Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NTP Issue

    Scheduled Pinned Locked Moved General pfSense Questions
    98 Posts 11 Posters 15.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator @stephenw10
      last edited by

      @stephenw10 said in NTP Issue:

      But also checking the outbound ntp state on the firewall. That must show two way traffic if replies are coming back and being passed.

      Yup that is a very simple sanity check for sure.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • A
        admacdo @stephenw10
        last edited by

        @stephenw10
        The thought occurred to me that the easiest way to ensure that the firewall can actually see the traffic is to let the NTPmonitor running on my workstation, query the second port of the NTP server via OPT2.

        There are no other paths to get to it, as it's one ethernet cable joining the firewall to the NTP server.

        NTPmonitor found it instantly, and can poll it constantly, so that traffic is going back and forth through the port on the firewall, and is also being routed from the LAN port to the OPT2 port and back, by the firewall.
        This tends to suggest to me that there are no firewall rules obstructing it and the traffic is just fine.

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @admacdo
          last edited by

          @admacdo and what does your states show - there is a difference from sending a query from a different network. For when pfsense asks?

          If you do not see return traffic via the state - then for some reason that traffic was not processed.. Even if there was something as you mention in the kernel - which is no way the issue.. The state would still be listed as traffic was returned.

          While its clear there is something going on - nobody else that I am aware has been able to duplicate the problem.. pfsense talks to my ntp server just fine. Steve can not duplicate it either.

          But if your state is not showing return traffic - then the ntp client which is farther up the stack, if the firewall isn't allowing it via completion of the state. The ntp client would never see it.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          A 1 Reply Last reply Reply Quote 0
          • A
            admacdo @johnpoz
            last edited by

            @johnpoz
            Can we pretend (or not pretend)at this point that I'm an idiot and demo the commands I can put in a command line to show this information?

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by stephenw10

              Just go to Diag > States in the webgui and filter by :123 to see the ntp states.

              You should see a state on the interface connected to the ntp server with no corresponding state on another interface. That will be the state opened from the firewall itself.

              It's usually pretty obvious but you likely have a bunch of ntp states so it might be more difficult to spot.

              Screenshot from 2025-06-14 11-27-36.png

              A 1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                I note that the states can timeout so may not always be there. I restarted ntpd to force it to reach out to get that screenshot. But you could just wait. You can see two way traffic on that state though.

                A 1 Reply Last reply Reply Quote 0
                • A
                  admacdo @stephenw10
                  last edited by

                  @stephenw10
                  The top two are the local NTP servers.

                  30cd8fb9-3af6-4dfa-9f89-f0e00041e407-image.png

                  1 Reply Last reply Reply Quote 0
                  • A
                    admacdo @stephenw10
                    last edited by

                    @stephenw10 said in NTP Issue:

                    Just go to Diag > States in the webgui and filter by :123 to see the ntp states.

                    You should see a state on the interface connected to the ntp server with no corresponding state on another interface. That will be the state opened from the firewall itself.

                    It's usually pretty obvious but you likely have a bunch of ntp states so it might be more difficult to spot.

                    Thanks for that, by the way. I tend to only look and remember exactly what I'm looking for in a list. I had no idea this option was available.

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      That's in 2.7.2? I note the states are shown as on 'all' interfaces. Which should be fine but potentially could hide an asymmetric route. It wouldn't block ntp though.

                      So it looks like two traffic to both servers. I assume they are still reported as 'unreach'?

                      I would next run a pcap for that traffic and see what's actually being sent.

                      If you enable all the logging in ntpd do you see any additional errors?

                      A 1 Reply Last reply Reply Quote 0
                      • A
                        admacdo @stephenw10
                        last edited by

                        @stephenw10

                        Only error is the bad checksum.
                        This is logging everything on the OPT2 port because that's all that port does.

