Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    NTP Issue

    Scheduled Pinned Locked Moved General pfSense Questions
    98 Posts 11 Posters 15.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      admacdo @stephenw10
      last edited by

      @stephenw10
      The thought occurred to me that the easiest way to ensure that the firewall can actually see the traffic is to let the NTPmonitor running on my workstation, query the second port of the NTP server via OPT2.

      There are no other paths to get to it, as it's one ethernet cable joining the firewall to the NTP server.

      NTPmonitor found it instantly, and can poll it constantly, so that traffic is going back and forth through the port on the firewall, and is also being routed from the LAN port to the OPT2 port and back, by the firewall.
      This tends to suggest to me that there are no firewall rules obstructing it and the traffic is just fine.

      johnpozJ 1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator @admacdo
        last edited by

        @admacdo and what does your states show - there is a difference from sending a query from a different network. For when pfsense asks?

        If you do not see return traffic via the state - then for some reason that traffic was not processed.. Even if there was something as you mention in the kernel - which is no way the issue.. The state would still be listed as traffic was returned.

        While its clear there is something going on - nobody else that I am aware has been able to duplicate the problem.. pfsense talks to my ntp server just fine. Steve can not duplicate it either.

        But if your state is not showing return traffic - then the ntp client which is farther up the stack, if the firewall isn't allowing it via completion of the state. The ntp client would never see it.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        A 1 Reply Last reply Reply Quote 0
        • A
          admacdo @johnpoz
          last edited by

          @johnpoz
          Can we pretend (or not pretend)at this point that I'm an idiot and demo the commands I can put in a command line to show this information?

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by stephenw10

            Just go to Diag > States in the webgui and filter by :123 to see the ntp states.

            You should see a state on the interface connected to the ntp server with no corresponding state on another interface. That will be the state opened from the firewall itself.

            It's usually pretty obvious but you likely have a bunch of ntp states so it might be more difficult to spot.

            Screenshot from 2025-06-14 11-27-36.png

            A 1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              I note that the states can timeout so may not always be there. I restarted ntpd to force it to reach out to get that screenshot. But you could just wait. You can see two way traffic on that state though.

              A 1 Reply Last reply Reply Quote 0
              • A
                admacdo @stephenw10
                last edited by

                @stephenw10
                The top two are the local NTP servers.

                30cd8fb9-3af6-4dfa-9f89-f0e00041e407-image.png

                1 Reply Last reply Reply Quote 0
                • A
                  admacdo @stephenw10
                  last edited by

                  @stephenw10 said in NTP Issue:

                  Just go to Diag > States in the webgui and filter by :123 to see the ntp states.

                  You should see a state on the interface connected to the ntp server with no corresponding state on another interface. That will be the state opened from the firewall itself.

                  It's usually pretty obvious but you likely have a bunch of ntp states so it might be more difficult to spot.

                  Thanks for that, by the way. I tend to only look and remember exactly what I'm looking for in a list. I had no idea this option was available.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    That's in 2.7.2? I note the states are shown as on 'all' interfaces. Which should be fine but potentially could hide an asymmetric route. It wouldn't block ntp though.

                    So it looks like two traffic to both servers. I assume they are still reported as 'unreach'?

                    I would next run a pcap for that traffic and see what's actually being sent.

                    If you enable all the logging in ntpd do you see any additional errors?

                    A 1 Reply Last reply Reply Quote 0
                    • A
                      admacdo @stephenw10
                      last edited by

                      @stephenw10

                      Only error is the bad checksum.
                      This is logging everything on the OPT2 port because that's all that port does.

