D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Monitoring another machine's network traffic

 

On Thu, 12 Nov 2009 14:55:52 +0000
Grant Sewell wrote:

> Hi all,
> 
> We have some energy-monitoring networked devices in the office and we
> need to know how frequently our devices request NTP (UDP#123) info.
> Is there anyway to monitor another machine's network traffic from a
> Linux machine?
> 
> Cheers.
> Grant. :)

OK, I've decided to put myself in the stream... I want to install an
NTP service on the underused virtual Linux server (Debian Stable) and
have our "networked device" contact that for NTP info.

I have installed ntp and my /etc/ntp.conf file looks like this:
--- BEGIN NTP.CONF FILE ---
driftfile /var/lib/ntp/ntp.drift
statsdir /var/log/ntpstats/
statistics loopstats peerstats clockstats
filegen loopstats file loopstats type day enable
filegen peerstats file peerstats type day enable
filegen clockstats file clockstats type day enable
server uk.pool.ntp.org iburst
server europe.pool.ntp.org iburst
restrict -4 default kod notrap nomodify nopeer noquery
restrict -6 default kod notrap nomodify nopeer noquery
restrict 127.0.0.1
restrict ::1
restrict 192.168.1.0 mask 255.255.255.0 notrust nomodify notrap
--- END NTP.CONF FILE ---

When I run "ntpdate -q [ip address of server]" from my Ubuntu laptop it
says: "no server suitable for synchronization found".  When I run
"ntpdate -q localhost" on the server, it shows the service is accepting
connections via localhost.

nmap doesn't show NTP as a running service, when queried either locally
or remotely.

What am I doing wrong?

Cheers.
Grant.

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html