                        22:12:10.232164 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 16199, offset 0, flags [none], proto UDP (17), length 76)
                        172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0x55a7!] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                        Root Delay: 0.015853, Root dispersion: 0.002059, Reference-ID: 0x11fd422d
                        Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
                        Originator Timestamp: 3958891863.227000500 (2025-06-14T12:11:03Z)
                        Receive Timestamp: 3958891863.230474057 (2025-06-14T12:11:03Z)
                        Transmit Timestamp: 3958891930.232146500 (2025-06-14T12:12:10Z)
                        Originator - Receive Timestamp: +0.003473557
                        Originator - Transmit Timestamp: +67.005146000
                        22:12:10.232256 a6:4c:5e:80:2e:fb > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Ethernet (len 6), IPv4 (len 4), Request who-has 172.16.1.1 tell 172.16.1.2, length 46
                        22:12:10.232299 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Reply 172.16.1.1 is-at 60:be:b4:07:c6:17, length 28
                        22:12:10.232450 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49682, offset 0, flags [none], proto UDP (17), length 76)
                        172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                        Reference Timestamp: 3958891930.000000000 (2025-06-14T12:12:10Z)
                        Originator Timestamp: 3958891930.232146500 (2025-06-14T12:12:10Z)
                        Receive Timestamp: 3958891930.229000500 (2025-06-14T12:12:10Z)
                        Transmit Timestamp: 3958891930.229000500 (2025-06-14T12:12:10Z)
                        Originator - Receive Timestamp: -0.003146000
                        Originator - Transmit Timestamp: -0.003146000
                        22:12:18.274942 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 10695, offset 0, flags [none], proto UDP (17), length 76)
                        172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0x198e!] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                        Root Delay: 0.015853, Root dispersion: 0.002166, Reference-ID: 0x11fd422d
                        Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
                        Originator Timestamp: 3958891930.229000500 (2025-06-14T12:12:10Z)
                        Receive Timestamp: 3958891930.232486680 (2025-06-14T12:12:10Z)
                        Transmit Timestamp: 3958891938.274935417 (2025-06-14T12:12:18Z)
                        Originator - Receive Timestamp: +0.003486180
                        Originator - Transmit Timestamp: +8.045934917
                        22:12:18.275251 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49683, offset 0, flags [none], proto UDP (17), length 76)
                        172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                        Reference Timestamp: 3958891938.000000000 (2025-06-14T12:12:18Z)
                        Originator Timestamp: 3958891938.274935417 (2025-06-14T12:12:18Z)
                        Receive Timestamp: 3958891938.272000500 (2025-06-14T12:12:18Z)
                        Transmit Timestamp: 3958891938.272000500 (2025-06-14T12:12:18Z)
                        Originator - Receive Timestamp: -0.002934917
                        Originator - Transmit Timestamp: -0.002934917
                        22:12:26.228118 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 61166, offset 0, flags [none], proto UDP (17), length 76)
                        172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0x043c!] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                        Root Delay: 0.015853, Root dispersion: 0.002288, Reference-ID: 0x11fd422d
                        Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
                        Originator Timestamp: 3958891938.272000500 (2025-06-14T12:12:18Z)
                        Receive Timestamp: 3958891938.275257606 (2025-06-14T12:12:18Z)
                        Transmit Timestamp: 3958891946.228090332 (2025-06-14T12:12:26Z)
                        Originator - Receive Timestamp: +0.003257106
                        Originator - Transmit Timestamp: +7.956089831
                        22:12:26.228379 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49684, offset 0, flags [none], proto UDP (17), length 76)
                        172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                        Reference Timestamp: 3958891946.000000000 (2025-06-14T12:12:26Z)
                        Originator Timestamp: 3958891946.228090332 (2025-06-14T12:12:26Z)
                        Receive Timestamp: 3958891946.225000500 (2025-06-14T12:12:26Z)
                        Transmit Timestamp: 3958891946.225000500 (2025-06-14T12:12:26Z)
                        Originator - Receive Timestamp: -0.003089831
                        Originator - Transmit Timestamp: -0.003089831
                        22:13:31.239311 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 162, offset 0, flags [none], proto UDP (17), length 76)
                        172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0xe087!] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                        Root Delay: 0.015853, Root dispersion: 0.003265, Reference-ID: 0x11fd422d
                        Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
                        Originator Timestamp: 3958891946.225000500 (2025-06-14T12:12:26Z)
                        Receive Timestamp: 3958891946.228384771 (2025-06-14T12:12:26Z)
                        Transmit Timestamp: 3958892011.239279145 (2025-06-14T12:13:31Z)
                        Originator - Receive Timestamp: +0.003384270
                        Originator - Transmit Timestamp: +65.014278645
                        22:13:31.239617 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49685, offset 0, flags [none], proto UDP (17), length 76)
                        172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                        Reference Timestamp: 3958892011.000000000 (2025-06-14T12:13:31Z)
                        Originator Timestamp: 3958892011.239279145 (2025-06-14T12:13:31Z)
                        Receive Timestamp: 3958892011.236000500 (2025-06-14T12:13:31Z)
                        Transmit Timestamp: 3958892011.236000500 (2025-06-14T12:13:31Z)
                        Originator - Receive Timestamp: -0.003278645
                        Originator - Transmit Timestamp: -0.003278645
                        22:13:39.240470 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 17131, offset 0, flags [none], proto UDP (17), length 76)
                        172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0x8c1b!] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                        Root Delay: 0.015853, Root dispersion: 0.003387, Reference-ID: 0x11fd422d
                        Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
                        Originator Timestamp: 3958892011.236000500 (2025-06-14T12:13:31Z)
                        Receive Timestamp: 3958892011.239621602 (2025-06-14T12:13:31Z)
                        Transmit Timestamp: 3958892019.240453937 (2025-06-14T12:13:39Z)
                        Originator - Receive Timestamp: +0.003621102
                        Originator - Transmit Timestamp: +8.004453436
                        22:13:39.240810 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49686, offset 0, flags [none], proto UDP (17), length 76)
                        172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                        Reference Timestamp: 3958892019.000000000 (2025-06-14T12:13:39Z)
                        Originator Timestamp: 3958892019.240453937 (2025-06-14T12:13:39Z)
                        Receive Timestamp: 3958892019.237000500 (2025-06-14T12:13:39Z)
                        Transmit Timestamp: 3958892019.237000500 (2025-06-14T12:13:39Z)
                        Originator - Receive Timestamp: -0.003453436
                        Originator - Transmit Timestamp: -0.003453436

                        A 1 Reply Last reply Reply Quote 0
                        • A
                          admacdo @admacdo
                          last edited by

                          And here's the capture of the Lan port traffic, going to the two timeservers:

                          22:17:38.249421 60:be:b4:07:c6:16 > d8:b0:4c:ff:0e:18, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 4666, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.254.123 > 192.168.25.250.123: [bad udp cksum 0xb592 -> 0x6c1e!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.002655, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
                          Originator Timestamp: 3958892193.224999999 (2025-06-14T12:16:33Z)
                          Receive Timestamp: 3958892193.228976720 (2025-06-14T12:16:33Z)
                          Transmit Timestamp: 3958892258.249393755 (2025-06-14T12:17:38Z)
                          Originator - Receive Timestamp: +0.003976720
                          Originator - Transmit Timestamp: +65.024393755
                          22:17:38.249703 d8:b0:4c:ff:0e:18 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 13377, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                          Reference Timestamp: 3958892258.000000000 (2025-06-14T12:17:38Z)
                          Originator Timestamp: 3958892258.249393755 (2025-06-14T12:17:38Z)
                          Receive Timestamp: 3958892258.245999999 (2025-06-14T12:17:38Z)
                          Transmit Timestamp: 3958892258.245999999 (2025-06-14T12:17:38Z)
                          Originator - Receive Timestamp: -0.003393755
                          Originator - Transmit Timestamp: -0.003393755
                          22:17:39.217297 2a:5d:37:0d:2f:56 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 1383, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.36.54893 > 17.253.66.45.123: [udp sum ok] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 0 (unspecified), poll 0 (1s), precision 0
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: (unspec)
                          Reference Timestamp: 0.000000000
                          Originator Timestamp: 0.000000000
                          Receive Timestamp: 0.000000000
                          Transmit Timestamp: 2607060682.861695140 (1982-08-13T07:31:22Z)
                          Originator - Receive Timestamp: 0.000000000
                          Originator - Transmit Timestamp: 2607060682.861695140 (1982-08-13T07:31:22Z)
                          22:17:39.227452 60:be:b4:07:c6:16 > a6:4c:5e:80:2e:fa, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 21966, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.254.123 > 192.168.25.251.123: [bad udp cksum 0xb593 -> 0xbea7!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.002670, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
                          Originator Timestamp: 3958892193.225000500 (2025-06-14T12:16:33Z)
                          Receive Timestamp: 3958892193.229147624 (2025-06-14T12:16:33Z)
                          Transmit Timestamp: 3958892259.227428212 (2025-06-14T12:17:39Z)
                          Originator - Receive Timestamp: +0.004147124
                          Originator - Transmit Timestamp: +66.002427711
                          22:17:39.227595 a6:4c:5e:80:2e:fa > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 65184, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.251.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                          Reference Timestamp: 3958892259.000000000 (2025-06-14T12:17:39Z)
                          Originator Timestamp: 3958892259.227428212 (2025-06-14T12:17:39Z)
                          Receive Timestamp: 3958892259.224000500 (2025-06-14T12:17:39Z)
                          Transmit Timestamp: 3958892259.224000500 (2025-06-14T12:17:39Z)
                          Originator - Receive Timestamp: -0.003427711
                          Originator - Transmit Timestamp: -0.003427711
                          22:17:39.233684 60:be:b4:07:c6:16 > 2a:5d:37:0d:2f:56, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 59, id 10280, offset 0, flags [DF], proto UDP (17), length 76)
                          17.253.66.45.123 > 192.168.25.36.54893: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 3 (8s), precision -20
                          Root Delay: 0.000000, Root dispersion: 0.000122, Reference-ID: GPSs
                          Reference Timestamp: 3958892258.503937548 (2025-06-14T12:17:38Z)
                          Originator Timestamp: 2607060682.861695140 (1982-08-13T07:31:22Z)
                          Receive Timestamp: 3958892259.225728201 (2025-06-14T12:17:39Z)
                          Transmit Timestamp: 3958892259.225741781 (2025-06-14T12:17:39Z)
                          Originator - Receive Timestamp: +1351831576.364033061
                          Originator - Transmit Timestamp: +1351831576.364046640
                          22:17:39.262993 2a:5d:37:0d:2f:56 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 2302, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.36.53981 > 17.253.66.37.123: [udp sum ok] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 0 (unspecified), poll 0 (1s), precision 0
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: (unspec)
                          Reference Timestamp: 0.000000000
                          Originator Timestamp: 0.000000000
                          Receive Timestamp: 0.000000000
                          Transmit Timestamp: 1486433767.158530957 (1947-02-08T02:16:07Z)
                          Originator - Receive Timestamp: 0.000000000
                          Originator - Transmit Timestamp: 1486433767.158530957 (1947-02-08T02:16:07Z)
                          22:17:39.279675 60:be:b4:07:c6:16 > 2a:5d:37:0d:2f:56, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 58, id 63852, offset 0, flags [DF], proto UDP (17), length 76)
                          17.253.66.37.123 > 192.168.25.36.53981: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 3 (8s), precision -20
                          Root Delay: 0.000000, Root dispersion: 0.000106, Reference-ID: GPSs
                          Reference Timestamp: 3958892258.586580157 (2025-06-14T12:17:38Z)
                          Originator Timestamp: 1486433767.158530957 (1947-02-08T02:16:07Z)
                          Receive Timestamp: 3958892259.271475841 (2025-06-14T12:17:39Z)
                          Transmit Timestamp: 3958892259.271506934 (2025-06-14T12:17:39Z)
                          Originator - Receive Timestamp: +2472458492.112944884
                          Originator - Transmit Timestamp: +2472458492.112975977
                          22:17:39.282440 2a:5d:37:0d:2f:56 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 47207, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.36.59010 > 17.253.34.131.123: [udp sum ok] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 0 (unspecified), poll 0 (1s), precision 0
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: (unspec)
                          Reference Timestamp: 0.000000000
                          Originator Timestamp: 0.000000000
                          Receive Timestamp: 0.000000000
                          Transmit Timestamp: 888817167.731403021 (1928-03-02T05:39:27Z)
                          Originator - Receive Timestamp: 0.000000000
                          Originator - Transmit Timestamp: 888817167.731403021 (1928-03-02T05:39:27Z)
                          22:17:39.347506 60:be:b4:07:c6:16 > 2a:5d:37:0d:2f:56, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 56, id 34463, offset 0, flags [DF], proto UDP (17), length 76)
                          17.253.34.131.123 > 192.168.25.36.59010: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -20
                          Root Delay: 0.046661, Root dispersion: 0.003402, Reference-ID: 0x11fd3c7d
                          Reference Timestamp: 3958892202.110501528 (2025-06-14T12:16:42Z)
                          Originator Timestamp: 888817167.731403021 (1928-03-02T05:39:27Z)
                          Receive Timestamp: 3958892259.316572026 (2025-06-14T12:17:39Z)
                          Transmit Timestamp: 3958892259.316599818 (2025-06-14T12:17:39Z)
                          Originator - Receive Timestamp: +3070075091.585169005
                          Originator - Transmit Timestamp: +3070075091.585196797
                          22:17:46.228411 60:be:b4:07:c6:16 > d8:b0:4c:ff:0e:18, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 32253, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.254.123 > 192.168.25.250.123: [bad udp cksum 0xb592 -> 0x1b40!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.002777, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