                      22:12:10.232164 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 16199, offset 0, flags [none], proto UDP (17), length 76)
                      172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0x55a7!] NTPv4, Client, length 48
                      Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                      Root Delay: 0.015853, Root dispersion: 0.002059, Reference-ID: 0x11fd422d
                      Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
                      Originator Timestamp: 3958891863.227000500 (2025-06-14T12:11:03Z)
                      Receive Timestamp: 3958891863.230474057 (2025-06-14T12:11:03Z)
                      Transmit Timestamp: 3958891930.232146500 (2025-06-14T12:12:10Z)
                      Originator - Receive Timestamp: +0.003473557
                      Originator - Transmit Timestamp: +67.005146000
                      22:12:10.232256 a6:4c:5e:80:2e:fb > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: Ethernet (len 6), IPv4 (len 4), Request who-has 172.16.1.1 tell 172.16.1.2, length 46
                      22:12:10.232299 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Reply 172.16.1.1 is-at 60:be:b4:07:c6:17, length 28
                      22:12:10.232450 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49682, offset 0, flags [none], proto UDP (17), length 76)
                      172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
                      Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                      Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                      Reference Timestamp: 3958891930.000000000 (2025-06-14T12:12:10Z)
                      Originator Timestamp: 3958891930.232146500 (2025-06-14T12:12:10Z)
                      Receive Timestamp: 3958891930.229000500 (2025-06-14T12:12:10Z)
                      Transmit Timestamp: 3958891930.229000500 (2025-06-14T12:12:10Z)
                      Originator - Receive Timestamp: -0.003146000
                      Originator - Transmit Timestamp: -0.003146000
                      22:12:18.274942 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 10695, offset 0, flags [none], proto UDP (17), length 76)
                      172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0x198e!] NTPv4, Client, length 48
                      Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                      Root Delay: 0.015853, Root dispersion: 0.002166, Reference-ID: 0x11fd422d
                      Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
                      Originator Timestamp: 3958891930.229000500 (2025-06-14T12:12:10Z)
                      Receive Timestamp: 3958891930.232486680 (2025-06-14T12:12:10Z)
                      Transmit Timestamp: 3958891938.274935417 (2025-06-14T12:12:18Z)
                      Originator - Receive Timestamp: +0.003486180
                      Originator - Transmit Timestamp: +8.045934917
                      22:12:18.275251 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49683, offset 0, flags [none], proto UDP (17), length 76)
                      172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
                      Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                      Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                      Reference Timestamp: 3958891938.000000000 (2025-06-14T12:12:18Z)
                      Originator Timestamp: 3958891938.274935417 (2025-06-14T12:12:18Z)
                      Receive Timestamp: 3958891938.272000500 (2025-06-14T12:12:18Z)
                      Transmit Timestamp: 3958891938.272000500 (2025-06-14T12:12:18Z)
                      Originator - Receive Timestamp: -0.002934917
                      Originator - Transmit Timestamp: -0.002934917
                      22:12:26.228118 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 61166, offset 0, flags [none], proto UDP (17), length 76)
                      172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0x043c!] NTPv4, Client, length 48
                      Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                      Root Delay: 0.015853, Root dispersion: 0.002288, Reference-ID: 0x11fd422d
                      Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
                      Originator Timestamp: 3958891938.272000500 (2025-06-14T12:12:18Z)
                      Receive Timestamp: 3958891938.275257606 (2025-06-14T12:12:18Z)
                      Transmit Timestamp: 3958891946.228090332 (2025-06-14T12:12:26Z)
                      Originator - Receive Timestamp: +0.003257106
                      Originator - Transmit Timestamp: +7.956089831
                      22:12:26.228379 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49684, offset 0, flags [none], proto UDP (17), length 76)
                      172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
                      Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                      Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                      Reference Timestamp: 3958891946.000000000 (2025-06-14T12:12:26Z)
                      Originator Timestamp: 3958891946.228090332 (2025-06-14T12:12:26Z)
                      Receive Timestamp: 3958891946.225000500 (2025-06-14T12:12:26Z)
                      Transmit Timestamp: 3958891946.225000500 (2025-06-14T12:12:26Z)
                      Originator - Receive Timestamp: -0.003089831
                      Originator - Transmit Timestamp: -0.003089831
                      22:13:31.239311 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 162, offset 0, flags [none], proto UDP (17), length 76)
                      172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0xe087!] NTPv4, Client, length 48
                      Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                      Root Delay: 0.015853, Root dispersion: 0.003265, Reference-ID: 0x11fd422d
                      Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
                      Originator Timestamp: 3958891946.225000500 (2025-06-14T12:12:26Z)
                      Receive Timestamp: 3958891946.228384771 (2025-06-14T12:12:26Z)
                      Transmit Timestamp: 3958892011.239279145 (2025-06-14T12:13:31Z)
                      Originator - Receive Timestamp: +0.003384270
                      Originator - Transmit Timestamp: +65.014278645
                      22:13:31.239617 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49685, offset 0, flags [none], proto UDP (17), length 76)
                      172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
                      Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                      Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                      Reference Timestamp: 3958892011.000000000 (2025-06-14T12:13:31Z)
                      Originator Timestamp: 3958892011.239279145 (2025-06-14T12:13:31Z)
                      Receive Timestamp: 3958892011.236000500 (2025-06-14T12:13:31Z)
                      Transmit Timestamp: 3958892011.236000500 (2025-06-14T12:13:31Z)
                      Originator - Receive Timestamp: -0.003278645
                      Originator - Transmit Timestamp: -0.003278645
                      22:13:39.240470 60:be:b4:07:c6:17 > a6:4c:5e:80:2e:fb, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 17131, offset 0, flags [none], proto UDP (17), length 76)
                      172.16.1.1.123 > 172.16.1.2.123: [bad udp cksum 0x5a6d -> 0x8c1b!] NTPv4, Client, length 48
                      Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                      Root Delay: 0.015853, Root dispersion: 0.003387, Reference-ID: 0x11fd422d
                      Reference Timestamp: 3958891878.246163694 (2025-06-14T12:11:18Z)
                      Originator Timestamp: 3958892011.236000500 (2025-06-14T12:13:31Z)
                      Receive Timestamp: 3958892011.239621602 (2025-06-14T12:13:31Z)
                      Transmit Timestamp: 3958892019.240453937 (2025-06-14T12:13:39Z)
                      Originator - Receive Timestamp: +0.003621102
                      Originator - Transmit Timestamp: +8.004453436
                      22:13:39.240810 a6:4c:5e:80:2e:fb > 60:be:b4:07:c6:17, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 49686, offset 0, flags [none], proto UDP (17), length 76)
                      172.16.1.2.123 > 172.16.1.1.123: [udp sum ok] NTPv4, Server, length 48
                      Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                      Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                      Reference Timestamp: 3958892019.000000000 (2025-06-14T12:13:39Z)
                      Originator Timestamp: 3958892019.240453937 (2025-06-14T12:13:39Z)
                      Receive Timestamp: 3958892019.237000500 (2025-06-14T12:13:39Z)
                      Transmit Timestamp: 3958892019.237000500 (2025-06-14T12:13:39Z)
                      Originator - Receive Timestamp: -0.003453436
                      Originator - Transmit Timestamp: -0.003453436

                      A 1 Reply Last reply Reply Quote 0
                      • A
                        admacdo @admacdo
                        last edited by

                        And here's the capture of the Lan port traffic, going to the two timeservers:

