Hello. I’m running a server in the pool, and it’s mostly a quiet place. But 3 to 4 days ago I started getting a coinsiderably high amount of requests from one host: 18:39:39.642792 IP (tos 0x10, ttl 59, id 33756, offset 0, flags [DF], proto UDP (17), length 76) 78.26.151.96.33417 > 37.57.97.11…

This is probably a different broken client. It looks like systemd-timesyncd. It has a bug causing requests to be sent in an infinite loop. The rate depends on the hardware. On my servers I see this every few weeks. You can confirm it’s timesyncd by looking at the sequence of its transmit timestamps…

Uncommon load question: many packets from one IP

Server operators

stevesommars October 8, 2021, 4:41pm 4

See the details I posted.

What is the cause of the demand spikes?

NTP bursts from FortiGate firewalls

Topic		Replies	Views
Buggy ntp server?	18	1702	April 3, 2020
Getting hit hard... 83.85.79.213 Server operators	1	1703	April 20, 2017
Realistic max packets/sec per source IP? Server operators	21	1446	May 25, 2020
Number of concurent connections Server operators	7	2568	February 19, 2018
Massive packet loss on be.pool.ntp.org since 9/09/2019 Client Configuration and Development monitoring	9	1446	September 14, 2019

Uncommon load question: many packets from one IP

Related topics