weirdness

That's the thing, they only sync on boot up. It's stopped now
though, only lasted a few hours. I have tcpdump going and haven't
seen anything other than dns, http, pop, irc traffic running through.
The only other traffic is my box connecting to the remote time
server.

- -----------------------------------------------------------------
Sonja Michelle Lina Thomas



- ----- Original Message -----
From: Jose Castillo
To: plug-discuss@lists.PLUG.phoenix.az.us
Sent: Tuesday, November 21, 2000 11:06 AM
Subject: Re: weirdness


It looks like one of the xntp clients that connect to your server for
time
sync is having some problems. Check and see if any of your windows
boxes is
reporting time sync errors, or maybe one of them has the incorrect
time.
On Tue, 21 Nov 2000 10:15:00 -0700,
plug-discuss@lists.PLUG.phoenix.az.us
wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Ok this started at 8:55 this morning:
>

>      Nov 21 09:58:04 linux xntpd[3799]: recvfrom() fd=9: Connection
>  refused
>      Nov 21 09:59:08 linux xntpd[3799]: recvfrom() fd=9: Connection
>  refused
>      Nov 21 10:00:12 linux xntpd[3799]: recvfrom() fd=9: Connection
>  refused
>      Nov 21 10:02:20 linux xntpd[3799]: recvfrom() fd=9: Connection
>  refused
>      Nov 21 10:04:28 linux xntpd[3799]: recvfrom() fd=9: Connection
>  refused
>      Nov 21 10:05:32 linux xntpd[3799]: recvfrom() fd=9: Connection
>  refused
>      Nov 21 10:06:36 linux xntpd[3799]: recvfrom() fd=9: Connection
>  refused
>      Nov 21 10:07:40 linux xntpd[3799]: recvfrom() fd=9: Connection
>  refused

>
> It repeats every minute or so. No I run xntpd3 5.93 for my
> internal
> network to keep the windows boxes in sync with the RedHat 6.2 box.
> Is
> this someone trying to hammer at xntpd for an exploit or just
> someone
> just hammering at the door to flood my connection? Or just someone
> trying to flood out /var/log/messages?
>
> -
> -----------------------------------------------------------------
> Sonja Michelle Lina Thomas
>
> >
>
>
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail
> doesn't
post to the list quickly and you use Netscape to write mail.
>
> Plug-discuss mailing list -
> Plug-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss





_______________________________________________________
Tired of slow Internet? Get @Home Broadband Internet
http://www.home.com/xinbox/signup.html


________________________________________________
See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail
doesn't post to the list quickly and you use Netscape to write mail.

Plug-discuss mailing list - Plug-discuss@lists.PLUG.phoenix.az.us
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBOhrFOkMEEOy70wAmEQKMFwCgqmssmiJjLgmNsSgOtkfQh/AuTLEAoOdP
YUPynBCKsNV6BTCwIxIMSU8H
=hb+D
-----END PGP SIGNATURE-----