                        22:17:38.249421 60:be:b4:07:c6:16 > d8:b0:4c:ff:0e:18, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 4666, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.254.123 > 192.168.25.250.123: [bad udp cksum 0xb592 -> 0x6c1e!] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                        Root Delay: 0.015853, Root dispersion: 0.002655, Reference-ID: 0x11fd422d
                        Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
                        Originator Timestamp: 3958892193.224999999 (2025-06-14T12:16:33Z)
                        Receive Timestamp: 3958892193.228976720 (2025-06-14T12:16:33Z)
                        Transmit Timestamp: 3958892258.249393755 (2025-06-14T12:17:38Z)
                        Originator - Receive Timestamp: +0.003976720
                        Originator - Transmit Timestamp: +65.024393755
                        22:17:38.249703 d8:b0:4c:ff:0e:18 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 13377, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                        Reference Timestamp: 3958892258.000000000 (2025-06-14T12:17:38Z)
                        Originator Timestamp: 3958892258.249393755 (2025-06-14T12:17:38Z)
                        Receive Timestamp: 3958892258.245999999 (2025-06-14T12:17:38Z)
                        Transmit Timestamp: 3958892258.245999999 (2025-06-14T12:17:38Z)
                        Originator - Receive Timestamp: -0.003393755
                        Originator - Transmit Timestamp: -0.003393755
                        22:17:39.217297 2a:5d:37:0d:2f:56 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 1383, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.36.54893 > 17.253.66.45.123: [udp sum ok] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 0 (unspecified), poll 0 (1s), precision 0
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: (unspec)
                        Reference Timestamp: 0.000000000
                        Originator Timestamp: 0.000000000
                        Receive Timestamp: 0.000000000
                        Transmit Timestamp: 2607060682.861695140 (1982-08-13T07:31:22Z)
                        Originator - Receive Timestamp: 0.000000000
                        Originator - Transmit Timestamp: 2607060682.861695140 (1982-08-13T07:31:22Z)
                        22:17:39.227452 60:be:b4:07:c6:16 > a6:4c:5e:80:2e:fa, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 21966, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.254.123 > 192.168.25.251.123: [bad udp cksum 0xb593 -> 0xbea7!] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                        Root Delay: 0.015853, Root dispersion: 0.002670, Reference-ID: 0x11fd422d
                        Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
                        Originator Timestamp: 3958892193.225000500 (2025-06-14T12:16:33Z)
                        Receive Timestamp: 3958892193.229147624 (2025-06-14T12:16:33Z)
                        Transmit Timestamp: 3958892259.227428212 (2025-06-14T12:17:39Z)
                        Originator - Receive Timestamp: +0.004147124
                        Originator - Transmit Timestamp: +66.002427711
                        22:17:39.227595 a6:4c:5e:80:2e:fa > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 65184, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.251.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                        Reference Timestamp: 3958892259.000000000 (2025-06-14T12:17:39Z)
                        Originator Timestamp: 3958892259.227428212 (2025-06-14T12:17:39Z)
                        Receive Timestamp: 3958892259.224000500 (2025-06-14T12:17:39Z)
                        Transmit Timestamp: 3958892259.224000500 (2025-06-14T12:17:39Z)
                        Originator - Receive Timestamp: -0.003427711
                        Originator - Transmit Timestamp: -0.003427711
                        22:17:39.233684 60:be:b4:07:c6:16 > 2a:5d:37:0d:2f:56, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 59, id 10280, offset 0, flags [DF], proto UDP (17), length 76)
                        17.253.66.45.123 > 192.168.25.36.54893: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 3 (8s), precision -20
                        Root Delay: 0.000000, Root dispersion: 0.000122, Reference-ID: GPSs
                        Reference Timestamp: 3958892258.503937548 (2025-06-14T12:17:38Z)
                        Originator Timestamp: 2607060682.861695140 (1982-08-13T07:31:22Z)
                        Receive Timestamp: 3958892259.225728201 (2025-06-14T12:17:39Z)
                        Transmit Timestamp: 3958892259.225741781 (2025-06-14T12:17:39Z)
                        Originator - Receive Timestamp: +1351831576.364033061
                        Originator - Transmit Timestamp: +1351831576.364046640
                        22:17:39.262993 2a:5d:37:0d:2f:56 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 2302, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.36.53981 > 17.253.66.37.123: [udp sum ok] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 0 (unspecified), poll 0 (1s), precision 0
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: (unspec)
                        Reference Timestamp: 0.000000000
                        Originator Timestamp: 0.000000000
                        Receive Timestamp: 0.000000000
                        Transmit Timestamp: 1486433767.158530957 (1947-02-08T02:16:07Z)
                        Originator - Receive Timestamp: 0.000000000
                        Originator - Transmit Timestamp: 1486433767.158530957 (1947-02-08T02:16:07Z)
                        22:17:39.279675 60:be:b4:07:c6:16 > 2a:5d:37:0d:2f:56, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 58, id 63852, offset 0, flags [DF], proto UDP (17), length 76)
                        17.253.66.37.123 > 192.168.25.36.53981: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 3 (8s), precision -20
                        Root Delay: 0.000000, Root dispersion: 0.000106, Reference-ID: GPSs
                        Reference Timestamp: 3958892258.586580157 (2025-06-14T12:17:38Z)
                        Originator Timestamp: 1486433767.158530957 (1947-02-08T02:16:07Z)
                        Receive Timestamp: 3958892259.271475841 (2025-06-14T12:17:39Z)
                        Transmit Timestamp: 3958892259.271506934 (2025-06-14T12:17:39Z)
                        Originator - Receive Timestamp: +2472458492.112944884
                        Originator - Transmit Timestamp: +2472458492.112975977
                        22:17:39.282440 2a:5d:37:0d:2f:56 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 47207, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.36.59010 > 17.253.34.131.123: [udp sum ok] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 0 (unspecified), poll 0 (1s), precision 0
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: (unspec)
                        Reference Timestamp: 0.000000000
                        Originator Timestamp: 0.000000000
                        Receive Timestamp: 0.000000000
                        Transmit Timestamp: 888817167.731403021 (1928-03-02T05:39:27Z)
                        Originator - Receive Timestamp: 0.000000000
                        Originator - Transmit Timestamp: 888817167.731403021 (1928-03-02T05:39:27Z)
                        22:17:39.347506 60:be:b4:07:c6:16 > 2a:5d:37:0d:2f:56, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 56, id 34463, offset 0, flags [DF], proto UDP (17), length 76)
                        17.253.34.131.123 > 192.168.25.36.59010: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -20
                        Root Delay: 0.046661, Root dispersion: 0.003402, Reference-ID: 0x11fd3c7d
                        Reference Timestamp: 3958892202.110501528 (2025-06-14T12:16:42Z)
                        Originator Timestamp: 888817167.731403021 (1928-03-02T05:39:27Z)
                        Receive Timestamp: 3958892259.316572026 (2025-06-14T12:17:39Z)
                        Transmit Timestamp: 3958892259.316599818 (2025-06-14T12:17:39Z)
                        Originator - Receive Timestamp: +3070075091.585169005
                        Originator - Transmit Timestamp: +3070075091.585196797
                        22:17:46.228411 60:be:b4:07:c6:16 > d8:b0:4c:ff:0e:18, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 32253, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.254.123 > 192.168.25.250.123: [bad udp cksum 0xb592 -> 0x1b40!] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                        Root Delay: 0.015853, Root dispersion: 0.002777, Reference-ID: 0x11fd422d
                        Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
                        Originator Timestamp: 3958892258.245999999 (2025-06-14T12:17:38Z)
                        Receive Timestamp: 3958892258.249772126 (2025-06-14T12:17:38Z)
