On 12/17/23 15:03, James Knott wrote:
I run my own NTP server, which can be reached with both IPv4 and IPv6. However, when I check with Wireshark, I see NTP requests going not only to my server, but also to an IPv4 address on the Internet. This happens with both my desktop system and ThinkPad, but they have different external addresses, in addition to my server. I use the host name for the server address in NTP Configuration.
Any idea where that other address comes from?
Guessing, that it is normal NTP traffic going between servers to attempt to determine latency and ensure the servers remain in sync. You must be a? Stratum 3 host? Poke around a bit and see what traffic is used to keep tabs on servers offering NTP. It has been a decade, but I do recall there being a fairly sophisticated way that servers keep metrics on each other. -- David C. Rankin, J.D.,P.E.