                          Originator Timestamp: 3958892258.245999999 (2025-06-14T12:17:38Z)
                          Receive Timestamp: 3958892258.249772126 (2025-06-14T12:17:38Z)
                          Transmit Timestamp: 3958892266.228354771 (2025-06-14T12:17:46Z)
                          Originator - Receive Timestamp: +0.003772126
                          Originator - Transmit Timestamp: +7.982354772
                          22:17:46.228526 d8:b0:4c:ff:0e:18 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 13378, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                          Reference Timestamp: 3958892266.000000000 (2025-06-14T12:17:46Z)
                          Originator Timestamp: 3958892266.228354771 (2025-06-14T12:17:46Z)
                          Receive Timestamp: 3958892266.224999999 (2025-06-14T12:17:46Z)
                          Transmit Timestamp: 3958892266.224999999 (2025-06-14T12:17:46Z)
                          Originator - Receive Timestamp: -0.003354771
                          Originator - Transmit Timestamp: -0.003354771
                          22:17:47.238448 60:be:b4:07:c6:16 > a6:4c:5e:80:2e:fa, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 10742, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.254.123 > 192.168.25.251.123: [bad udp cksum 0xb593 -> 0xd8a6!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.002792, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
                          Originator Timestamp: 3958892259.224000500 (2025-06-14T12:17:39Z)
                          Receive Timestamp: 3958892259.227604256 (2025-06-14T12:17:39Z)
                          Transmit Timestamp: 3958892267.238438495 (2025-06-14T12:17:47Z)
                          Originator - Receive Timestamp: +0.003603755
                          Originator - Transmit Timestamp: +8.014437994
                          22:17:47.238727 a6:4c:5e:80:2e:fa > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 65187, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.251.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                          Reference Timestamp: 3958892267.000000000 (2025-06-14T12:17:47Z)
                          Originator Timestamp: 3958892267.238438495 (2025-06-14T12:17:47Z)
                          Receive Timestamp: 3958892267.235000500 (2025-06-14T12:17:47Z)
                          Transmit Timestamp: 3958892267.235000500 (2025-06-14T12:17:47Z)
                          Originator - Receive Timestamp: -0.003437994
                          Originator - Transmit Timestamp: -0.003437994
                          22:17:54.269921 60:be:b4:07:c6:16 > d8:b0:4c:ff:0e:18, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 47156, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.254.123 > 192.168.25.250.123: [bad udp cksum 0xb592 -> 0x2f0a!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.002899, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
                          Originator Timestamp: 3958892266.224999999 (2025-06-14T12:17:46Z)
                          Receive Timestamp: 3958892266.228541070 (2025-06-14T12:17:46Z)
                          Transmit Timestamp: 3958892274.269898005 (2025-06-14T12:17:54Z)
                          Originator - Receive Timestamp: +0.003541070
                          Originator - Transmit Timestamp: +8.044898006
                          22:17:54.270235 d8:b0:4c:ff:0e:18 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 13379, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                          Reference Timestamp: 3958892274.000000000 (2025-06-14T12:17:54Z)
                          Originator Timestamp: 3958892274.269898005 (2025-06-14T12:17:54Z)
                          Receive Timestamp: 3958892274.265999999 (2025-06-14T12:17:54Z)
                          Transmit Timestamp: 3958892274.265999999 (2025-06-14T12:17:54Z)
                          Originator - Receive Timestamp: -0.003898006
                          Originator - Transmit Timestamp: -0.003898006
                          22:17:55.272843 60:be:b4:07:c6:16 > a6:4c:5e:80:2e:fa, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 33470, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.254.123 > 192.168.25.251.123: [bad udp cksum 0xb593 -> 0x6998!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.002914, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
                          Originator Timestamp: 3958892267.235000500 (2025-06-14T12:17:47Z)
                          Receive Timestamp: 3958892267.238770176 (2025-06-14T12:17:47Z)
                          Transmit Timestamp: 3958892275.272812137 (2025-06-14T12:17:55Z)
                          Originator - Receive Timestamp: +0.003769676
                          Originator - Transmit Timestamp: +8.037811637
                          22:17:55.272996 a6:4c:5e:80:2e:fa > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 65189, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.251.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                          Reference Timestamp: 3958892275.000000000 (2025-06-14T12:17:55Z)
                          Originator Timestamp: 3958892275.272812137 (2025-06-14T12:17:55Z)
                          Receive Timestamp: 3958892275.269000500 (2025-06-14T12:17:55Z)
                          Transmit Timestamp: 3958892275.269000500 (2025-06-14T12:17:55Z)
                          Originator - Receive Timestamp: -0.003811637
                          Originator - Transmit Timestamp: -0.003811637
                          22:19:01.243785 60:be:b4:07:c6:16 > d8:b0:4c:ff:0e:18, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 1805, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.254.123 > 192.168.25.250.123: [bad udp cksum 0xb592 -> 0xac0e!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.001998, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892274.265999999 (2025-06-14T12:17:54Z)
                          Receive Timestamp: 3958892274.270245532 (2025-06-14T12:17:54Z)
                          Transmit Timestamp: 3958892341.243755483 (2025-06-14T12:19:01Z)
                          Originator - Receive Timestamp: +0.004245532
                          Originator - Transmit Timestamp: +66.977755483
                          22:19:01.243922 d8:b0:4c:ff:0e:18 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 13381, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                          Reference Timestamp: 3958892341.000000000 (2025-06-14T12:19:01Z)
                          Originator Timestamp: 3958892341.243755483 (2025-06-14T12:19:01Z)
                          Receive Timestamp: 3958892341.239999999 (2025-06-14T12:19:01Z)
                          Transmit Timestamp: 3958892341.239999999 (2025-06-14T12:19:01Z)
                          Originator - Receive Timestamp: -0.003755483
                          Originator - Transmit Timestamp: -0.003755483
                          22:19:02.226808 60:be:b4:07:c6:16 > a6:4c:5e:80:2e:fa, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 4793, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.254.123 > 192.168.25.251.123: [bad udp cksum 0xb593 -> 0x1205!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.002014, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892275.269000500 (2025-06-14T12:17:55Z)
                          Receive Timestamp: 3958892275.273008134 (2025-06-14T12:17:55Z)
                          Transmit Timestamp: 3958892342.226786521 (2025-06-14T12:19:02Z)
                          Originator - Receive Timestamp: +0.004007634
                          Originator - Transmit Timestamp: +66.957786021
                          22:19:02.227094 a6:4c:5e:80:2e:fa > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 65198, offset 0, flags [none], proto UDP (17), length 76)
                          192.168.25.251.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                          Reference Timestamp: 3958892342.000000000 (2025-06-14T12:19:02Z)
                          Originator Timestamp: 3958892342.226786521 (2025-06-14T12:19:02Z)
                          Receive Timestamp: 3958892342.223000500 (2025-06-14T12:19:02Z)
                          Transmit Timestamp: 3958892342.223000500 (2025-06-14T12:19:02Z)
                          Originator - Receive Timestamp: -0.003786021
                          Originator - Transmit Timestamp: -0.003786021