                        Transmit Timestamp: 3958892266.228354771 (2025-06-14T12:17:46Z)
                        Originator - Receive Timestamp: +0.003772126
                        Originator - Transmit Timestamp: +7.982354772
                        22:17:46.228526 d8:b0:4c:ff:0e:18 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 13378, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                        Reference Timestamp: 3958892266.000000000 (2025-06-14T12:17:46Z)
                        Originator Timestamp: 3958892266.228354771 (2025-06-14T12:17:46Z)
                        Receive Timestamp: 3958892266.224999999 (2025-06-14T12:17:46Z)
                        Transmit Timestamp: 3958892266.224999999 (2025-06-14T12:17:46Z)
                        Originator - Receive Timestamp: -0.003354771
                        Originator - Transmit Timestamp: -0.003354771
                        22:17:47.238448 60:be:b4:07:c6:16 > a6:4c:5e:80:2e:fa, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 10742, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.254.123 > 192.168.25.251.123: [bad udp cksum 0xb593 -> 0xd8a6!] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                        Root Delay: 0.015853, Root dispersion: 0.002792, Reference-ID: 0x11fd422d
                        Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
                        Originator Timestamp: 3958892259.224000500 (2025-06-14T12:17:39Z)
                        Receive Timestamp: 3958892259.227604256 (2025-06-14T12:17:39Z)
                        Transmit Timestamp: 3958892267.238438495 (2025-06-14T12:17:47Z)
                        Originator - Receive Timestamp: +0.003603755
                        Originator - Transmit Timestamp: +8.014437994
                        22:17:47.238727 a6:4c:5e:80:2e:fa > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 65187, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.251.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                        Reference Timestamp: 3958892267.000000000 (2025-06-14T12:17:47Z)
                        Originator Timestamp: 3958892267.238438495 (2025-06-14T12:17:47Z)
                        Receive Timestamp: 3958892267.235000500 (2025-06-14T12:17:47Z)
                        Transmit Timestamp: 3958892267.235000500 (2025-06-14T12:17:47Z)
                        Originator - Receive Timestamp: -0.003437994
                        Originator - Transmit Timestamp: -0.003437994
                        22:17:54.269921 60:be:b4:07:c6:16 > d8:b0:4c:ff:0e:18, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 47156, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.254.123 > 192.168.25.250.123: [bad udp cksum 0xb592 -> 0x2f0a!] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                        Root Delay: 0.015853, Root dispersion: 0.002899, Reference-ID: 0x11fd422d
                        Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
                        Originator Timestamp: 3958892266.224999999 (2025-06-14T12:17:46Z)
                        Receive Timestamp: 3958892266.228541070 (2025-06-14T12:17:46Z)
                        Transmit Timestamp: 3958892274.269898005 (2025-06-14T12:17:54Z)
                        Originator - Receive Timestamp: +0.003541070
                        Originator - Transmit Timestamp: +8.044898006
                        22:17:54.270235 d8:b0:4c:ff:0e:18 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 13379, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                        Reference Timestamp: 3958892274.000000000 (2025-06-14T12:17:54Z)
                        Originator Timestamp: 3958892274.269898005 (2025-06-14T12:17:54Z)
                        Receive Timestamp: 3958892274.265999999 (2025-06-14T12:17:54Z)
                        Transmit Timestamp: 3958892274.265999999 (2025-06-14T12:17:54Z)
                        Originator - Receive Timestamp: -0.003898006
                        Originator - Transmit Timestamp: -0.003898006
                        22:17:55.272843 60:be:b4:07:c6:16 > a6:4c:5e:80:2e:fa, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 33470, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.254.123 > 192.168.25.251.123: [bad udp cksum 0xb593 -> 0x6998!] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                        Root Delay: 0.015853, Root dispersion: 0.002914, Reference-ID: 0x11fd422d
                        Reference Timestamp: 3958892170.244522493 (2025-06-14T12:16:10Z)
                        Originator Timestamp: 3958892267.235000500 (2025-06-14T12:17:47Z)
                        Receive Timestamp: 3958892267.238770176 (2025-06-14T12:17:47Z)
                        Transmit Timestamp: 3958892275.272812137 (2025-06-14T12:17:55Z)
                        Originator - Receive Timestamp: +0.003769676
                        Originator - Transmit Timestamp: +8.037811637
                        22:17:55.272996 a6:4c:5e:80:2e:fa > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 65189, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.251.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                        Reference Timestamp: 3958892275.000000000 (2025-06-14T12:17:55Z)
                        Originator Timestamp: 3958892275.272812137 (2025-06-14T12:17:55Z)
                        Receive Timestamp: 3958892275.269000500 (2025-06-14T12:17:55Z)
                        Transmit Timestamp: 3958892275.269000500 (2025-06-14T12:17:55Z)
                        Originator - Receive Timestamp: -0.003811637
                        Originator - Transmit Timestamp: -0.003811637
                        22:19:01.243785 60:be:b4:07:c6:16 > d8:b0:4c:ff:0e:18, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 1805, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.254.123 > 192.168.25.250.123: [bad udp cksum 0xb592 -> 0xac0e!] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                        Root Delay: 0.015853, Root dispersion: 0.001998, Reference-ID: 0x11fd422d
                        Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                        Originator Timestamp: 3958892274.265999999 (2025-06-14T12:17:54Z)
                        Receive Timestamp: 3958892274.270245532 (2025-06-14T12:17:54Z)
                        Transmit Timestamp: 3958892341.243755483 (2025-06-14T12:19:01Z)
                        Originator - Receive Timestamp: +0.004245532
                        Originator - Transmit Timestamp: +66.977755483
                        22:19:01.243922 d8:b0:4c:ff:0e:18 > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 13381, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                        Reference Timestamp: 3958892341.000000000 (2025-06-14T12:19:01Z)
                        Originator Timestamp: 3958892341.243755483 (2025-06-14T12:19:01Z)
                        Receive Timestamp: 3958892341.239999999 (2025-06-14T12:19:01Z)
                        Transmit Timestamp: 3958892341.239999999 (2025-06-14T12:19:01Z)
                        Originator - Receive Timestamp: -0.003755483
                        Originator - Transmit Timestamp: -0.003755483
                        22:19:02.226808 60:be:b4:07:c6:16 > a6:4c:5e:80:2e:fa, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 4793, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.254.123 > 192.168.25.251.123: [bad udp cksum 0xb593 -> 0x1205!] NTPv4, Client, length 48
                        Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                        Root Delay: 0.015853, Root dispersion: 0.002014, Reference-ID: 0x11fd422d
                        Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                        Originator Timestamp: 3958892275.269000500 (2025-06-14T12:17:55Z)
                        Receive Timestamp: 3958892275.273008134 (2025-06-14T12:17:55Z)
                        Transmit Timestamp: 3958892342.226786521 (2025-06-14T12:19:02Z)
                        Originator - Receive Timestamp: +0.004007634
                        Originator - Transmit Timestamp: +66.957786021
                        22:19:02.227094 a6:4c:5e:80:2e:fa > 60:be:b4:07:c6:16, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 255, id 65198, offset 0, flags [none], proto UDP (17), length 76)
                        192.168.25.251.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
                        Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
                        Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
                        Reference Timestamp: 3958892342.000000000 (2025-06-14T12:19:02Z)
                        Originator Timestamp: 3958892342.226786521 (2025-06-14T12:19:02Z)
                        Receive Timestamp: 3958892342.223000500 (2025-06-14T12:19:02Z)
                        Transmit Timestamp: 3958892342.223000500 (2025-06-14T12:19:02Z)
                        Originator - Receive Timestamp: -0.003786021
                        Originator - Transmit Timestamp: -0.003786021

