On 4/11/2010 10:45 PM, questions-requ...@lists.ntp.org wrote:
> Send questions mailing list submissions to
> questions@lists.ntp.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.ntp.org/listinfo/questions
> or, via email, send a message with subject or b
David Mills wrote:
> Todd,
>
> Merrill Lynch manages my investment portfolio, IRAs and trusts. While
> Greg Johns is the headman, I don't think your paths will cross.
Why's that?
>
> Dave
>
> Todd Glassey wrote:
>
>> David Mills wrote:
>>
>&g
there. I was working with Jack Cavenaugh
in compliance and the managing partner for silicon valley, pat williams
in taking secured and audited time into their compliance model.
Todd
>
> Dave
>
> Todd Glassey wrote:
>
>> David - I was just looking at a real-time control pr
Todd Glassey wrote:
> David - I was just looking at a real-time control process a friend had
> implemented for a controller which is handling some very fast nuclear
> events and parts of the sensor code is actually running in an nVidia GPU
> core and it hit me, what a neat timi
David - I was just looking at a real-time control process a friend had
implemented for a controller which is handling some very fast nuclear
events and parts of the sensor code is actually running in an nVidia GPU
core and it hit me, what a neat timing server it would make. I bring
this up beca
E-Mail Sent to this address will be added to the BlackLists wrote:
> Unruh wrote:
>
>> JuanFran writes:
>>
>>> Hi! My system should be accurate to within approximately
>>> 10 milliseconds .
>>>
Is there a need to be able to say five years from now, prove that the
time data in the
aluciani wrote:
> Hello Folks.
>
> I have several AIX Unix 5.2 serves that point to a Cisco router as the
> NTP time source.
>
I would say thats a pretty insecure idea...
> Is there any way I could monitor the time source and against the
> servers to ensure that they are in sync?
>
You coul
Unruh wrote:
> Evandro Menezes writes:
>
>
>> On Nov 9, 9:21=A0am, "David J Taylor" > bit.nor-this.co.uk.invalid> wrote:
>>
>>> Here's the offset:
>>> =A0http://www.satsignal.eu/ntp/2009-11-07-08-09-Narvik_offset-tod.png
>>>
>>> and here's the rate:
>>> =A0http://www.satsignal.eu/ntp/2009-
David Mills wrote:
> Danny,
>
> Sure you can in a couple of lines of code. However, where are you going
> to put the result? The proto_config() call has a fixed number of fields
> all tied up with data structures used for name resolution and for remote
> configuration. The original plan, now onl
David J Taylor wrote:
> "Hal Murray" <> wrote in message
> news:v72dnrrfbauf8wvxnz2dnuvz_t5i4...@megapath.net...
>
>>> NTPD is at its best from about 2300 local time to 0700 local time. The
>>> net quiets down and NTP packets travel with minimal and highly
>>> predictable delays.
>>>
>>
Danny Mayer wrote:
> Todd Glassey wrote:
>
>> Dave Hart wrote:
>>
>>> Undoubtedly there would many minor kinks to work out as well. I know
>>> of another cygwin-based program which on Windows Vista tends to fail
>>> before starting main()
RedGrittyBrick wrote:
> Unruh wrote:
>
>> "David J Taylor"
>> writes:
>>
>>
>>> At source, it's recently been within about 10 microseconds:
>>>
>> Sorry, at 10usec, the distance away of the transmitter must be less than 3
>> km.
>>
>
> At *source*, the distance to the transmi
David J Taylor wrote:
> "David J Taylor"
> wrote in
> message news:%xqgm.126$ym4...@text.news.virginmedia.com...
>
>> "Unruh" <> wrote in message news:34jgm.50898$ph1.36...@edtnps82...
>> []
>>
>>> Note that chrony will give you a factor of 2 or three improvement over
>>> ntp in the err
Dave Hart wrote:
> On Sun, Nov 1, 2009 at 5:09 PM, todd glassey wrote:
>
>> As I remember Sven was working on this - did we ever get it completed and if
>> so where is the documentation on it?
>>
>
> I don't believe so. There is very little evidence i
As I remember Sven was working on this - did we ever get it completed
and if so where is the documentation on it?
Todd Glassey
___
questions mailing list
questions@lists.ntp.org
https://lists.ntp.org/mailman/listinfo/questions
David Mills wrote:
> Dave,
>
> Better do this quickly, cleanly and with minimum wiggle room. Otherwise,
> somebody who doesn't know anything will call it a security flaw, call
> the CERT and create an Incident.
You mean like 2009-USCERTv33I7IQA...
Todd
> This has happened before when somebody
Dave Hart wrote:
> On Fri, Sep 11, 2009 at 1:37 PM, Ryan Malayter wrote:
>
>> I don't use autokey in production, but I would also suggest that if
>> the issue causes the reference implementation to violate RFCs and also
>> creates a security issue with key shortening, it should be fixed
>> witho
27;fix' NTP like this it will be removed from the MANDATORY SW
components of a number of standards because it will break the operations
of existing systems.