                          A 1 Reply Last reply Reply Quote 0
                          • A
                            admacdo @admacdo
                            last edited by

                            And for the fun of it, here's the WAN NTP traffic.
                            Also showing bad checksums from other NTP servers. Apparently the firewall doesn't care about that..

                            22:20:58.229920 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 52900, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 202.142.142.241.123: [bad udp cksum 0x990e -> 0xebc5!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.003753, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892392.128213263 (2025-06-14T12:19:52Z)
                            Receive Timestamp: 3958892392.275234537 (2025-06-14T12:19:52Z)
                            Transmit Timestamp: 3958892458.229885764 (2025-06-14T12:20:58Z)
                            Originator - Receive Timestamp: +0.147021274
                            Originator - Transmit Timestamp: +66.101672501
                            22:20:58.229938 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 60754, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 133.243.238.163.123: [bad udp cksum 0xb425 -> 0x1290!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.003753, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892394.329359659 (2025-06-14T12:19:54Z)
                            Receive Timestamp: 3958892394.420018829 (2025-06-14T12:19:54Z)
                            Transmit Timestamp: 3958892458.229923653 (2025-06-14T12:20:58Z)
                            Originator - Receive Timestamp: +0.090659169
                            Originator - Transmit Timestamp: +63.900563993
                            22:20:58.259536 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 61, id 14244, offset 0, flags [DF], proto UDP (17), length 76)
                            202.142.142.241.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.037506, Root dispersion: 0.029220, Reference-ID: 0x825fb350
                            Reference Timestamp: 3958891648.326188020 (2025-06-14T12:07:28Z)
                            Originator Timestamp: 3958892458.229885764 (2025-06-14T12:20:58Z)
                            Receive Timestamp: 3958892458.112557404 (2025-06-14T12:20:58Z)
                            Transmit Timestamp: 3958892458.112651683 (2025-06-14T12:20:58Z)
                            Originator - Receive Timestamp: -0.117328359
                            Originator - Transmit Timestamp: -0.117234081
                            22:20:58.421542 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 44, id 60754, offset 0, flags [none], proto UDP (17), length 76)
                            133.243.238.163.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                            Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: NICT
                            Reference Timestamp: 3958892458.000000000 (2025-06-14T12:20:58Z)
                            Originator Timestamp: 3958892458.229923653 (2025-06-14T12:20:58Z)
                            Receive Timestamp: 3958892458.330598795 (2025-06-14T12:20:58Z)
                            Transmit Timestamp: 3958892458.330599615 (2025-06-14T12:20:58Z)
                            Originator - Receive Timestamp: +0.100675142
                            Originator - Transmit Timestamp: +0.100675962
                            22:21:02.240681 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 30150, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 119.18.32.153.123: [bad udp cksum 0xd739 -> 0x9588!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.003814, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892397.238710440 (2025-06-14T12:19:57Z)
                            Receive Timestamp: 3958892397.246481166 (2025-06-14T12:19:57Z)
                            Transmit Timestamp: 3958892462.240656015 (2025-06-14T12:21:02Z)
                            Originator - Receive Timestamp: +0.007770725
                            Originator - Transmit Timestamp: +65.001945574
                            22:21:02.256288 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 62, id 63983, offset 0, flags [DF], proto UDP (17), length 76)
                            119.18.32.153.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -23
                            Root Delay: 0.005630, Root dispersion: 0.031539, Reference-ID: 0xcb2353f2
                            Reference Timestamp: 3958891441.573316619 (2025-06-14T12:04:01Z)
                            Originator Timestamp: 3958892462.240656015 (2025-06-14T12:21:02Z)
                            Receive Timestamp: 3958892462.248680412 (2025-06-14T12:21:02Z)
                            Transmit Timestamp: 3958892462.248759762 (2025-06-14T12:21:02Z)
                            Originator - Receive Timestamp: +0.008024397
                            Originator - Transmit Timestamp: +0.008103747
                            22:21:03.249090 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 12962, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 216.239.35.8.123: [bad udp cksum 0x3b86 -> 0x971a!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.003829, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892396.301858402 (2025-06-14T12:19:56Z)
                            Receive Timestamp: 3958892396.383053917 (2025-06-14T12:19:56Z)
                            Transmit Timestamp: 3958892463.249071196 (2025-06-14T12:21:03Z)
                            Originator - Receive Timestamp: +0.081195515
                            Originator - Transmit Timestamp: +66.947212794
                            22:21:03.403548 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 110, id 1662, offset 0, flags [none], proto UDP (17), length 76)
                            216.239.35.8.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                            Root Delay: 0.000000, Root dispersion: 0.000091, Reference-ID: GOOG
                            Reference Timestamp: 3958892463.322157275 (2025-06-14T12:21:03Z)
                            Originator Timestamp: 3958892463.249071196 (2025-06-14T12:21:03Z)
                            Receive Timestamp: 3958892463.322157275 (2025-06-14T12:21:03Z)
                            Transmit Timestamp: 3958892463.322157276 (2025-06-14T12:21:03Z)
                            Originator - Receive Timestamp: +0.073086079
                            Originator - Transmit Timestamp: +0.073086079
                            22:21:05.282234 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 49125, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 17.253.66.45.123: [bad udp cksum 0x93b8 -> 0xb597!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.003860, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892400.245805983 (2025-06-14T12:20:00Z)
                            Receive Timestamp: 3958892400.254081713 (2025-06-14T12:20:00Z)
                            Transmit Timestamp: 3958892465.282205074 (2025-06-14T12:21:05Z)
                            Originator - Receive Timestamp: +0.008275730
                            Originator - Transmit Timestamp: +65.036399091
                            22:21:05.298334 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 59, id 50905, offset 0, flags [DF], proto UDP (17), length 76)
                            17.253.66.45.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                            Root Delay: 0.000000, Root dispersion: 0.000213, Reference-ID: GPSs
                            Reference Timestamp: 3958892458.503937934 (2025-06-14T12:20:58Z)
                            Originator Timestamp: 3958892465.282205074 (2025-06-14T12:21:05Z)
                            Receive Timestamp: 3958892465.290206828 (2025-06-14T12:21:05Z)
                            Transmit Timestamp: 3958892465.290219375 (2025-06-14T12:21:05Z)
                            Originator - Receive Timestamp: +0.008001754
                            Originator - Transmit Timestamp: +0.008014301