                        A 1 Reply Last reply Reply Quote 0
                        • A
                          admacdo @admacdo
                          last edited by

                          And for the fun of it, here's the WAN NTP traffic.
                          Also showing bad checksums from other NTP servers. Apparently the firewall doesn't care about that..

                          22:20:58.229920 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 52900, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 202.142.142.241.123: [bad udp cksum 0x990e -> 0xebc5!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.003753, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892392.128213263 (2025-06-14T12:19:52Z)
                          Receive Timestamp: 3958892392.275234537 (2025-06-14T12:19:52Z)
                          Transmit Timestamp: 3958892458.229885764 (2025-06-14T12:20:58Z)
                          Originator - Receive Timestamp: +0.147021274
                          Originator - Transmit Timestamp: +66.101672501
                          22:20:58.229938 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 60754, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 133.243.238.163.123: [bad udp cksum 0xb425 -> 0x1290!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.003753, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892394.329359659 (2025-06-14T12:19:54Z)
                          Receive Timestamp: 3958892394.420018829 (2025-06-14T12:19:54Z)
                          Transmit Timestamp: 3958892458.229923653 (2025-06-14T12:20:58Z)
                          Originator - Receive Timestamp: +0.090659169
                          Originator - Transmit Timestamp: +63.900563993
                          22:20:58.259536 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 61, id 14244, offset 0, flags [DF], proto UDP (17), length 76)
                          202.142.142.241.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.037506, Root dispersion: 0.029220, Reference-ID: 0x825fb350
                          Reference Timestamp: 3958891648.326188020 (2025-06-14T12:07:28Z)
                          Originator Timestamp: 3958892458.229885764 (2025-06-14T12:20:58Z)
                          Receive Timestamp: 3958892458.112557404 (2025-06-14T12:20:58Z)
                          Transmit Timestamp: 3958892458.112651683 (2025-06-14T12:20:58Z)
                          Originator - Receive Timestamp: -0.117328359
                          Originator - Transmit Timestamp: -0.117234081
                          22:20:58.421542 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 44, id 60754, offset 0, flags [none], proto UDP (17), length 76)
                          133.243.238.163.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: NICT
                          Reference Timestamp: 3958892458.000000000 (2025-06-14T12:20:58Z)
                          Originator Timestamp: 3958892458.229923653 (2025-06-14T12:20:58Z)
                          Receive Timestamp: 3958892458.330598795 (2025-06-14T12:20:58Z)
                          Transmit Timestamp: 3958892458.330599615 (2025-06-14T12:20:58Z)
                          Originator - Receive Timestamp: +0.100675142
                          Originator - Transmit Timestamp: +0.100675962
                          22:21:02.240681 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 30150, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 119.18.32.153.123: [bad udp cksum 0xd739 -> 0x9588!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.003814, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892397.238710440 (2025-06-14T12:19:57Z)
                          Receive Timestamp: 3958892397.246481166 (2025-06-14T12:19:57Z)
                          Transmit Timestamp: 3958892462.240656015 (2025-06-14T12:21:02Z)
                          Originator - Receive Timestamp: +0.007770725
                          Originator - Transmit Timestamp: +65.001945574
                          22:21:02.256288 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 62, id 63983, offset 0, flags [DF], proto UDP (17), length 76)
                          119.18.32.153.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -23
                          Root Delay: 0.005630, Root dispersion: 0.031539, Reference-ID: 0xcb2353f2
                          Reference Timestamp: 3958891441.573316619 (2025-06-14T12:04:01Z)
                          Originator Timestamp: 3958892462.240656015 (2025-06-14T12:21:02Z)
                          Receive Timestamp: 3958892462.248680412 (2025-06-14T12:21:02Z)
                          Transmit Timestamp: 3958892462.248759762 (2025-06-14T12:21:02Z)
                          Originator - Receive Timestamp: +0.008024397
                          Originator - Transmit Timestamp: +0.008103747
                          22:21:03.249090 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 12962, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 216.239.35.8.123: [bad udp cksum 0x3b86 -> 0x971a!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.003829, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892396.301858402 (2025-06-14T12:19:56Z)
                          Receive Timestamp: 3958892396.383053917 (2025-06-14T12:19:56Z)
                          Transmit Timestamp: 3958892463.249071196 (2025-06-14T12:21:03Z)
                          Originator - Receive Timestamp: +0.081195515
                          Originator - Transmit Timestamp: +66.947212794
                          22:21:03.403548 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 110, id 1662, offset 0, flags [none], proto UDP (17), length 76)
                          216.239.35.8.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                          Root Delay: 0.000000, Root dispersion: 0.000091, Reference-ID: GOOG
                          Reference Timestamp: 3958892463.322157275 (2025-06-14T12:21:03Z)
                          Originator Timestamp: 3958892463.249071196 (2025-06-14T12:21:03Z)
                          Receive Timestamp: 3958892463.322157275 (2025-06-14T12:21:03Z)
                          Transmit Timestamp: 3958892463.322157276 (2025-06-14T12:21:03Z)
                          Originator - Receive Timestamp: +0.073086079
                          Originator - Transmit Timestamp: +0.073086079
                          22:21:05.282234 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 49125, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 17.253.66.45.123: [bad udp cksum 0x93b8 -> 0xb597!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.003860, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892400.245805983 (2025-06-14T12:20:00Z)
                          Receive Timestamp: 3958892400.254081713 (2025-06-14T12:20:00Z)
                          Transmit Timestamp: 3958892465.282205074 (2025-06-14T12:21:05Z)
                          Originator - Receive Timestamp: +0.008275730
                          Originator - Transmit Timestamp: +65.036399091
                          22:21:05.298334 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 59, id 50905, offset 0, flags [DF], proto UDP (17), length 76)
                          17.253.66.45.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                          Root Delay: 0.000000, Root dispersion: 0.000213, Reference-ID: GPSs
                          Reference Timestamp: 3958892458.503937934 (2025-06-14T12:20:58Z)
                          Originator Timestamp: 3958892465.282205074 (2025-06-14T12:21:05Z)
                          Receive Timestamp: 3958892465.290206828 (2025-06-14T12:21:05Z)
                          Transmit Timestamp: 3958892465.290219375 (2025-06-14T12:21:05Z)
                          Originator - Receive Timestamp: +0.008001754
                          Originator - Transmit Timestamp: +0.008014301
                          22:22:02.234498 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 55716, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 133.243.238.163.123: [bad udp cksum 0xb425 -> 0x255c!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.004714, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892458.330599615 (2025-06-14T12:20:58Z)
                          Receive Timestamp: 3958892458.421561986 (2025-06-14T12:20:58Z)
                          Transmit Timestamp: 3958892522.234478725 (2025-06-14T12:22:02Z)
                          Originator - Receive Timestamp: +0.090962370
                          Originator - Transmit Timestamp: +63.903879109
                          22:22:02.426077 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 44, id 55716, offset 0, flags [none], proto UDP (17), length 76)
                          133.243.238.163.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: NICT
                          Reference Timestamp: 3958892522.000000000 (2025-06-14T12:22:02Z)
                          Originator Timestamp: 3958892522.234478725 (2025-06-14T12:22:02Z)
                          Receive Timestamp: 3958892522.335119751 (2025-06-14T12:22:02Z)
                          Transmit Timestamp: 3958892522.335120567 (2025-06-14T12:22:02Z)
                          Originator - Receive Timestamp: +0.100641026
                          Originator - Transmit Timestamp: +0.100641842
                          22:22:05.286725 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 12175, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 202.142.142.241.123: [bad udp cksum 0x990e -> 0xda3f!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.004760, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892458.112651683 (2025-06-14T12:20:58Z)
                          Receive Timestamp: 3958892458.259548812 (2025-06-14T12:20:58Z)
                          Transmit Timestamp: 3958892525.286692134 (2025-06-14T12:22:05Z)
                          Originator - Receive Timestamp: +0.146897129
                          Originator - Transmit Timestamp: +67.174040451
                          22:22:05.316314 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 61, id 20583, offset 0, flags [DF], proto UDP (17), length 76)
                          202.142.142.241.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.037506, Root dispersion: 0.030227, Reference-ID: 0x825fb350
                          Reference Timestamp: 3958891648.326188020 (2025-06-14T12:07:28Z)
                          Originator Timestamp: 3958892525.286692134 (2025-06-14T12:22:05Z)
                          Receive Timestamp: 3958892525.169359020 (2025-06-14T12:22:05Z)
                          Transmit Timestamp: 3958892525.169375177 (2025-06-14T12:22:05Z)
                          Originator - Receive Timestamp: -0.117333114
                          Originator - Transmit Timestamp: -0.117316956
                          22:22:09.233533 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 59968, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 119.18.32.153.123: [bad udp cksum 0xd739 -> 0x07b2!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.004821, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892462.248759762 (2025-06-14T12:21:02Z)
                          Receive Timestamp: 3958892462.256305224 (2025-06-14T12:21:02Z)
                          Transmit Timestamp: 3958892529.233501405 (2025-06-14T12:22:09Z)
                          Originator - Receive Timestamp: +0.007545461
                          Originator - Transmit Timestamp: +66.984741642
                          22:22:09.233551 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 14918, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 216.239.35.8.123: [bad udp cksum 0x3b86 -> 0x9e6f!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.004821, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892463.322157276 (2025-06-14T12:21:03Z)
                          Receive Timestamp: 3958892463.403602689 (2025-06-14T12:21:03Z)
                          Transmit Timestamp: 3958892529.233536997 (2025-06-14T12:22:09Z)
                          Originator - Receive Timestamp: +0.081445412