Todd Glassey
>
>
>
>
> No virus found in this
When visiting that site in Firefox, but not in Internet Explorer, I get
the warning:
lists.ntp.org:443 uses an invalid security certificate.
"The certificate is not trusted because the issuer certificate is
unknown."
Perhaps my Firefox needs something
David Mills wrote:
> Dave
>
> I lobbied hard for NIST and USNO to use FreeBSD
They do - they are Dell boxes running FreeBSD - just not with NTP.ORG's
code base on them.
> rather than Linux and a
> modern NTP release; USNO does, but NIST does not due to internal inertia
> and the fear to change
ee also:
> http://support.ntp.org/bin/view/Support/VMWareNTP
>
> The VMware whitepaper listed there goes deep into the problem of
> providing good time to guest operating systems.
>
Only someone who was trying to sell VM systems wo
Dave Hart wrote:
> On Tue, Aug 18, 2009 at 10:34 AM, Martin
> Burnicki wrote:
>
>> AFAICS this means recent w32time clients in a Windows domain would never
>> accept reply packets from the PDC if ntpd instead of w32time is running on
>> the PDC, even if either of the workarounds mentioned above
phil wrote:
> "Ulrich Windl" wrote in message
> news:87tz0cxf5e@pc9454.klinik.uni-regensburg.de...
>
>> Heiko Gerstung writes:
>>
>>
>>> Hi Clock Addictives,
>>>
>>> following the security update of NTP we built a new version of our NTP
>>> Installer for Windows which now installs NT
>> Groetjes,
>> Maarten Wiltink
>>
The real question is whether the client address is set by DHCP and in
those cases - with pre-established Windows type runtime services,
whether the connection instance which was established on one IP address
stays bonded to the old address wh
ng NTP but I do have a version of Chrony running in
my lab with really impressive results on a mach64 kernel.
Todd Glassey
>
>> I presume you mean QRM (Man made) as oposed to QRN (Natural)
>> interference from all the digital kit. Slip of finger on keys no
>> doubt.
>>
tglassey wrote:
> G8KBV wrote:
>> Wonder if this will get posed, or returned to me..
>>
>> Hi...
>>
>> Been lurking for a while.
>>
>> Also, been messing about trying to get a local (to me) GPS
>> Disciplined NTP server working, based on David Taylor's work
>> with FreeBSD,
> Yes this is a good pl
ns in many 1G networks and in all of the faster (10G) Ethernet
deployments I have tested unless its specifically disabled.
> Run ntpd continuously and see if that solves your problem.
>
>
Which opens a huge security problem - you should ONLY run NTPd on
s
Danny Mayer wrote:
> Miguel Angel Fernández wrote:
>
>> Hello everybody
>>
>>
>>
>> Can anybody help me, please?
>>
>> Is there any way to configure one Server (Debian Linux) as NTP Stratum1 with
>> its own clock (the system clock)?
>>
yes
>> The reason for this question is that we need t
T wrote:
> Greetings:
>
> We have about 50 Linux/Solaris/Windows boxes running ntpd at several
> different sites. Some of the systems from time to time go out of sync.
> My question is there a way to test ntpd machines are all in sync with
> the master server?
>
Sure run a peering based log capt
Danny Mayer wrote:
> tglassey wrote:
>
>> Danny Mayer wrote:
>>
>> By geography, just like the zones that were mentioned in the post
>> above.
>> However, they are more fine-grained, especially when compared with
>> large zones like us or eu.
>>
>>
>
ly in the EU where
there are specific requirements for the operation of a time-stamping
service of *** any *** type as a public offering, meaning NTP operators
would be liable.
And by the way - there may be criminal penalties for intentionally
violating this as well in all of the EU member na
Rob wrote:
> Rick Jones wrote:
>
>> Rob wrote:
>>
>>> This is no longer required. You can just use pool.ntp.org or
>>> 0.pool.ntp.org and the DNS servers for the pool will automatically
>>> determine which servers are closest to you.
>>>
>> Is that by geography, hop count or ICMP
Richard B. Gilbert wrote:
> Rod Dorman wrote:
>
>> In article ,
>> Richard B. Gilbert wrote:
>>
>>> ...
>>> Kludging local timezone conversions into the NTP protocol somehow would
>>> be a nightmare if you could persuade anyone to do it! 24 or more
>>> timezones ...
>>>
>> Don'
established,
> maybe it could be expanded to include timezone data?
