)
172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0x8c1b!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.003387, Reference-ID: 0x11fd422d
Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
Originator Timestamp: 3958892011.236000500 (2025-06-14T12:13:31Z)
Receive Timestamp: 3958892011.239621602 (2025-06-14T12:13:31Z)
Transmit Timestamp: 3958892019.240453937 (2025-06-14T12:13:39Z)
Originator - Receive Timestamp: +0.003621102
Originator - Transmit Timestamp: +8.004453436
22:13:39.240810 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49686, offset 0, flags [none], proto UDP (17), length 76)
172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958892019.000000000 (2025-06-14T12:13:39Z)
Originator Timestamp: 3958892019.240453937 (2025-06-14T12:13:39Z)
Receive Timestamp: 3958892019.237000500 (2025-06-14T12:13:39Z)
Transmit Timestamp: 3958892019.237000500 (2025-06-14T12:13:39Z)
Originator - Receive Timestamp: -0.003453436
Originator - Transmit Timestamp: -0.003453436 -
And here's the capture of the Lan port traffic, going to the two timeservers:
22:17:38.249421 60:be:b4:07:c6:16 > d8:b0:4c:ff:0e:18, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 4666, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.254.123 > 192.168.25.250.123: [bad udp cksum 0xb592 -> 0x6c1e!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.002655, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
Originator Timestamp: 3958892193.224999999 (2025-06-14T12:16:33Z)
Receive Timestamp: 3958892193.228976720 (2025-06-14T12:16:33Z)
Transmit Timestamp: 3958892258.249393755 (2025-06-14T12:17:38Z)
Originator - Receive Timestamp: +0.003976720
Originator - Transmit Timestamp: +65.024393755
22:17:38.249703 d8:b0:4c:ff:0e:18 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 13377, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958892258.000000000 (2025-06-14T12:17:38Z)
Originator Timestamp: 3958892258.249393755 (2025-06-14T12:17:38Z)
Receive Timestamp: 3958892258.245999999 (2025-06-14T12:17:38Z)
Transmit Timestamp: 3958892258.245999999 (2025-06-14T12:17:38Z)
Originator - Receive Timestamp: -0.003393755
Originator - Transmit Timestamp: -0.003393755
22:17:39.217297 2a:5d:37:0d:2f:56 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 1383, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.36.54893 > 17.253.66.45.123: [udp sum ok] NTPv4, Client, length 48
Leap indicator: (0), Stratum 0 (unspecified), poll 0 (1s), precision 0
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: (unspec)
Reference Timestamp: 0.000000000
Originator Timestamp: 0.000000000
Receive Timestamp: 0.000000000
Transmit Timestamp: 2607060682.861695140 (1982-08-13T07:31:22Z)
Originator - Receive Timestamp: 0.000000000
Originator - Transmit Timestamp: 2607060682.861695140 (1982-08-13T07:31:22Z)
22:17:39.227452 60:be:b4:07:c6:16 > a6:4c:5e:80:2e:fa, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 21966, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.254.123 > 192.168.25.251.123: [bad udp cksum 0xb593 -> 0xbea7!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.002670, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
Originator Timestamp: 3958892193.225000500 (2025-06-14T12:16:33Z)
Receive Timestamp: 3958892193.229147624 (2025-06-14T12:16:33Z)
Transmit Timestamp: 3958892259.227428212 (2025-06-14T12:17:39Z)
Originator - Receive Timestamp: +0.004147124
Originator - Transmit Timestamp: +66.002427711
22:17:39.227595 a6:4c:5e:80:2e:fa > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 65184, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.251.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958892259.000000000 (2025-06-14T12:17:39Z)
Originator Timestamp: 3958892259.227428212 (2025-06-14T12:17:39Z)
Receive Timestamp: 3958892259.224000500 (2025-06-14T12:17:39Z)
Transmit Timestamp: 3958892259.224000500 (2025-06-14T12:17:39Z)
Originator - Receive Timestamp: -0.003427711
Originator - Transmit Timestamp: -0.003427711
22:17:39.233684 60:be:b4:07:c6:16 > 2a:5d:37:0d:2f:56, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 59, id 10280, offset 0, flags [DF], proto UDP (17), length 76)
17.253.66.45.123 > 192.168.25.36.54893: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 3 (8s), precision -20
Root Delay: 0.000000, Root dispersion: 0.000122, Reference-ID: GPSs
Reference Timestamp: 3958892258.503937548 (2025-06-14T12:17:38Z)
Originator Timestamp: 2607060682.861695140 (1982-08-13T07:31:22Z)
Receive Timestamp: 3958892259.225728201 (2025-06-14T12:17:39Z)
Transmit Timestamp: 3958892259.225741781 (2025-06-14T12:17:39Z)
Originator - Receive Timestamp: +1351831576.364033061
Originator - Transmit Timestamp: +1351831576.364046640