                          Originator - Transmit Timestamp: +65.911379721
                          22:22:09.249623 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 62, id 14995, offset 0, flags [DF], proto UDP (17), length 76)
                          119.18.32.153.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -23
                          Root Delay: 0.005630, Root dispersion: 0.032546, Reference-ID: 0xcb2353f2
                          Reference Timestamp: 3958891441.573316619 (2025-06-14T12:04:01Z)
                          Originator Timestamp: 3958892529.233501405 (2025-06-14T12:22:09Z)
                          Receive Timestamp: 3958892529.241532230 (2025-06-14T12:22:09Z)
                          Transmit Timestamp: 3958892529.241620549 (2025-06-14T12:22:09Z)
                          Originator - Receive Timestamp: +0.008030824
                          Originator - Transmit Timestamp: +0.008119143
                          22:22:09.387909 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 110, id 37264, offset 0, flags [none], proto UDP (17), length 76)
                          216.239.35.8.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                          Root Delay: 0.000000, Root dispersion: 0.000091, Reference-ID: GOOG
                          Reference Timestamp: 3958892529.306483583 (2025-06-14T12:22:09Z)
                          Originator Timestamp: 3958892529.233536997 (2025-06-14T12:22:09Z)
                          Receive Timestamp: 3958892529.306483583 (2025-06-14T12:22:09Z)
                          Transmit Timestamp: 3958892529.306483584 (2025-06-14T12:22:09Z)
                          Originator - Receive Timestamp: +0.072946586
                          Originator - Transmit Timestamp: +0.072946587
                          22:22:11.234463 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 7726, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 17.253.66.45.123: [bad udp cksum 0x93b8 -> 0xb287!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.004852, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892465.290219375 (2025-06-14T12:21:05Z)
                          Receive Timestamp: 3958892465.298354612 (2025-06-14T12:21:05Z)
                          Transmit Timestamp: 3958892531.234427093 (2025-06-14T12:22:11Z)
                          Originator - Receive Timestamp: +0.008135237
                          Originator - Transmit Timestamp: +65.944207717
                          22:22:11.250883 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 59, id 17627, offset 0, flags [DF], proto UDP (17), length 76)
                          17.253.66.45.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                          Root Delay: 0.000000, Root dispersion: 0.000122, Reference-ID: GPSs
                          Reference Timestamp: 3958892530.503937200 (2025-06-14T12:22:10Z)
                          Originator Timestamp: 3958892531.234427093 (2025-06-14T12:22:11Z)
                          Receive Timestamp: 3958892531.243000441 (2025-06-14T12:22:11Z)
                          Transmit Timestamp: 3958892531.243016021 (2025-06-14T12:22:11Z)
                          Originator - Receive Timestamp: +0.008573348
                          Originator - Transmit Timestamp: +0.008588928
                          22:23:08.229657 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 21750, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 133.243.238.163.123: [bad udp cksum 0xb425 -> 0x0b5d!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.005706, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892522.335120567 (2025-06-14T12:22:02Z)
                          Receive Timestamp: 3958892522.426089341 (2025-06-14T12:22:02Z)
                          Transmit Timestamp: 3958892588.229612751 (2025-06-14T12:23:08Z)
                          Originator - Receive Timestamp: +0.090968774
                          Originator - Transmit Timestamp: +65.894492184
                          22:23:08.421862 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 44, id 21750, offset 0, flags [none], proto UDP (17), length 76)
                          133.243.238.163.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                          Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: NICT
                          Reference Timestamp: 3958892588.000000000 (2025-06-14T12:23:08Z)
                          Originator Timestamp: 3958892588.229612751 (2025-06-14T12:23:08Z)
                          Receive Timestamp: 3958892588.330715191 (2025-06-14T12:23:08Z)
                          Transmit Timestamp: 3958892588.330716011 (2025-06-14T12:23:08Z)
                          Originator - Receive Timestamp: +0.101102439
                          Originator - Transmit Timestamp: +0.101103259
                          22:23:10.234896 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 65244, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 202.142.142.241.123: [bad udp cksum 0x990e -> 0x9657!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.005737, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892525.169375177 (2025-06-14T12:22:05Z)
                          Receive Timestamp: 3958892525.316333771 (2025-06-14T12:22:05Z)
                          Transmit Timestamp: 3958892590.234847492 (2025-06-14T12:23:10Z)
                          Originator - Receive Timestamp: +0.146958594
                          Originator - Transmit Timestamp: +65.065472315
                          22:23:10.264576 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 61, id 32639, offset 0, flags [DF], proto UDP (17), length 76)
                          202.142.142.241.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.037506, Root dispersion: 0.031204, Reference-ID: 0x825fb350
                          Reference Timestamp: 3958891648.326188020 (2025-06-14T12:07:28Z)
                          Originator Timestamp: 3958892590.234847492 (2025-06-14T12:23:10Z)
                          Receive Timestamp: 3958892590.117834528 (2025-06-14T12:23:10Z)
                          Transmit Timestamp: 3958892590.117907373 (2025-06-14T12:23:10Z)
                          Originator - Receive Timestamp: -0.117012964
                          Originator - Transmit Timestamp: -0.116940119
                          22:23:15.232115 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 2469, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 216.239.35.8.123: [bad udp cksum 0x3b86 -> 0x3d13!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.005813, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892529.306483584 (2025-06-14T12:22:09Z)
                          Receive Timestamp: 3958892529.387931985 (2025-06-14T12:22:09Z)
                          Transmit Timestamp: 3958892595.232065980 (2025-06-14T12:23:15Z)
                          Originator - Receive Timestamp: +0.081448401
                          Originator - Transmit Timestamp: +65.925582395
                          22:23:15.232130 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 40710, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 17.253.66.45.123: [bad udp cksum 0x93b8 -> 0xd384!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.005813, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892531.243016021 (2025-06-14T12:22:11Z)
                          Receive Timestamp: 3958892531.250924171 (2025-06-14T12:22:11Z)
                          Transmit Timestamp: 3958892595.232121255 (2025-06-14T12:23:15Z)
                          Originator - Receive Timestamp: +0.007908149
                          Originator - Transmit Timestamp: +63.989105233
                          22:23:15.248637 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 59, id 49510, offset 0, flags [DF], proto UDP (17), length 76)
                          17.253.66.45.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                          Root Delay: 0.000000, Root dispersion: 0.000122, Reference-ID: GPSs
                          Reference Timestamp: 3958892594.503937293 (2025-06-14T12:23:14Z)
                          Originator Timestamp: 3958892595.232121255 (2025-06-14T12:23:15Z)
                          Receive Timestamp: 3958892595.240540413 (2025-06-14T12:23:15Z)
                          Transmit Timestamp: 3958892595.240552865 (2025-06-14T12:23:15Z)
                          Originator - Receive Timestamp: +0.008419158
                          Originator - Transmit Timestamp: +0.008431610
                          22:23:15.387305 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 110, id 11160, offset 0, flags [none], proto UDP (17), length 76)
                          216.239.35.8.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 1 (primary reference), poll 6 (64s), precision -20
                          Root Delay: 0.000000, Root dispersion: 0.000091, Reference-ID: GOOG
                          Reference Timestamp: 3958892595.305778679 (2025-06-14T12:23:15Z)
                          Originator Timestamp: 3958892595.232065980 (2025-06-14T12:23:15Z)
                          Receive Timestamp: 3958892595.305778679 (2025-06-14T12:23:15Z)
                          Transmit Timestamp: 3958892595.305778680 (2025-06-14T12:23:15Z)
                          Originator - Receive Timestamp: +0.073712699
                          Originator - Transmit Timestamp: +0.073712700
                          22:23:16.238779 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 55769, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 119.18.32.153.123: [bad udp cksum 0xd739 -> 0x7d66!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.005828, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892529.241620549 (2025-06-14T12:22:09Z)
                          Receive Timestamp: 3958892529.249632371 (2025-06-14T12:22:09Z)
                          Transmit Timestamp: 3958892596.238761603 (2025-06-14T12:23:16Z)
                          Originator - Receive Timestamp: +0.008011822
                          Originator - Transmit Timestamp: +66.997141053
                          22:23:16.255205 00:a2:00:b2:00:c2 > 60:be:b4:07:c6:14, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 62, id 30504, offset 0, flags [DF], proto UDP (17), length 76)
                          119.18.32.153.123 > 144.6.175.62.123: [udp sum ok] NTPv4, Server, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -23
                          Root Delay: 0.005630, Root dispersion: 0.033538, Reference-ID: 0xcb2353f2
                          Reference Timestamp: 3958891441.573316619 (2025-06-14T12:04:01Z)
                          Originator Timestamp: 3958892596.238761603 (2025-06-14T12:23:16Z)
                          Receive Timestamp: 3958892596.247557033 (2025-06-14T12:23:16Z)
                          Transmit Timestamp: 3958892596.247659775 (2025-06-14T12:23:16Z)
                          Originator - Receive Timestamp: +0.008795430
                          Originator - Transmit Timestamp: +0.008898172
                          22:24:15.237591 60:be:b4:07:c6:14 > 00:a2:00:b2:00:c2, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 62000, offset 0, flags [none], proto UDP (17), length 76)
                          144.6.175.62.123 > 133.243.238.163.123: [bad udp cksum 0xb425 -> 0x6068!] NTPv4, Client, length 48
                          Leap indicator: (0), Stratum 2 (secondary reference), poll 6 (64s), precision -24
                          Root Delay: 0.015853, Root dispersion: 0.006713, Reference-ID: 0x11fd422d
                          Reference Timestamp: 3958892334.278543106 (2025-06-14T12:18:54Z)
                          Originator Timestamp: 3958892588.330716011 (2025-06-14T12:23:08Z)
                          Receive Timestamp: 3958892588.421871340 (2025-06-14T12:23:08Z)
                          Transmit Timestamp: 3958892655.237558802 (2025-06-14T12:24:15Z)
                          Originator - Receive Timestamp: +0.091155328
                          Originator - Transmit Timestamp: +66.906842790