                            22:22:02.234498 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 55716, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 133.243.238.163.123: [bad udp cksum 0xb425 -> 0x255c!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.004714, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892458.330599615 (2025-06-14T12:20:58Z)
                            Receive Timestamp: 3958892458.421561986 (2025-06-14T12:20:58Z)
                            Transmit Timestamp: 3958892522.234478725 (2025-06-14T12:22:02Z)
                            Originator - Receive Timestamp: +0.090962370
                            Originator - Transmit Timestamp: +63.903879109
                            22:22:02.426077 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 44, id 55716, offset 0, flags [none], proto UDP (17), length 76)
                            133.243.238.163.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                            Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: NICT
                            Reference Timestamp: 3958892522.000000000 (2025-06-14T12:22:02Z)
                            Originator Timestamp: 3958892522.234478725 (2025-06-14T12:22:02Z)
                            Receive Timestamp: 3958892522.335119751 (2025-06-14T12:22:02Z)
                            Transmit Timestamp: 3958892522.335120567 (2025-06-14T12:22:02Z)
                            Originator - Receive Timestamp: +0.100641026
                            Originator - Transmit Timestamp: +0.100641842
                            22:22:05.286725 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 12175, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 202.142.142.241.123: [bad udp cksum 0x990e -> 0xda3f!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.004760, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892458.112651683 (2025-06-14T12:20:58Z)
                            Receive Timestamp: 3958892458.259548812 (2025-06-14T12:20:58Z)
                            Transmit Timestamp: 3958892525.286692134 (2025-06-14T12:22:05Z)
                            Originator - Receive Timestamp: +0.146897129
                            Originator - Transmit Timestamp: +67.174040451
                            22:22:05.316314 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 61, id 20583, offset 0, flags [DF], proto UDP (17), length 76)
                            202.142.142.241.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.037506, Root dispersion: 0.030227, Reference-ID: 0x825fb350
                            Reference Timestamp: 3958891648.326188020 (2025-06-14T12:07:28Z)
                            Originator Timestamp: 3958892525.286692134 (2025-06-14T12:22:05Z)
                            Receive Timestamp: 3958892525.169359020 (2025-06-14T12:22:05Z)
                            Transmit Timestamp: 3958892525.169375177 (2025-06-14T12:22:05Z)
                            Originator - Receive Timestamp: -0.117333114
                            Originator - Transmit Timestamp: -0.117316956
                            22:22:09.233533 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 59968, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 119.18.32.153.123: [bad udp cksum 0xd739 -> 0x07b2!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.004821, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892462.248759762 (2025-06-14T12:21:02Z)
                            Receive Timestamp: 3958892462.256305224 (2025-06-14T12:21:02Z)
                            Transmit Timestamp: 3958892529.233501405 (2025-06-14T12:22:09Z)
                            Originator - Receive Timestamp: +0.007545461
                            Originator - Transmit Timestamp: +66.984741642
                            22:22:09.233551 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 14918, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 216.239.35.8.123: [bad udp cksum 0x3b86 -> 0x9e6f!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.004821, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892463.322157276 (2025-06-14T12:21:03Z)
                            Receive Timestamp: 3958892463.403602689 (2025-06-14T12:21:03Z)
                            Transmit Timestamp: 3958892529.233536997 (2025-06-14T12:22:09Z)
                            Originator - Receive Timestamp: +0.081445412
                            Originator - Transmit Timestamp: +65.911379721
                            22:22:09.249623 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 62, id 14995, offset 0, flags [DF], proto UDP (17), length 76)
                            119.18.32.153.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -23
                            Root Delay: 0.005630, Root dispersion: 0.032546, Reference-ID: 0xcb2353f2
                            Reference Timestamp: 3958891441.573316619 (2025-06-14T12:04:01Z)
                            Originator Timestamp: 3958892529.233501405 (2025-06-14T12:22:09Z)
                            Receive Timestamp: 3958892529.241532230 (2025-06-14T12:22:09Z)
                            Transmit Timestamp: 3958892529.241620549 (2025-06-14T12:22:09Z)
                            Originator - Receive Timestamp: +0.008030824
                            Originator - Transmit Timestamp: +0.008119143
                            22:22:09.387909 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 110, id 37264, offset 0, flags [none], proto UDP (17), length 76)
                            216.239.35.8.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                            Root Delay: 0.000000, Root dispersion: 0.000091, Reference-ID: GOOG
                            Reference Timestamp: 3958892529.306483583 (2025-06-14T12:22:09Z)
                            Originator Timestamp: 3958892529.233536997 (2025-06-14T12:22:09Z)
                            Receive Timestamp: 3958892529.306483583 (2025-06-14T12:22:09Z)
                            Transmit Timestamp: 3958892529.306483584 (2025-06-14T12:22:09Z)
                            Originator - Receive Timestamp: +0.072946586
                            Originator - Transmit Timestamp: +0.072946587
                            22:22:11.234463 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 7726, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 17.253.66.45.123: [bad udp cksum 0x93b8 -> 0xb287!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.004852, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892465.290219375 (2025-06-14T12:21:05Z)
                            Receive Timestamp: 3958892465.298354612 (2025-06-14T12:21:05Z)
                            Transmit Timestamp: 3958892531.234427093 (2025-06-14T12:22:11Z)
                            Originator - Receive Timestamp: +0.008135237
                            Originator - Transmit Timestamp: +65.944207717
                            22:22:11.250883 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 59, id 17627, offset 0, flags [DF], proto UDP (17), length 76)
                            17.253.66.45.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                            Root Delay: 0.000000, Root dispersion: 0.000122, Reference-ID: GPSs
                            Reference Timestamp: 3958892530.503937200 (2025-06-14T12:22:10Z)
                            Originator Timestamp: 3958892531.234427093 (2025-06-14T12:22:11Z)
                            Receive Timestamp: 3958892531.243000441 (2025-06-14T12:22:11Z)
                            Transmit Timestamp: 3958892531.243016021 (2025-06-14T12:22:11Z)
                            Originator - Receive Timestamp: +0.008573348
                            Originator - Transmit Timestamp: +0.008588928
                            22:23:08.229657 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 21750, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 133.243.238.163.123: [bad udp cksum 0xb425 -> 0x0b5d!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.005706, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892522.335120567 (2025-06-14T12:22:02Z)
                            Receive Timestamp: 3958892522.426089341 (2025-06-14T12:22:02Z)
                            Transmit Timestamp: 3958892588.229612751 (2025-06-14T12:23:08Z)