22:17:39.262993 2a:5d:37:0d:2f:56 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 2302, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.36.53981 > 17.253.66.37.123: [udp sum ok] NTPv4, Client, length 48
Leap indicator: (0), Stratum 0 (unspecified), poll 0 (1s), precision 0
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: (unspec)
Reference Timestamp: 0.000000000
Originator Timestamp: 0.000000000
Receive Timestamp: 0.000000000
Transmit Timestamp: 1486433767.158530957 (1947-02-08T02:16:07Z)
Originator - Receive Timestamp: 0.000000000
Originator - Transmit Timestamp: 1486433767.158530957 (1947-02-08T02:16:07Z)
22:17:39.279675 60:be:b4:07:c6:16 > 2a:5d:37:0d:2f:56, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 58, id 63852, offset 0, flags [DF], proto UDP (17), length 76)
17.253.66.37.123 > 192.168.25.36.53981: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 3 (8s), precision -20
Root Delay: 0.000000, Root dispersion: 0.000106, Reference-ID: GPSs
Reference Timestamp: 3958892258.586580157 (2025-06-14T12:17:38Z)
Originator Timestamp: 1486433767.158530957 (1947-02-08T02:16:07Z)
Receive Timestamp: 3958892259.271475841 (2025-06-14T12:17:39Z)
Transmit Timestamp: 3958892259.271506934 (2025-06-14T12:17:39Z)
Originator - Receive Timestamp: +2472458492.112944884
Originator - Transmit Timestamp: +2472458492.112975977
22:17:39.282440 2a:5d:37:0d:2f:56 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 47207, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.36.59010 > 17.253.34.131.123: [udp sum ok] NTPv4, Client, length 48
Leap indicator: (0), Stratum 0 (unspecified), poll 0 (1s), precision 0
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: (unspec)
Reference Timestamp: 0.000000000
Originator Timestamp: 0.000000000
Receive Timestamp: 0.000000000
Transmit Timestamp: 888817167.731403021 (1928-03-02T05:39:27Z)
Originator - Receive Timestamp: 0.000000000
Originator - Transmit Timestamp: 888817167.731403021 (1928-03-02T05:39:27Z)
22:17:39.347506 60:be:b4:07:c6:16 > 2a:5d:37:0d:2f:56, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 56, id 34463, offset 0, flags [DF], proto UDP (17), length 76)
17.253.34.131.123 > 192.168.25.36.59010: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -20
Root Delay: 0.046661, Root dispersion: 0.003402, Reference-ID: 0x11fd3c7d
Reference Timestamp: 3958892202.110501528 (2025-06-14T12:16:42Z)
Originator Timestamp: 888817167.731403021 (1928-03-02T05:39:27Z)
Receive Timestamp: 3958892259.316572026 (2025-06-14T12:17:39Z)
Transmit Timestamp: 3958892259.316599818 (2025-06-14T12:17:39Z)
Originator - Receive Timestamp: +3070075091.585169005
Originator - Transmit Timestamp: +3070075091.585196797
22:17:46.228411 60:be:b4:07:c6:16 > d8:b0:4c:ff:0e:18, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 32253, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.254.123 > 192.168.25.250.123: [bad udp cksum 0xb592 -> 0x1b40!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.002777, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
Originator Timestamp: 3958892258.245999999 (2025-06-14T12:17:38Z)
Receive Timestamp: 3958892258.249772126 (2025-06-14T12:17:38Z)
Transmit Timestamp: 3958892266.228354771 (2025-06-14T12:17:46Z)
Originator - Receive Timestamp: +0.003772126
Originator - Transmit Timestamp: +7.982354772
22:17:46.228526 d8:b0:4c:ff:0e:18 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 13378, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958892266.000000000 (2025-06-14T12:17:46Z)
Originator Timestamp: 3958892266.228354771 (2025-06-14T12:17:46Z)
Receive Timestamp: 3958892266.224999999 (2025-06-14T12:17:46Z)
Transmit Timestamp: 3958892266.224999999 (2025-06-14T12:17:46Z)
Originator - Receive Timestamp: -0.003354771
Originator - Transmit Timestamp: -0.003354771
22:17:47.238448 60:be:b4:07:c6:16 > a6:4c:5e:80:2e:fa, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 10742, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.254.123 > 192.168.25.251.123: [bad udp cksum 0xb593 -> 0xd8a6!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.002792, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
Originator Timestamp: 3958892259.224000500 (2025-06-14T12:17:39Z)
Receive Timestamp: 3958892259.227604256 (2025-06-14T12:17:39Z)
Transmit Timestamp: 3958892267.238438495 (2025-06-14T12:17:47Z)
Originator - Receive Timestamp: +0.003603755
Originator - Transmit Timestamp: +8.014437994
22:17:47.238727 a6:4c:5e:80:2e:fa > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 65187, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.251.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958892267.000000000 (2025-06-14T12:17:47Z)
Originator Timestamp: 3958892267.238438495 (2025-06-14T12:17:47Z)