                          johnpozJ 1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @admacdo
                            last edited by johnpoz

                            @admacdo ok this doesn't make much sense

                            Receive Timestamp: 3958892019.237000500 (2025-06-14T12:13:39Z)
Transmit Timestamp: 3958892019.237000500 (2025-06-14T12:13:39Z)
Originator - Receive Timestamp: -0.003453436
Originator - Transmit Timestamp: -0.003453436

                            why in your server response are these all exactly the same numbers.. They should have differences.

                            they are different when you talk to different outside servers.. But the answers from your internal server the numbers are exactly the same.

                            192.168.25.250.123 > 192.168.25.254.123: [udp sum ok] NTPv4, Server, length 48
Leap indicator: (0), Stratum 1 (primary reference), poll 0 (1s), precision -18
Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: PPS^@
Reference Timestamp: 3958892341.000000000 (2025-06-14T12:19:01Z)
Originator Timestamp: 3958892341.243755483 (2025-06-14T12:19:01Z)
Receive Timestamp: 3958892341.239999999 (2025-06-14T12:19:01Z)
Transmit Timestamp: 3958892341.239999999 (2025-06-14T12:19:01Z)
Originator - Receive Timestamp: -0.003755483
Originator - Transmit Timestamp: -0.003755483

                            that doesn't make sense.. There should be some processing time.. even if it was 0.000000001

                            edit: here is my pfsense talking to my pi ntp server..

