[ntp:questions] Crypto Association Flags - IFF scheme with flags=0x87f21

2014-01-27 Thread ardi
According to http://support.ntp.org/bin/view/Support/ConfiguringAutokey#Section_6.7.4 the crypto accociation flags can be checked. I have set up autokey between server and client using IFF keys scheme ans watching flags on client it shows: flags=0x87f21 which is using 5 digits after x. a) But

[ntp:questions] generating GQ keys on server - IFF keys already created

2014-01-27 Thread ardi
According to http://www.ntp.org/ntpfaq/NTP-s-config-adv.htm#S-CONFIG-ADV-AUTH GQ keys are generated on server using: cd /etc/ntp ntp-keygen -T -G -p serverpassword In the client part of setup it states: --- GQ Group Keys Obtain the GQ group key from step 2, copy the key file to the keysdir,

[ntp:questions] generating GQ keys in /etc/ntp1

2014-01-27 Thread ardi
hello all: according to http://www.ntp.org/ntpfaq/NTP-s-config-adv.htm#STEP-AUTOKEY-SERVER-GQ i was able to generate GQ keys on server and copy parameter file to client: NOTE: i have used /etc/ntp1; chmod 600 /etc/ntp1 for this purpose and changed ntp.conf on server and client machines as well.

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread Rob
Marco Marongiu brontoli...@gmail.com wrote: On 01/26/2014 08:08 PM, Rob wrote: My hypothesis is that the ARP entry for the NTP server has timed out, and when ARP has to resolve an entry in some implementations the first packet is always lost (it is not cached pending a reply). When the cycle

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread Charles Swiger
Hi-- On Jan 27, 2014, at 10:10 AM, Rob nom...@example.com wrote: Despite lots of tracing I still cannot really pinpoint the problem. The only thing I see is that ping has absolutely zero loss and all usual protocols work fine, but ntp indicates a high loss when there is no other network

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread Rob
Charles Swiger cswi...@mac.com wrote: Hi-- On Jan 27, 2014, at 10:10 AM, Rob nom...@example.com wrote: Despite lots of tracing I still cannot really pinpoint the problem. The only thing I see is that ping has absolutely zero loss and all usual protocols work fine, but ntp indicates a high

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread William Unruh
On 2014-01-27, Rob nom...@example.com wrote: Charles Swiger cswi...@mac.com wrote: Hi-- On Jan 27, 2014, at 10:10 AM, Rob nom...@example.com wrote: Despite lots of tracing I still cannot really pinpoint the problem. The only thing I see is that ping has absolutely zero loss and all usual

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread William Unruh
On 2014-01-27, Rob nom...@example.com wrote: Marco Marongiu brontoli...@gmail.com wrote: On 01/26/2014 08:08 PM, Rob wrote: My hypothesis is that the ARP entry for the NTP server has timed out, and when ARP has to resolve an entry in some implementations the first packet is always lost (it is

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread Rick Jones
Brian Inglis brian.ing...@systematicsw.ab.ca wrote: You don't specify which system and devices you are using, so here are a couple of articles about changing ARP timeouts: http://www.embeddedsystemtesting.com/2013/01/arp-timeout-value-for-linux-windows.html

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread Brian Utterback
On 1/26/2014 2:08 PM, Rob wrote: On a very quiet network, I observe that ntpd sometimes has a very high loss rate: reach is 6, for example. When using ping or any other protocol, no packet loss at all is observed. My hypothesis is that the ARP entry for the NTP server has timed out, and when

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread Rob
Rick Jones rick.jon...@hp.com wrote: Brian Inglis brian.ing...@systematicsw.ab.ca wrote: You don't specify which system and devices you are using, so here are a couple of articles about changing ARP timeouts:

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread A C
On 1/27/2014 13:45, Rob wrote: Rick Jones rick.jon...@hp.com wrote: Brian Inglis brian.ing...@systematicsw.ab.ca wrote: You don't specify which system and devices you are using, so here are a couple of articles about changing ARP timeouts:

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread David Woolley
On 27/01/14 19:33, Rob wrote: It is unclear to me if an outgoing request would be shown on the trace when ARP resolution is incomplete. Needing to do ARP will cause some extra round trip delay, but should not prevent the packet being transmitted. ARP cache timeout is not a sufficient cause.

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread Brian Inglis
On 2014-01-27 14:45, Rob wrote: Rick Jones rick.jon...@hp.com wrote: Brian Inglis brian.ing...@systematicsw.ab.ca wrote: You don't specify which system and devices you are using, so here are a couple of articles about changing ARP timeouts:

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread Harlan Stenn
Brian Utterback writes: On the other hand, I have definitely observed that phenomenon as a source of asymmetric round trip time. The outgoing request packet gets delayed for ARP request and reply at each hop, but the return packet has no such delay. Quite a while ago I suggested a special

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread William Unruh
On 2014-01-28, Harlan Stenn st...@ntp.org wrote: Brian Utterback writes: On the other hand, I have definitely observed that phenomenon as a source of asymmetric round trip time. The outgoing request packet gets delayed for ARP request and reply at each hop, but the return packet has no

Re: [ntp:questions] NTP request retry?

2014-01-27 Thread Charles Elliott
Have you considered the possibility that the computer has an energy saver NIC, and NTPD activity is insufficient to wake it? C Elliott -Original Message- From: questions-bounces+elliott.ch=verizon@lists.ntp.org [mailto:questions-bounces+elliott.ch=verizon@lists.ntp.org] On