Receive Timestamp: 3958892267.235000500 (2025-06-14T12:17:47Z)
Transmit Timestamp: 3958892267.235000500 (2025-06-14T12:17:47Z)
Originator - Receive Timestamp: -0.003437994
Originator - Transmit Timestamp: -0.003437994
22:17:54.269921 60:be:b4:07:c6:16 > d8:b0:4c:ff:0e:18, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 47156, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.254.123 > 192.168.25.250.123: [bad udp cksum 0xb592 -> 0x2f0a!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.002899, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
Originator Timestamp: 3958892266.224999999 (2025-06-14T12:17:46Z)
Receive Timestamp: 3958892266.228541070 (2025-06-14T12:17:46Z)
Transmit Timestamp: 3958892274.269898005 (2025-06-14T12:17:54Z)
Originator - Receive Timestamp: +0.003541070
Originator - Transmit Timestamp: +8.044898006
22:17:54.270235 d8:b0:4c:ff:0e:18 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 13379, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958892274.000000000 (2025-06-14T12:17:54Z)
Originator Timestamp: 3958892274.269898005 (2025-06-14T12:17:54Z)
Receive Timestamp: 3958892274.265999999 (2025-06-14T12:17:54Z)
Transmit Timestamp: 3958892274.265999999 (2025-06-14T12:17:54Z)
Originator - Receive Timestamp: -0.003898006
Originator - Transmit Timestamp: -0.003898006
22:17:55.272843 60:be:b4:07:c6:16 > a6:4c:5e:80:2e:fa, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 33470, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.254.123 > 192.168.25.251.123: [bad udp cksum 0xb593 -> 0x6998!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.002914, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
Originator Timestamp: 3958892267.235000500 (2025-06-14T12:17:47Z)
Receive Timestamp: 3958892267.238770176 (2025-06-14T12:17:47Z)
Transmit Timestamp: 3958892275.272812137 (2025-06-14T12:17:55Z)
Originator - Receive Timestamp: +0.003769676
Originator - Transmit Timestamp: +8.037811637
22:17:55.272996 a6:4c:5e:80:2e:fa > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 65189, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.251.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958892275.000000000 (2025-06-14T12:17:55Z)
Originator Timestamp: 3958892275.272812137 (2025-06-14T12:17:55Z)
Receive Timestamp: 3958892275.269000500 (2025-06-14T12:17:55Z)
Transmit Timestamp: 3958892275.269000500 (2025-06-14T12:17:55Z)
Originator - Receive Timestamp: -0.003811637
Originator - Transmit Timestamp: -0.003811637
22:19:01.243785 60:be:b4:07:c6:16 > d8:b0:4c:ff:0e:18, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 1805, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.254.123 > 192.168.25.250.123: [bad udp cksum 0xb592 -> 0xac0e!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.001998, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892274.265999999 (2025-06-14T12:17:54Z)
Receive Timestamp: 3958892274.270245532 (2025-06-14T12:17:54Z)
Transmit Timestamp: 3958892341.243755483 (2025-06-14T12:19:01Z)
Originator - Receive Timestamp: +0.004245532
Originator - Transmit Timestamp: +66.977755483
22:19:01.243922 d8:b0:4c:ff:0e:18 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 13381, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958892341.000000000 (2025-06-14T12:19:01Z)
Originator Timestamp: 3958892341.243755483 (2025-06-14T12:19:01Z)
Receive Timestamp: 3958892341.239999999 (2025-06-14T12:19:01Z)
Transmit Timestamp: 3958892341.239999999 (2025-06-14T12:19:01Z)
Originator - Receive Timestamp: -0.003755483
Originator - Transmit Timestamp: -0.003755483
22:19:02.226808 60:be:b4:07:c6:16 > a6:4c:5e:80:2e:fa, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 4793, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.254.123 > 192.168.25.251.123: [bad udp cksum 0xb593 -> 0x1205!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.002014, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892275.269000500 (2025-06-14T12:17:55Z)
Receive Timestamp: 3958892275.273008134 (2025-06-14T12:17:55Z)
Transmit Timestamp: 3958892342.226786521 (2025-06-14T12:19:02Z)
Originator - Receive Timestamp: +0.004007634
Originator - Transmit Timestamp: +66.957786021
22:19:02.227094 a6:4c:5e:80:2e:fa > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 65198, offset 0, flags [none], proto UDP (17), length 76)
192.168.25.251.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958892342.000000000 (2025-06-14T12:19:02Z)
Originator Timestamp: 3958892342.226786521 (2025-06-14T12:19:02Z)
Receive Timestamp: 3958892342.223000500 (2025-06-14T12:19:02Z)
Transmit Timestamp: 3958892342.223000500 (2025-06-14T12:19:02Z)
Originator - Receive Timestamp: -0.003786021
Originator - Transmit Timestamp: -0.003786021 -
And for the fun of it, here's the WAN NTP traffic.
