>> Another possibility occurs to me, based mostly on watching traffic
>> in real time
> You must have better eyes than me!  I tried it briefly on one of my
> boxes that are in the NTP Pool[1] and it's getting about 40-50
> qps[2].

...so?  Mine is seeing about 20pps (snooping 1000 packets took 50
seconds), so a bit over 10qps ("a bit over" because of blocked hosts,
which are 1 ppq, whereas responded-to hosts are 2ppq.)

But I wasn't talking about watching _all_ traffic in real time.  I was
talking about watching worst-offender traffic, ie, filtered to watch a
particularly ill-behaving host's traffic and nothing else.  (In tcpdump
terms, "host A.B.C.D" where A.B.C.D is picked based on traffic stats.)

/~\ The ASCII                             Mouse
\ / Ribbon Campaign
 X  Against HTML                [email protected]
/ \ Email!           7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B
_______________________________________________
timekeepers mailing list
[email protected]
https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers

Reply via email to