Some information on the NTP weirdness from SANS: http://isc.sans.edu/diary.html?storyid=14548&rss -----Original Message----- From: outages-bounces@outages.org [mailto:outages-bounces@outages.org] On Behalf Of George Herbert Sent: Tuesday, November 20, 2012 2:20 PM To: Jay Ashworth Cc: outages@outages.org Subject: Re: [outages] Possible NTP attacks? On Nov 20, 2012, at 11:05 AM, Jay Ashworth <jra@baylink.com> wrote:
There are what appears to be a statistically significant number of reports this week of possible anomalies with NTP timekeeping in various parts of the net.
Just to slightly correct and focus this - other than an unconfirmed GPS report, everything I have seen reported so far either publicly or privately confirmed to be syncing with the USNO servers tick or tock when problems manifested. This appears - so far - to have been of limited scope. Widespread, because of tick and tock's popularity and (as Leo Bicknell noted elsewhere) widespread use of too few upstream servers in local configurations. But not widespread among the stratum 1 servers set. George William Herbert Sent from my iPhone _______________________________________________ Outages mailing list Outages@outages.org https://puck.nether.net/mailman/listinfo/outages