Also showing bad checksums from other NTP servers. Apparently the firewall doesn't care about that..22:20:58.229920 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 52900, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 202.142.142.241.123: [bad udp cksum 0x990e -> 0xebc5!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.003753, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892392.128213263 (2025-06-14T12:19:52Z)
Receive Timestamp: 3958892392.275234537 (2025-06-14T12:19:52Z)
Transmit Timestamp: 3958892458.229885764 (2025-06-14T12:20:58Z)
Originator - Receive Timestamp: +0.147021274
Originator - Transmit Timestamp: +66.101672501
22:20:58.229938 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 60754, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 133.243.238.163.123: [bad udp cksum 0xb425 -> 0x1290!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.003753, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892394.329359659 (2025-06-14T12:19:54Z)
Receive Timestamp: 3958892394.420018829 (2025-06-14T12:19:54Z)
Transmit Timestamp: 3958892458.229923653 (2025-06-14T12:20:58Z)
Originator - Receive Timestamp: +0.090659169
Originator - Transmit Timestamp: +63.900563993
22:20:58.259536 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 61, id 14244, offset 0, flags [DF], proto UDP (17), length 76)
202.142.142.241.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.037506, Root dispersion: 0.029220, Reference-ID: 0x825fb350
Reference Timestamp: 3958891648.326188020 (2025-06-14T12:07:28Z)
Originator Timestamp: 3958892458.229885764 (2025-06-14T12:20:58Z)
Receive Timestamp: 3958892458.112557404 (2025-06-14T12:20:58Z)
Transmit Timestamp: 3958892458.112651683 (2025-06-14T12:20:58Z)
Originator - Receive Timestamp: -0.117328359
Originator - Transmit Timestamp: -0.117234081
22:20:58.421542 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 44, id 60754, offset 0, flags [none], proto UDP (17), length 76)
133.243.238.163.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: NICT
Reference Timestamp: 3958892458.000000000 (2025-06-14T12:20:58Z)
Originator Timestamp: 3958892458.229923653 (2025-06-14T12:20:58Z)
Receive Timestamp: 3958892458.330598795 (2025-06-14T12:20:58Z)
Transmit Timestamp: 3958892458.330599615 (2025-06-14T12:20:58Z)
Originator - Receive Timestamp: +0.100675142
Originator - Transmit Timestamp: +0.100675962
22:21:02.240681 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 30150, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 119.18.32.153.123: [bad udp cksum 0xd739 -> 0x9588!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.003814, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892397.238710440 (2025-06-14T12:19:57Z)
Receive Timestamp: 3958892397.246481166 (2025-06-14T12:19:57Z)
Transmit Timestamp: 3958892462.240656015 (2025-06-14T12:21:02Z)
Originator - Receive Timestamp: +0.007770725
Originator - Transmit Timestamp: +65.001945574
22:21:02.256288 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 62, id 63983, offset 0, flags [DF], proto UDP (17), length 76)
119.18.32.153.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -23
Root Delay: 0.005630, Root dispersion: 0.031539, Reference-ID: 0xcb2353f2
Reference Timestamp: 3958891441.573316619 (2025-06-14T12:04:01Z)
Originator Timestamp: 3958892462.240656015 (2025-06-14T12:21:02Z)
Receive Timestamp: 3958892462.248680412 (2025-06-14T12:21:02Z)
Transmit Timestamp: 3958892462.248759762 (2025-06-14T12:21:02Z)
Originator - Receive Timestamp: +0.008024397
Originator - Transmit Timestamp: +0.008103747
22:21:03.249090 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 12962, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 216.239.35.8.123: [bad udp cksum 0x3b86 -> 0x971a!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.003829, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892396.301858402 (2025-06-14T12:19:56Z)
Receive Timestamp: 3958892396.383053917 (2025-06-14T12:19:56Z)
Transmit Timestamp: 3958892463.249071196 (2025-06-14T12:21:03Z)
Originator - Receive Timestamp: +0.081195515
Originator - Transmit Timestamp: +66.947212794
22:21:03.403548 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 110, id 1662, offset 0, flags [none], proto UDP (17), length 76)
216.239.35.8.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
Root Delay: 0.000000, Root dispersion: 0.000091, Reference-ID: GOOG
Reference Timestamp: 3958892463.322157275 (2025-06-14T12:21:03Z)
Originator Timestamp: 3958892463.249071196 (2025-06-14T12:21:03Z)
Receive Timestamp: 3958892463.322157275 (2025-06-14T12:21:03Z)
Transmit Timestamp: 3958892463.322157276 (2025-06-14T12:21:03Z)
Originator - Receive Timestamp: +0.073086079
Originator - Transmit Timestamp: +0.073086079