                            Originator - Receive Timestamp: +0.090968774
                            Originator - Transmit Timestamp: +65.894492184
                            22:23:08.421862 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 44, id 21750, offset 0, flags [none], proto UDP (17), length 76)
                            133.243.238.163.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                            Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: NICT
                            Reference Timestamp: 3958892588.000000000 (2025-06-14T12:23:08Z)
                            Originator Timestamp: 3958892588.229612751 (2025-06-14T12:23:08Z)
                            Receive Timestamp: 3958892588.330715191 (2025-06-14T12:23:08Z)
                            Transmit Timestamp: 3958892588.330716011 (2025-06-14T12:23:08Z)
                            Originator - Receive Timestamp: +0.101102439
                            Originator - Transmit Timestamp: +0.101103259
                            22:23:10.234896 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 65244, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 202.142.142.241.123: [bad udp cksum 0x990e -> 0x9657!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.005737, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892525.169375177 (2025-06-14T12:22:05Z)
                            Receive Timestamp: 3958892525.316333771 (2025-06-14T12:22:05Z)
                            Transmit Timestamp: 3958892590.234847492 (2025-06-14T12:23:10Z)
                            Originator - Receive Timestamp: +0.146958594
                            Originator - Transmit Timestamp: +65.065472315
                            22:23:10.264576 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 61, id 32639, offset 0, flags [DF], proto UDP (17), length 76)
                            202.142.142.241.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.037506, Root dispersion: 0.031204, Reference-ID: 0x825fb350
                            Reference Timestamp: 3958891648.326188020 (2025-06-14T12:07:28Z)
                            Originator Timestamp: 3958892590.234847492 (2025-06-14T12:23:10Z)
                            Receive Timestamp: 3958892590.117834528 (2025-06-14T12:23:10Z)
                            Transmit Timestamp: 3958892590.117907373 (2025-06-14T12:23:10Z)
                            Originator - Receive Timestamp: -0.117012964
                            Originator - Transmit Timestamp: -0.116940119
                            22:23:15.232115 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 2469, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 216.239.35.8.123: [bad udp cksum 0x3b86 -> 0x3d13!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.005813, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892529.306483584 (2025-06-14T12:22:09Z)
                            Receive Timestamp: 3958892529.387931985 (2025-06-14T12:22:09Z)
                            Transmit Timestamp: 3958892595.232065980 (2025-06-14T12:23:15Z)
                            Originator - Receive Timestamp: +0.081448401
                            Originator - Transmit Timestamp: +65.925582395
                            22:23:15.232130 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 40710, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 17.253.66.45.123: [bad udp cksum 0x93b8 -> 0xd384!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.005813, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892531.243016021 (2025-06-14T12:22:11Z)
                            Receive Timestamp: 3958892531.250924171 (2025-06-14T12:22:11Z)
                            Transmit Timestamp: 3958892595.232121255 (2025-06-14T12:23:15Z)
                            Originator - Receive Timestamp: +0.007908149
                            Originator - Transmit Timestamp: +63.989105233
                            22:23:15.248637 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 59, id 49510, offset 0, flags [DF], proto UDP (17), length 76)
                            17.253.66.45.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                            Root Delay: 0.000000, Root dispersion: 0.000122, Reference-ID: GPSs
                            Reference Timestamp: 3958892594.503937293 (2025-06-14T12:23:14Z)
                            Originator Timestamp: 3958892595.232121255 (2025-06-14T12:23:15Z)
                            Receive Timestamp: 3958892595.240540413 (2025-06-14T12:23:15Z)
                            Transmit Timestamp: 3958892595.240552865 (2025-06-14T12:23:15Z)
                            Originator - Receive Timestamp: +0.008419158
                            Originator - Transmit Timestamp: +0.008431610
                            22:23:15.387305 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 110, id 11160, offset 0, flags [none], proto UDP (17), length 76)
                            216.239.35.8.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                            Root Delay: 0.000000, Root dispersion: 0.000091, Reference-ID: GOOG
                            Reference Timestamp: 3958892595.305778679 (2025-06-14T12:23:15Z)
                            Originator Timestamp: 3958892595.232065980 (2025-06-14T12:23:15Z)
                            Receive Timestamp: 3958892595.305778679 (2025-06-14T12:23:15Z)
                            Transmit Timestamp: 3958892595.305778680 (2025-06-14T12:23:15Z)
                            Originator - Receive Timestamp: +0.073712699
                            Originator - Transmit Timestamp: +0.073712700
                            22:23:16.238779 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 55769, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 119.18.32.153.123: [bad udp cksum 0xd739 -> 0x7d66!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.005828, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892529.241620549 (2025-06-14T12:22:09Z)
                            Receive Timestamp: 3958892529.249632371 (2025-06-14T12:22:09Z)
                            Transmit Timestamp: 3958892596.238761603 (2025-06-14T12:23:16Z)
                            Originator - Receive Timestamp: +0.008011822
                            Originator - Transmit Timestamp: +66.997141053
                            22:23:16.255205 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 62, id 30504, offset 0, flags [DF], proto UDP (17), length 76)
                            119.18.32.153.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -23
                            Root Delay: 0.005630, Root dispersion: 0.033538, Reference-ID: 0xcb2353f2
                            Reference Timestamp: 3958891441.573316619 (2025-06-14T12:04:01Z)
                            Originator Timestamp: 3958892596.238761603 (2025-06-14T12:23:16Z)
                            Receive Timestamp: 3958892596.247557033 (2025-06-14T12:23:16Z)
                            Transmit Timestamp: 3958892596.247659775 (2025-06-14T12:23:16Z)
                            Originator - Receive Timestamp: +0.008795430
                            Originator - Transmit Timestamp: +0.008898172
                            22:24:15.237591 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 62000, offset 0, flags [none], proto UDP (17), length 76)
                            144.6.175.62.123 > 133.243.238.163.123: [bad udp cksum 0xb425 -> 0x6068!] NTPv4, Client, length 48
                            Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                            Root Delay: 0.015853, Root dispersion: 0.006713, Reference-ID: 0x11fd422d
                            Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                            Originator Timestamp: 3958892588.330716011 (2025-06-14T12:23:08Z)
                            Receive Timestamp: 3958892588.421871340 (2025-06-14T12:23:08Z)
                            Transmit Timestamp: 3958892655.237558802 (2025-06-14T12:24:15Z)
                            Originator - Receive Timestamp: +0.091155328
                            Originator - Transmit Timestamp: +66.906842790