                            09:20:38.245061 00:08:a2:0c:e6:21 > b8:27:eb:31:70:ab, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 53402, offset 0, flags [none], proto UDP (17), length 76)
    192.168.3.253.123 > 192.168.3.32.123: [bad udp cksum 0x88b7 -> 0x1015!] NTPv4, Client, length 48
	Leap indicator:  (0), Stratum 2 (secondary reference), poll 6 (64s), precision -22
	Root Delay: 0.000579, Root dispersion: 0.008697, Reference-ID: 0xc0a80320
	  Reference Timestamp:  3958899176.245755911 (2025-06-14T14:12:56Z)
	  Originator Timestamp: 3958899571.245464583 (2025-06-14T14:19:31Z)
	  Receive Timestamp:    3958899571.245779985 (2025-06-14T14:19:31Z)
	  Transmit Timestamp:   3958899638.244990223 (2025-06-14T14:20:38Z)
	    Originator - Receive Timestamp:  +0.000315401
	    Originator - Transmit Timestamp: +66.999525640
09:20:38.245749 b8:27:eb:31:70:ab > 00:08:a2:0c:e6:21, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 43159, offset 0, flags [DF], proto UDP (17), length 76)
    192.168.3.32.123 > 192.168.3.253.123: [udp sum ok] NTPv4, Server, length 48
	Leap indicator:  (0), Stratum 1 (primary reference), poll 6 (64s), precision -24
	Root Delay: 0.000015, Root dispersion: 0.000030, Reference-ID: PPS^@
	  Reference Timestamp:  3958899620.546711021 (2025-06-14T14:20:20Z)
	  Originator Timestamp: 3958899638.244990223 (2025-06-14T14:20:38Z)
	  Receive Timestamp:    3958899638.245283344 (2025-06-14T14:20:38Z)
	  Transmit Timestamp:   3958899638.245454933 (2025-06-14T14:20:38Z)
	    Originator - Receive Timestamp:  +0.000293120
	    Originator - Transmit Timestamp: +0.000464709
09:21:43.245041 00:08:a2:0c:e6:21 > b8:27:eb:31:70:ab, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 25952, offset 0, flags [none], proto UDP (17), length 76)
    192.168.3.253.123 > 192.168.3.32.123: [bad udp cksum 0x88b7 -> 0x4b0a!] NTPv4, Client, length 48
	Leap indicator:  (0), Stratum 2 (secondary reference), poll 6 (64s), precision -22
	Root Delay: 0.000579, Root dispersion: 0.009658, Reference-ID: 0xc0a80320
	  Reference Timestamp:  3958899176.245755911 (2025-06-14T14:12:56Z)
	  Originator Timestamp: 3958899638.245454933 (2025-06-14T14:20:38Z)
	  Receive Timestamp:    3958899638.245768187 (2025-06-14T14:20:38Z)
	  Transmit Timestamp:   3958899703.244977578 (2025-06-14T14:21:43Z)
	    Originator - Receive Timestamp:  +0.000313254
	    Originator - Transmit Timestamp: +64.999522645
09:21:43.245743 b8:27:eb:31:70:ab > 00:08:a2:0c:e6:21, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 43614, offset 0, flags [DF], proto UDP (17), length 76)
    192.168.3.32.123 > 192.168.3.253.123: [udp sum ok] NTPv4, Server, length 48
	Leap indicator:  (0), Stratum 1 (primary reference), poll 6 (64s), precision -24
	Root Delay: 0.000015, Root dispersion: 0.000030, Reference-ID: PPS^@
	  Reference Timestamp:  3958899683.138522683 (2025-06-14T14:21:23Z)
	  Originator Timestamp: 3958899703.244977578 (2025-06-14T14:21:43Z)
	  Receive Timestamp:    3958899703.245263460 (2025-06-14T14:21:43Z)
	  Transmit Timestamp:   3958899703.245442833 (2025-06-14T14:21:43Z)
	    Originator - Receive Timestamp:  +0.000285881
	    Originator - Transmit Timestamp: +0.000465254
09:22:48.245036 00:08:a2:0c:e6:21 > b8:27:eb:31:70:ab, ethertype IPv4 (0x0800), length 90: (tos 0xb8, ttl 64, id 46500, offset 0, flags [none], proto UDP (17), length 76)
    192.168.3.253.123 > 192.168.3.32.123: [bad udp cksum 0x88b7 -> 0x7eb2!] NTPv4, Client, length 48
	Leap indicator:  (0), Stratum 2 (secondary reference), poll 6 (64s), precision -22
	Root Delay: 0.000579, Root dispersion: 0.004776, Reference-ID: 0xc0a80320
	  Reference Timestamp:  3958899703.245761089 (2025-06-14T14:21:43Z)
	  Originator Timestamp: 3958899703.245442833 (2025-06-14T14:21:43Z)
	  Receive Timestamp:    3958899703.245761089 (2025-06-14T14:21:43Z)
	  Transmit Timestamp:   3958899768.244973168 (2025-06-14T14:22:48Z)
	    Originator - Receive Timestamp:  +0.000318255
	    Originator - Transmit Timestamp: +64.999530334
09:22:48.245710 b8:27:eb:31:70:ab > 00:08:a2:0c:e6:21, ethertype IPv4 (0x0800), length 90: (tos 0x0, ttl 64, id 57029, offset 0, flags [DF], proto UDP (17), length 76)
    192.168.3.32.123 > 192.168.3.253.123: [udp sum ok] NTPv4, Server, length 48
	Leap indicator:  (0), Stratum 1 (primary reference), poll 6 (64s), precision -24
	Root Delay: 0.000015, Root dispersion: 0.000030, Reference-ID: PPS^@
	  Reference Timestamp:  3958899748.174415440 (2025-06-14T14:22:28Z)
	  Originator Timestamp: 3958899768.244973168 (2025-06-14T14:22:48Z)
	  Receive Timestamp:    3958899768.245263888 (2025-06-14T14:22:48Z)
	  Transmit Timestamp:   3958899768.245429649 (2025-06-14T14:22:48Z)
	    Originator - Receive Timestamp:  +0.000290720
	    Originator - Transmit Timestamp: +0.000456481

                            Makes no sense the answer from your ntp server that there is no difference in those numbers..

                            Also this makes no sense either.. So client talking to the ntp server, gets its answer in .000137 seconds.. So .1 of a ms.. Is your ntp server on the same VM host as your pfsense? How are you sending traffic over ethernet to some other device and getting an answer in .1 of a ms?

                            Even the best of networks your going to be looking at like .5 of a ms..

                            so your client (pfsense) talking to your ntp server sent a query over the wire, and got its response in 137 micro seconds.. And your ntp server took not even 1 nano second to process it? Something not right there..

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Hmm, interesting. I understand it's probably a very good ntp server but....

                              johnpozJ A 3 Replies Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator @stephenw10
                                last edited by

                                @stephenw10 yeah something is screwy.. Did he say his other client set time off this.. But are they using actual ntp, or just a sntp/timedate sort of client? this just pulls the time at that moment - it doesn't do any sort of adjustments on the client clock to keep them in sync - and doubt it cares about these numbers.. But I know a normal ntp client uses these numbers in calculating delay, etc. Maybe those numbers being the same is throwing off the calculation so ntp doesn't accept the response?

                                All I know is it seems odd that the ntp server would have exact numbers like that.

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                1 Reply Last reply Reply Quote 0
                                • A
                                  admacdo @stephenw10
                                  last edited by

                                  @stephenw10

                                  Woah. This is what happens when you post when you really want to go to bed. I did a quick look for errors and totally ignored the numbers.
                                  Some of the clients around the house are using SNTP because they're dumb boxes, but the main windows machines are running with a real NTP client from Meinberg and they're calculating the delay, offset and jitter with no issues. I'll do some more captures later and pay more attention. It's new car day, so I've got distractions .

                                  I may have to resurrect the Pi NTP servers and see what happens when they're supplying data. About five years ago, I had five of them with various GPS input, all comparing against each other to test peering and delay interaction.
                                  There are no VM's in the house at this point.

                                  1 Reply Last reply Reply Quote 0
                                  • A
                                    admacdo @stephenw10
                                    last edited by

                                    @stephenw10
                                    Yeah, no NTP servers are that good. Even the 10 gigabit ones with reflectors..

                                    1 Reply Last reply Reply Quote 1
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.