22:21:05.282234 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 49125, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 17.253.66.45.123: [bad udp cksum 0x93b8 -> 0xb597!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.003860, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892400.245805983 (2025-06-14T12:20:00Z)
Receive Timestamp: 3958892400.254081713 (2025-06-14T12:20:00Z)
Transmit Timestamp: 3958892465.282205074 (2025-06-14T12:21:05Z)
Originator - Receive Timestamp: +0.008275730
Originator - Transmit Timestamp: +65.036399091
22:21:05.298334 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 59, id 50905, offset 0, flags [DF], proto UDP (17), length 76)
17.253.66.45.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
Root Delay: 0.000000, Root dispersion: 0.000213, Reference-ID: GPSs
Reference Timestamp: 3958892458.503937934 (2025-06-14T12:20:58Z)
Originator Timestamp: 3958892465.282205074 (2025-06-14T12:21:05Z)
Receive Timestamp: 3958892465.290206828 (2025-06-14T12:21:05Z)
Transmit Timestamp: 3958892465.290219375 (2025-06-14T12:21:05Z)
Originator - Receive Timestamp: +0.008001754
Originator - Transmit Timestamp: +0.008014301
22:22:02.234498 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 55716, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 133.243.238.163.123: [bad udp cksum 0xb425 -> 0x255c!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.004714, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892458.330599615 (2025-06-14T12:20:58Z)
Receive Timestamp: 3958892458.421561986 (2025-06-14T12:20:58Z)
Transmit Timestamp: 3958892522.234478725 (2025-06-14T12:22:02Z)
Originator - Receive Timestamp: +0.090962370
Originator - Transmit Timestamp: +63.903879109
22:22:02.426077 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 44, id 55716, offset 0, flags [none], proto UDP (17), length 76)
133.243.238.163.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: NICT
Reference Timestamp: 3958892522.000000000 (2025-06-14T12:22:02Z)
Originator Timestamp: 3958892522.234478725 (2025-06-14T12:22:02Z)
Receive Timestamp: 3958892522.335119751 (2025-06-14T12:22:02Z)
Transmit Timestamp: 3958892522.335120567 (2025-06-14T12:22:02Z)
Originator - Receive Timestamp: +0.100641026
Originator - Transmit Timestamp: +0.100641842
22:22:05.286725 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 12175, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 202.142.142.241.123: [bad udp cksum 0x990e -> 0xda3f!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.004760, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892458.112651683 (2025-06-14T12:20:58Z)
Receive Timestamp: 3958892458.259548812 (2025-06-14T12:20:58Z)
Transmit Timestamp: 3958892525.286692134 (2025-06-14T12:22:05Z)
Originator - Receive Timestamp: +0.146897129
Originator - Transmit Timestamp: +67.174040451
22:22:05.316314 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 61, id 20583, offset 0, flags [DF], proto UDP (17), length 76)
202.142.142.241.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.037506, Root dispersion: 0.030227, Reference-ID: 0x825fb350
Reference Timestamp: 3958891648.326188020 (2025-06-14T12:07:28Z)
Originator Timestamp: 3958892525.286692134 (2025-06-14T12:22:05Z)
Receive Timestamp: 3958892525.169359020 (2025-06-14T12:22:05Z)
Transmit Timestamp: 3958892525.169375177 (2025-06-14T12:22:05Z)
Originator - Receive Timestamp: -0.117333114
Originator - Transmit Timestamp: -0.117316956
22:22:09.233533 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 59968, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 119.18.32.153.123: [bad udp cksum 0xd739 -> 0x07b2!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.004821, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892462.248759762 (2025-06-14T12:21:02Z)
Receive Timestamp: 3958892462.256305224 (2025-06-14T12:21:02Z)
Transmit Timestamp: 3958892529.233501405 (2025-06-14T12:22:09Z)
Originator - Receive Timestamp: +0.007545461
Originator - Transmit Timestamp: +66.984741642
22:22:09.233551 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 14918, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 216.239.35.8.123: [bad udp cksum 0x3b86 -> 0x9e6f!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.004821, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892463.322157276 (2025-06-14T12:21:03Z)
Receive Timestamp: 3958892463.403602689 (2025-06-14T12:21:03Z)
Transmit Timestamp: 3958892529.233536997 (2025-06-14T12:22:09Z)
Originator - Receive Timestamp: +0.081445412
Originator - Transmit Timestamp: +65.911379721
22:22:09.249623 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 62, id 14995, offset 0, flags [DF], proto UDP (17), length 76)
119.18.32.153.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -23
Root Delay: 0.005630, Root dispersion: 0.032546, Reference-ID: 0xcb2353f2
Reference Timestamp: 3958891441.573316619 (2025-06-14T12:04:01Z)
Originator Timestamp: 3958892529.233501405 (2025-06-14T12:22:09Z)