                            johnpozJ 1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @admacdo
                              last edited by johnpoz

                              @admacdo ok this doesn't make much sense

                              Receive Timestamp: 3958892019.237000500 (2025-06-14T12:13:39Z)
                              Transmit Timestamp: 3958892019.237000500 (2025-06-14T12:13:39Z)
                              Originator - Receive Timestamp: -0.003453436
                              Originator - Transmit Timestamp: -0.003453436
                              

                              why in your server response are these all exactly the same numbers.. They should have differences.

                              they are different when you talk to different outside servers.. But the answers from your internal server the numbers are exactly the same.

                              192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                              Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                              Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                              Reference Timestamp: 3958892341.000000000 (2025-06-14T12:19:01Z)
                              Originator Timestamp: 3958892341.243755483 (2025-06-14T12:19:01Z)
                              Receive Timestamp: 3958892341.239999999 (2025-06-14T12:19:01Z)
                              Transmit Timestamp: 3958892341.239999999 (2025-06-14T12:19:01Z)
                              Originator - Receive Timestamp: -0.003755483
                              Originator - Transmit Timestamp: -0.003755483
                              

                              that doesn't make sense.. There should be some processing time.. even if it was 0.000000001

                              edit: here is my pfsense talking to my pi ntp server..

                              09:20:38.245061 00:08:a2:0c:e6:21 > b8:27:eb:31:70:ab, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 53402, offset 0, flags [none], proto UDP (17), length 76)
                                  192.168.3.253.123 > 192.168.3.32.123: [bad udp cksum 0x88b7 -> 0x1015!] NTPv4, Client, length 48
                              	Leap indicator:  (0), Stratum 2 (secondary reference), poll 6 (64s), precision -22
                              	Root Delay: 0.000579, Root dispersion: 0.008697, Reference-ID: 0xc0a80320
                              	  Reference Timestamp:  3958899176.245755911 (2025-06-14T14:12:56Z)
                              	  Originator Timestamp: 3958899571.245464583 (2025-06-14T14:19:31Z)
                              	  Receive Timestamp:    3958899571.245779985 (2025-06-14T14:19:31Z)
                              	  Transmit Timestamp:   3958899638.244990223 (2025-06-14T14:20:38Z)
                              	    Originator - Receive Timestamp:  +0.000315401
                              	    Originator - Transmit Timestamp: +66.999525640
                              09:20:38.245749 b8:27:eb:31:70:ab > 00:08:a2:0c:e6:21, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 43159, offset 0, flags [DF], proto UDP (17), length 76)
                                  192.168.3.32.123 > 192.168.3.253.123: [udp sum ok] NTPv4, Server, length 48
                              	Leap indicator:  (0), Stratum 1 (primary reference), poll 6 (64s), precision -24
                              	Root Delay: 0.000015, Root dispersion: 0.000030, Reference-ID: PPS^@
                              	  Reference Timestamp:  3958899620.546711021 (2025-06-14T14:20:20Z)
                              	  Originator Timestamp: 3958899638.244990223 (2025-06-14T14:20:38Z)
                              	  Receive Timestamp:    3958899638.245283344 (2025-06-14T14:20:38Z)
                              	  Transmit Timestamp:   3958899638.245454933 (2025-06-14T14:20:38Z)
                              	    Originator - Receive Timestamp:  +0.000293120
                              	    Originator - Transmit Timestamp: +0.000464709
                              09:21:43.245041 00:08:a2:0c:e6:21 > b8:27:eb:31:70:ab, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 25952, offset 0, flags [none], proto UDP (17), length 76)
                                  192.168.3.253.123 > 192.168.3.32.123: [bad udp cksum 0x88b7 -> 0x4b0a!] NTPv4, Client, length 48
                              	Leap indicator:  (0), Stratum 2 (secondary reference), poll 6 (64s), precision -22
                              	Root Delay: 0.000579, Root dispersion: 0.009658, Reference-ID: 0xc0a80320
                              	  Reference Timestamp:  3958899176.245755911 (2025-06-14T14:12:56Z)
                              	  Originator Timestamp: 3958899638.245454933 (2025-06-14T14:20:38Z)
                              	  Receive Timestamp:    3958899638.245768187 (2025-06-14T14:20:38Z)
                              	  Transmit Timestamp:   3958899703.244977578 (2025-06-14T14:21:43Z)
                              	    Originator - Receive Timestamp:  +0.000313254
                              	    Originator - Transmit Timestamp: +64.999522645
                              09:21:43.245743 b8:27:eb:31:70:ab > 00:08:a2:0c:e6:21, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 43614, offset 0, flags [DF], proto UDP (17), length 76)
                                  192.168.3.32.123 > 192.168.3.253.123: [udp sum ok] NTPv4, Server, length 48
                              	Leap indicator:  (0), Stratum 1 (primary reference), poll 6 (64s), precision -24
                              	Root Delay: 0.000015, Root dispersion: 0.000030, Reference-ID: PPS^@
                              	  Reference Timestamp:  3958899683.138522683 (2025-06-14T14:21:23Z)
                              	  Originator Timestamp: 3958899703.244977578 (2025-06-14T14:21:43Z)
                              	  Receive Timestamp:    3958899703.245263460 (2025-06-14T14:21:43Z)
                              	  Transmit Timestamp:   3958899703.245442833 (2025-06-14T14:21:43Z)
                              	    Originator - Receive Timestamp:  +0.000285881
                              	    Originator - Transmit Timestamp: +0.000465254
                              09:22:48.245036 00:08:a2:0c:e6:21 > b8:27:eb:31:70:ab, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 46500, offset 0, flags [none], proto UDP (17), length 76)
                                  192.168.3.253.123 > 192.168.3.32.123: [bad udp cksum 0x88b7 -> 0x7eb2!] NTPv4, Client, length 48
                              	Leap indicator:  (0), Stratum 2 (secondary reference), poll 6 (64s), precision -22
                              	Root Delay: 0.000579, Root dispersion: 0.004776, Reference-ID: 0xc0a80320
                              	  Reference Timestamp:  3958899703.245761089 (2025-06-14T14:21:43Z)
                              	  Originator Timestamp: 3958899703.245442833 (2025-06-14T14:21:43Z)
                              	  Receive Timestamp:    3958899703.245761089 (2025-06-14T14:21:43Z)
                              	  Transmit Timestamp:   3958899768.244973168 (2025-06-14T14:22:48Z)
                              	    Originator - Receive Timestamp:  +0.000318255
                              	    Originator - Transmit Timestamp: +64.999530334
                              09:22:48.245710 b8:27:eb:31:70:ab > 00:08:a2:0c:e6:21, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 57029, offset 0, flags [DF], proto UDP (17), length 76)
                                  192.168.3.32.123 > 192.168.3.253.123: [udp sum ok] NTPv4, Server, length 48
                              	Leap indicator:  (0), Stratum 1 (primary reference), poll 6 (64s), precision -24
                              	Root Delay: 0.000015, Root dispersion: 0.000030, Reference-ID: PPS^@
                              	  Reference Timestamp:  3958899748.174415440 (2025-06-14T14:22:28Z)
                              	  Originator Timestamp: 3958899768.244973168 (2025-06-14T14:22:48Z)
                              	  Receive Timestamp:    3958899768.245263888 (2025-06-14T14:22:48Z)
                              	  Transmit Timestamp:   3958899768.245429649 (2025-06-14T14:22:48Z)
                              	    Originator - Receive Timestamp:  +0.000290720
                              	    Originator - Transmit Timestamp: +0.000456481
                              
                              

                              Makes no sense the answer from your ntp server that there is no difference in those numbers..

                              Also this makes no sense either.. So client talking to the ntp server, gets its answer in .000137 seconds.. So .1 of a ms.. Is your ntp server on the same VM host as your pfsense? How are you sending traffic over ethernet to some other device and getting an answer in .1 of a ms?

                              Even the best of networks your going to be looking at like .5 of a ms..

                              so your client (pfsense) talking to your ntp server sent a query over the wire, and got its response in 137 micro seconds.. And your ntp server took not even 1 nano second to process it? Something not right there..

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                Hmm, interesting. I understand it's probably a very good ntp server but....

                                johnpozJ A 3 Replies Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator @stephenw10
                                  last edited by

                                  @stephenw10 yeah something is screwy.. Did he say his other client set time off this.. But are they using actual ntp, or just a sntp/timedate sort of client? this just pulls the time at that moment - it doesn't do any sort of adjustments on the client clock to keep them in sync - and doubt it cares about these numbers.. But I know a normal ntp client uses these numbers in calculating delay, etc. Maybe those numbers being the same is throwing off the calculation so ntp doesn't accept the response?

                                  All I know is it seems odd that the ntp server would have exact numbers like that.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • A
                                    admacdo @stephenw10
                                    last edited by

                                    @stephenw10

                                    Woah. This is what happens when you post when you really want to go to bed. I did a quick look for errors and totally ignored the numbers.
                                    Some of the clients around the house are using SNTP because they're dumb boxes, but the main windows machines are running with a real NTP client from Meinberg and they're calculating the delay, offset and jitter with no issues. I'll do some more captures later and pay more attention. It's new car day, so I've got distractions .

                                    I may have to resurrect the Pi NTP servers and see what happens when they're supplying data. About five years ago, I had five of them with various GPS input, all comparing against each other to test peering and delay interaction.
                                    There are no VM's in the house at this point.

                                    1 Reply Last reply Reply Quote 0
                                    • A
                                      admacdo @stephenw10
                                      last edited by

                                      @stephenw10
                                      Yeah, no NTP servers are that good. Even the 10 gigabit ones with reflectors..

                                      1 Reply Last reply Reply Quote 1
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.