>
I submitted this as a discovery protocol addition about 5 years ago and
it was squashed but I think the NEA people picked up some of this. FWIW
there should probably be something in DHCP and DNSSEC as well for
Patrick Klos wrote:
> In article <2pmdnygdgrswzbrxnz2dnuvz_uidn...@giganews.com>,
> ScottyG wrote:
>
>> Hello.
>>
>> The company I am working for needs to be able to record timestamps in a
>> trading
>> system logs down to a .1 microsecond accuracy.
>>
>> We will have servers located in Lond
Danny Mayer wrote:
> Todd Glassey CISM CIFI wrote:
>
>> Danny Mayer wrote:
>>
>>> tglassey wrote:
>>>
>>>
>>>> Danny Mayer wrote:
>>>>
>>>>
>>>>> Scott Haneda wrote:
>&
Danny Mayer wrote:
> tglassey wrote:
>
>> Danny Mayer wrote:
>>
>>> Scott Haneda wrote:
>>>
>>>
>>>> On Jun 15, 2009, at 8:59 AM, Todd Glassey CISM CIFI wrote:
>>>>
>>>>
>>>>
Scott Haneda wrote:
> On Jun 15, 2009, at 8:59 AM, Todd Glassey CISM CIFI wrote:
>
>>> You should be running ntpd as a daemon. That will keep the clock in
>>> synch and you never have to touch it.
>>
>> Which creates an audit issue and security profile which alw
s my command:
>> /usr/sbin/ntpdate -u
>>
>>
>
> Why are you bothering to do this when you can just run ntpd as a daemon
> which will keep your clock perfectly synchronized.
>
As noted before NTPd is not the answer for everyone.
Todd Glassey
>
>&
he
biggest issue was live content from remote sites which would take
precedence in the larger issue.
If you want to take this offline then contact me directly
Todd Glassey
>
>
> With best regards,
> Alexey Ivanov
> -
eal time
based processes if you want them to work in a proper manner.
Todd Glassey
>
>> ask because currently I don't have a DRBD or network filesystem for
>> NTP, I have it configured identically on each node and the service
>> just runs on one of the nodes at at tim
Folks - The new Chicago NIST time server is finally up and operational.
The IP address is 208.66.175.36 and its name is NIST1-CHI.USTiming.ORG.
Normal NIST-server use rules... Enjoy!
Todd Glassey
___
questions mailing list
questions@lists.ntp.org
Dave Hart wrote:
>> Does NTP even allow COM4?
>>
>
> I don't think so. The unit numbers are limited to 0-3, I believe, but
> I don't have any concept of why. Windows never has a COM0:, so
> arguably it was a poor choice to map unit number to com port number
> without adding 1, but it's far t
p the issues with L1 GPS being so easily spoofed
from a trust-anchor standpoint L1 is almost worthless - if you need to
prove the source of the time then you need an AutoKEY based relationship
with some reliable provider.
Todd Glassey
>
>
> --
s for
Any Purpose" limitations is silly IMHO.
Todd .
>
> /gdBaxter
>
>
>
>
>
>
> On Sat, May 2, 2009 at 11:11 PM, Danny Mayer <mailto:ma...@ntp.org>> wrote:
> Todd Glassey CISM CIFI wrote:
> > Danny Maye
Danny Mayer wrote:
> Todd Glassey CISM CIFI wrote:
>
>> Gretchen Baxter wrote:
>>
>>> thanx!
>>>
>>> in that case, this is good news for everyone in the timing community.
>>>
>> We think so - and as CertifiedTime's ori
Richard B. Gilbert wrote:
> David J Taylor wrote:
>
>> Garrett Wollman wrote:
>>
>>> In article ,
>>> Richard B. Gilbert wrote:
>>>
>>>
USB is nearly useless for NTP! USB has latencies sufficiently large
and variable to render it unsuitable for use with NTP.
Internet poses.
>
> On Thu, Apr 30, 2009 at 11:50 AM, Todd Glassey CISM CIFI
> mailto:tglas...@earthlink.net>> wrote:
>
> Gretchen Baxter wrote:
>
> thanx!
>
> in that case, this is good news for everyone in the timing
> community.
&
Richard B. Gilbert wrote:
> David J Taylor wrote:
>
>> Unruh wrote:
>>
>>> Nathaniel Homier writes:
>>>
>>>
Hello.
I would like to know if one can use the line audio out of any old
portable shortwave radio tuned to a time signal and fed via a line
a
ation - only for moving time around).
3) A formal characterization and operations guidelines so the
commercial industry don't get bad advice on the systems and processes
needed to generate that court-admissible evidence.
Todd Glassey
>
>
> On Wed, Apr 29, 2009 at 5:53 PM, Todd
that the entity is alive and well - so just change the name
If you want to talk more about what happend to CertifiedTime or why, we
should take this offline.
Todd Glassey CISM CIFI
tglas...@certichron.com
___
questions mailing list
questions@lists.nt
51 matches
Mail list logo