Receive Timestamp: 3958892529.241532230 (2025-06-14T12:22:09Z)
Transmit Timestamp: 3958892529.241620549 (2025-06-14T12:22:09Z)
Originator - Receive Timestamp: +0.008030824
Originator - Transmit Timestamp: +0.008119143
22:22:09.387909 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 110, id 37264, offset 0, flags [none], proto UDP (17), length 76)
216.239.35.8.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
Root Delay: 0.000000, Root dispersion: 0.000091, Reference-ID: GOOG
Reference Timestamp: 3958892529.306483583 (2025-06-14T12:22:09Z)
Originator Timestamp: 3958892529.233536997 (2025-06-14T12:22:09Z)
Receive Timestamp: 3958892529.306483583 (2025-06-14T12:22:09Z)
Transmit Timestamp: 3958892529.306483584 (2025-06-14T12:22:09Z)
Originator - Receive Timestamp: +0.072946586
Originator - Transmit Timestamp: +0.072946587
22:22:11.234463 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 7726, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 17.253.66.45.123: [bad udp cksum 0x93b8 -> 0xb287!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.004852, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892465.290219375 (2025-06-14T12:21:05Z)
Receive Timestamp: 3958892465.298354612 (2025-06-14T12:21:05Z)
Transmit Timestamp: 3958892531.234427093 (2025-06-14T12:22:11Z)
Originator - Receive Timestamp: +0.008135237
Originator - Transmit Timestamp: +65.944207717
22:22:11.250883 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 59, id 17627, offset 0, flags [DF], proto UDP (17), length 76)
17.253.66.45.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
Root Delay: 0.000000, Root dispersion: 0.000122, Reference-ID: GPSs
Reference Timestamp: 3958892530.503937200 (2025-06-14T12:22:10Z)
Originator Timestamp: 3958892531.234427093 (2025-06-14T12:22:11Z)
Receive Timestamp: 3958892531.243000441 (2025-06-14T12:22:11Z)
Transmit Timestamp: 3958892531.243016021 (2025-06-14T12:22:11Z)
Originator - Receive Timestamp: +0.008573348
Originator - Transmit Timestamp: +0.008588928
22:23:08.229657 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 21750, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 133.243.238.163.123: [bad udp cksum 0xb425 -> 0x0b5d!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.005706, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892522.335120567 (2025-06-14T12:22:02Z)
Receive Timestamp: 3958892522.426089341 (2025-06-14T12:22:02Z)
Transmit Timestamp: 3958892588.229612751 (2025-06-14T12:23:08Z)
Originator - Receive Timestamp: +0.090968774
Originator - Transmit Timestamp: +65.894492184
22:23:08.421862 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 44, id 21750, offset 0, flags [none], proto UDP (17), length 76)
133.243.238.163.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: NICT
Reference Timestamp: 3958892588.000000000 (2025-06-14T12:23:08Z)
Originator Timestamp: 3958892588.229612751 (2025-06-14T12:23:08Z)
Receive Timestamp: 3958892588.330715191 (2025-06-14T12:23:08Z)
Transmit Timestamp: 3958892588.330716011 (2025-06-14T12:23:08Z)
Originator - Receive Timestamp: +0.101102439
Originator - Transmit Timestamp: +0.101103259
22:23:10.234896 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 65244, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 202.142.142.241.123: [bad udp cksum 0x990e -> 0x9657!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.005737, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892525.169375177 (2025-06-14T12:22:05Z)
Receive Timestamp: 3958892525.316333771 (2025-06-14T12:22:05Z)
Transmit Timestamp: 3958892590.234847492 (2025-06-14T12:23:10Z)
Originator - Receive Timestamp: +0.146958594
Originator - Transmit Timestamp: +65.065472315
22:23:10.264576 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 61, id 32639, offset 0, flags [DF], proto UDP (17), length 76)
202.142.142.241.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.037506, Root dispersion: 0.031204, Reference-ID: 0x825fb350
Reference Timestamp: 3958891648.326188020 (2025-06-14T12:07:28Z)
Originator Timestamp: 3958892590.234847492 (2025-06-14T12:23:10Z)
Receive Timestamp: 3958892590.117834528 (2025-06-14T12:23:10Z)
Transmit Timestamp: 3958892590.117907373 (2025-06-14T12:23:10Z)
Originator - Receive Timestamp: -0.117012964
Originator - Transmit Timestamp: -0.116940119
22:23:15.232115 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 2469, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 216.239.35.8.123: [bad udp cksum 0x3b86 -> 0x3d13!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.005813, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892529.306483584 (2025-06-14T12:22:09Z)
Receive Timestamp: 3958892529.387931985 (2025-06-14T12:22:09Z)
Transmit Timestamp: 3958892595.232065980 (2025-06-14T12:23:15Z)
Originator - Receive Timestamp: +0.081448401
Originator - Transmit Timestamp: +65.925582395
22:23:15.232130 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 40710, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 17.253.66.45.123: [bad udp cksum 0x93b8 -> 0xd384!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.005813, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892531.243016021 (2025-06-14T12:22:11Z)
Receive Timestamp: 3958892531.250924171 (2025-06-14T12:22:11Z)
Transmit Timestamp: 3958892595.232121255 (2025-06-14T12:23:15Z)
Originator - Receive Timestamp: +0.007908149
Originator - Transmit Timestamp: +63.989105233
22:23:15.248637 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 59, id 49510, offset 0, flags [DF], proto UDP (17), length 76)
17.253.66.45.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
Root Delay: 0.000000, Root dispersion: 0.000122, Reference-ID: GPSs
Reference Timestamp: 3958892594.503937293 (2025-06-14T12:23:14Z)
Originator Timestamp: 3958892595.232121255 (2025-06-14T12:23:15Z)
Receive Timestamp: 3958892595.240540413 (2025-06-14T12:23:15Z)
Transmit Timestamp: 3958892595.240552865 (2025-06-14T12:23:15Z)
Originator - Receive Timestamp: +0.008419158
Originator - Transmit Timestamp: +0.008431610
22:23:15.387305 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 110, id 11160, offset 0, flags [none], proto UDP (17), length 76)
216.239.35.8.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
Root Delay: 0.000000, Root dispersion: 0.000091, Reference-ID: GOOG
Reference Timestamp: 3958892595.305778679 (2025-06-14T12:23:15Z)
Originator Timestamp: 3958892595.232065980 (2025-06-14T12:23:15Z)
Receive Timestamp: 3958892595.305778679 (2025-06-14T12:23:15Z)
Transmit Timestamp: 3958892595.305778680 (2025-06-14T12:23:15Z)
Originator - Receive Timestamp: +0.073712699
Originator - Transmit Timestamp: +0.073712700
22:23:16.238779 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 55769, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 119.18.32.153.123: [bad udp cksum 0xd739 -> 0x7d66!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.005828, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892529.241620549 (2025-06-14T12:22:09Z)
Receive Timestamp: 3958892529.249632371 (2025-06-14T12:22:09Z)
Transmit Timestamp: 3958892596.238761603 (2025-06-14T12:23:16Z)
Originator - Receive Timestamp: +0.008011822
Originator - Transmit Timestamp: +66.997141053
22:23:16.255205 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 62, id 30504, offset 0, flags [DF], proto UDP (17), length 76)
119.18.32.153.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -23
Root Delay: 0.005630, Root dispersion: 0.033538, Reference-ID: 0xcb2353f2
Reference Timestamp: 3958891441.573316619 (2025-06-14T12:04:01Z)
Originator Timestamp: 3958892596.238761603 (2025-06-14T12:23:16Z)
Receive Timestamp: 3958892596.247557033 (2025-06-14T12:23:16Z)
Transmit Timestamp: 3958892596.247659775 (2025-06-14T12:23:16Z)
Originator - Receive Timestamp: +0.008795430
Originator - Transmit Timestamp: +0.008898172
22:24:15.237591 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 62000, offset 0, flags [none], proto UDP (17), length 76)
144.6.175.62.123 > 133.243.238.163.123: [bad udp cksum 0xb425 -> 0x6068!] NTPv4, Client, length 48
Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
Root Delay: 0.015853, Root dispersion: 0.006713, Reference-ID: 0x11fd422d
Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
Originator Timestamp: 3958892588.330716011 (2025-06-14T12:23:08Z)
Receive Timestamp: 3958892588.421871340 (2025-06-14T12:23:08Z)
Transmit Timestamp: 3958892655.237558802 (2025-06-14T12:24:15Z)
Originator - Receive Timestamp: +0.091155328
Originator - Transmit Timestamp: +66.906842790 -
@admacdo ok this doesn't make much sense
Receive Timestamp: 3958892019.237000500 (2025-06-14T12:13:39Z) Transmit Timestamp: 3958892019.237000500 (2025-06-14T12:13:39Z) Originator - Receive Timestamp: -0.003453436 Originator - Transmit Timestamp: -0.003453436why in your server response are these all exactly the same numbers.. They should have differences.
they are different when you talk to different outside servers.. But the answers from your internal server the numbers are exactly the same.
192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48 Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18 Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@ Reference Timestamp: 3958892341.000000000 (2025-06-14T12:19:01Z) Originator Timestamp: 3958892341.243755483 (2025-06-14T12:19:01Z) Receive Timestamp: 3958892341.239999999 (2025-06-14T12:19:01Z) Transmit Timestamp: 3958892341.239999999 (2025-06-14T12:19:01Z) Originator - Receive Timestamp: -0.003755483 Originator - Transmit Timestamp: -0.003755483that doesn't make sense.. There should be some processing time.. even if it was 0.000000001
edit: here is my pfsense talking to my pi ntp server..
09:20:38.245061 00:08:a2:0c:e6:21 > b8:27:eb:31:70:ab, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 53402, offset 0, flags [none], proto UDP (17), length 76) 192.168.3.253.123 > 192.168.3.32.123: [bad udp cksum 0x88b7 -> 0x1015!] NTPv4, Client, length 48 Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -22 Root Delay: 0.000579, Root dispersion: 0.008697, Reference-ID: 0xc0a80320 Reference Timestamp: 3958899176.245755911 (2025-06-14T14:12:56Z) Originator Timestamp: 3958899571.245464583 (2025-06-14T14:19:31Z) Receive Timestamp: 3958899571.245779985 (2025-06-14T14:19:31Z) Transmit Timestamp: 3958899638.244990223 (2025-06-14T14:20:38Z) Originator - Receive Timestamp: +0.000315401 Originator - Transmit Timestamp: +66.999525640 09:20:38.245749 b8:27:eb:31:70:ab > 00:08:a2:0c:e6:21, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 43159, offset 0, flags [DF], proto UDP (17), length 76) 192.168.3.32.123 > 192.168.3.253.123: [udp sum ok] NTPv4, Server, length 48 Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -24 Root Delay: 0.000015, Root dispersion: 0.000030, Reference-ID: PPS^@ Reference Timestamp: 3958899620.546711021 (2025-06-14T14:20:20Z) Originator Timestamp: 3958899638.244990223 (2025-06-14T14:20:38Z) Receive Timestamp: 3958899638.245283344 (2025-06-14T14:20:38Z) Transmit Timestamp: 3958899638.245454933 (2025-06-14T14:20:38Z) Originator - Receive Timestamp: +0.000293120 Originator - Transmit Timestamp: +0.000464709 09:21:43.245041 00:08:a2:0c:e6:21 > b8:27:eb:31:70:ab, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 25952, offset 0, flags [none], proto UDP (17), length 76) 192.168.3.253.123 > 192.168.3.32.123: [bad udp cksum 0x88b7 -> 0x4b0a!] NTPv4, Client, length 48 Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -22 Root Delay: 0.000579, Root dispersion: 0.009658, Reference-ID: 0xc0a80320 Reference Timestamp: 3958899176.245755911 (2025-06-14T14:12:56Z) Originator Timestamp: 3958899638.245454933 (2025-06-14T14:20:38Z) Receive Timestamp: 3958899638.245768187 (2025-06-14T14:20:38Z) Transmit Timestamp: 3958899703.244977578 (2025-06-14T14:21:43Z) Originator - Receive Timestamp: +0.000313254 Originator - Transmit Timestamp: +64.999522645 09:21:43.245743 b8:27:eb:31:70:ab > 00:08:a2:0c:e6:21, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 43614, offset 0, flags [DF], proto UDP (17), length 76) 192.168.3.32.123 > 192.168.3.253.123: [udp sum ok] NTPv4, Server, length 48 Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -24 Root Delay: 0.000015, Root dispersion: 0.000030, Reference-ID: PPS^@ Reference Timestamp: 3958899683.138522683 (2025-06-14T14:21:23Z) Originator Timestamp: 3958899703.244977578 (2025-06-14T14:21:43Z) Receive Timestamp: 3958899703.245263460 (2025-06-14T14:21:43Z) Transmit Timestamp: 3958899703.245442833 (2025-06-14T14:21:43Z) Originator - Receive Timestamp: +0.000285881 Originator - Transmit Timestamp: +0.000465254 09:22:48.245036 00:08:a2:0c:e6:21 > b8:27:eb:31:70:ab, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 46500, offset 0, flags [none], proto UDP (17), length 76) 192.168.3.253.123 > 192.168.3.32.123: [bad udp cksum 0x88b7 -> 0x7eb2!] NTPv4, Client, length 48 Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -22 Root Delay: 0.000579, Root dispersion: 0.004776, Reference-ID: 0xc0a80320 Reference Timestamp: 3958899703.245761089 (2025-06-14T14:21:43Z) Originator Timestamp: 3958899703.245442833 (2025-06-14T14:21:43Z) Receive Timestamp: 3958899703.245761089 (2025-06-14T14:21:43Z) Transmit Timestamp: 3958899768.244973168 (2025-06-14T14:22:48Z) Originator - Receive Timestamp: +0.000318255 Originator - Transmit Timestamp: +64.999530334 09:22:48.245710 b8:27:eb:31:70:ab > 00:08:a2:0c:e6:21, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 57029, offset 0, flags [DF], proto UDP (17), length 76) 192.168.3.32.123 > 192.168.3.253.123: [udp sum ok] NTPv4, Server, length 48 Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -24 Root Delay: 0.000015, Root dispersion: 0.000030, Reference-ID: PPS^@ Reference Timestamp: 3958899748.174415440 (2025-06-14T14:22:28Z) Originator Timestamp: 3958899768.244973168 (2025-06-14T14:22:48Z) Receive Timestamp: 3958899768.245263888 (2025-06-14T14:22:48Z) Transmit Timestamp: 3958899768.245429649 (2025-06-14T14:22:48Z) Originator - Receive Timestamp: +0.000290720 Originator - Transmit Timestamp: +0.000456481Makes no sense the answer from your ntp server that there is no difference in those numbers..
Also this makes no sense either.. So client talking to the ntp server, gets its answer in .000137 seconds.. So .1 of a ms.. Is your ntp server on the same VM host as your pfsense? How are you sending traffic over ethernet to some other device and getting an answer in .1 of a ms?
Even the best of networks your going to be looking at like .5 of a ms..
so your client (pfsense) talking to your ntp server sent a query over the wire, and got its response in 137 micro seconds.. And your ntp server took not even 1 nano second to process it? Something not right there..
-
Hmm, interesting. I understand it's probably a very good ntp server but....
-
@stephenw10 yeah something is screwy.. Did he say his other client set time off this.. But are they using actual ntp, or just a sntp/timedate sort of client? this just pulls the time at that moment - it doesn't do any sort of adjustments on the client clock to keep them in sync - and doubt it cares about these numbers.. But I know a normal ntp client uses these numbers in calculating delay, etc. Maybe those numbers being the same is throwing off the calculation so ntp doesn't accept the response?
All I know is it seems odd that the ntp server would have exact numbers like that.
