Estimated active ntp pool clients: 544 Estimated abusive ntp pool clients: 4 Estimated inactive ntp pool clients: 64 Total ntp pool clients being tracked: 608 Note: NTP is a stateless and connectionless (UDP based) protocol, so exact numbers can't be determined. 3332929 ntp requests, in total, have been seen since 09/23/08 11:22:26 1750404 (52.5%) are from clients that are still active. Long term request rate: 0.492 seconds between requests (2.03 req/sec) Long term bandwidth in: 0.151 KBytes/s 1.207 Kbits/s Long term bandwidth in: 0.373 GB/month 2.985 Gb/month Current request rate: 0.539 seconds between requests (1.85 req/sec) Current bandwidth in: 0.138 KBytes/s 1.101 Kbits/s Current bandwidth in: 0.340 GB/month 2.721 Gb/month (NTP packets are usually 76 bytes, UDP overhead included, in each direction.) The dump file was written 30 seconds ago, at 10/12/08 09:46:30 Subnets with many clients: # of Subnet Total Aggregate Abusive IPs Count Rate Clients 32 208.195.225.x 34375 24.863 0 18 74.203.65.x 29483 35.937 0 9 76.198.119.x 7037 89.662 0 7 170.211.199.x 25310 39.884 0 6 71.80.142.x 18432 46.044 0 5 65.221.65.x 1515 193.923 0 5 213.48.19.x 72044 12.818 0 4 80.94.118.x 3904 52.945 0 4 63.118.118.x 4247 216.433 0 Clients with rapid updates (min requests of 100): Rank First Seen Client IP Requests Rate Usage Cumulative 1 10/01/08 16:57:04 202.83.193.105 320278 2.01 18.30% 18.30% * ! 2 09/23/08 11:22:26 24.123.66.139 239885 11.85 13.70% 32.00% * ! 3 10/01/08 16:53:02 90.183.5.1 61485 13.86 3.51% 35.51% * ! 4 10/01/08 16:53:05 213.48.51.167 43291 21.09 2.47% 37.99% * ! 5 10/01/08 16:52:56 170.211.199.22 18353 58.96 1.05% 39.04% * 6 10/01/08 16:52:46 65.23.74.122 15067 59.29 0.86% 39.90% * 7 10/01/08 16:54:11 149.166.88.20 7330 57.79 0.42% 40.32% * 8 10/12/08 08:30:28 24.140.58.108 192 5.50 ( 0.01%) * = "active" = probably will send another request. ! = "abusive" = min requests of 100 and an average rate of less than 30s between requests over the life of the entire connection. Percentages are based on all packets from *active* clients. If the client is not active, its percentage is what it would be if it were active. Clients with very long updates (min requests of 10): Rank First Seen Client IP Requests Rate Usage Cumulative 1 10/09/08 23:11:07 96.57.112.202 15 14410.47 0.00% 0.00% * 2 10/01/08 16:58:57 76.229.89.6 68 12492.71 0.00% 0.00% * 3 10/09/08 23:55:37 64.211.166.78 65 5924.10 0.00% 0.01% * 4 10/01/08 17:00:01 83.18.56.94 244 3801.61 0.01% 0.02% * 5 10/01/08 16:56:01 217.205.184.235 247 3751.37 0.01% 0.04% * 6 10/05/08 02:18:11 83.70.74.19 174 3674.02 0.01% 0.05% * 7 10/02/08 16:39:30 69.66.94.242 231 3636.27 0.01% 0.06% * 8 10/01/08 17:46:00 68.157.135.46 255 3621.59 0.01% 0.07% * 9 10/08/08 11:59:35 71.223.12.28 92 3610.24 0.01% 0.08% * 10 10/01/08 17:17:31 76.232.10.77 253 3602.61 0.01% 0.09% * Clients distribution by count: bin ( bin range ) count 1 ( 1 - 1) 32 ****** 2 ( 2 - 2) 6 * 3 ( 3 - 3) 1 4 ( 4 - 4) 14 ** 5 ( 5 - 6) 3 8 ( 7 - 9) 7 * 11 ( 10 - 13) 3 16 ( 14 - 19) 2 22 ( 20 - 26) 3 32 ( 27 - 38) 3 45 ( 39 - 53) 5 64 ( 54 - 76) 4 90 ( 77 - 107) 7 * 128 ( 108 - 152) 6 * 181 ( 153 - 215) 7 * 256 ( 216 - 304) 14 ** 362 ( 305 - 430) 6 * 512 ( 431 - 608) 19 *** 724 ( 609 - 861) 21 **** 1024 ( 862 - 1217) 226 ********************************************* 1448 ( 1218 - 1722) 65 ************ 2048 ( 1723 - 2435) 34 ****** 2896 ( 2436 - 3444) 41 ******** 4096 ( 3445 - 4870) 27 ***** 5792 ( 4871 - 6888) 25 **** 8192 ( 6889 - 9741) 5 11585 ( 9742 - 13777) 3 16384 ( 13778 - 19483) 13 ** 23170 ( 19484 - 27554) 1 32768 ( 27555 - 38967) 0 46340 ( 38968 - 55108) 2 65536 ( 55109 - 77935) 1 92681 ( 77936 - 110217) 0 131072 ( 110218 - 155871) 0 185363 ( 155872 - 220435) 0 262144 ( 220436 - 311743) 1 370727 ( 311744 - 440871) 1 Clients distribution by rate (min requests of 10): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 0 1.4 ( 1.2 - 1.7) 0 2.0 ( 1.7 - 2.4) 1 2.8 ( 2.4 - 3.4) 0 4.0 ( 3.4 - 4.8) 0 5.7 ( 4.8 - 6.7) 1 8.0 ( 6.7 - 9.5) 0 11.3 ( 9.5 - 13.5) 1 16.0 ( 13.5 - 19.0) 1 22.6 ( 19.0 - 26.9) 1 32.0 ( 26.9 - 38.1) 1 45.3 ( 38.1 - 53.8) 0 64.0 ( 53.8 - 76.1) 24 *** 90.5 ( 76.1 - 107.6) 12 * 128.0 ( 107.6 - 152.2) 8 * 181.0 ( 152.2 - 215.3) 14 ** 256.0 ( 215.3 - 304.4) 26 **** 362.0 ( 304.4 - 430.5) 44 ******* 512.0 ( 430.5 - 608.9) 42 ****** 724.1 ( 608.9 - 861.1) 54 ******** 1024.0 ( 861.1 - 1217.7) 271 ********************************************* 1448.2 ( 1217.7 - 1722.2) 12 * 2048.0 ( 1722.2 - 2435.5) 8 * 2896.3 ( 2435.5 - 3444.3) 3 4096.0 ( 3444.3 - 4871.0) 18 ** 5792.6 ( 4871.0 - 6888.6) 1 8192.0 ( 6888.6 - 9742.0) 0 11585.2 ( 9742.0 - 13777.2) 1 16384.0 (13777.2 - 19484.0) 1 Clients distribution by amount of time client was active (in hours): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 64 ****** 1.4 ( 1.2 - 1.7) 0 2.0 ( 1.7 - 2.4) 2 2.8 ( 2.4 - 3.4) 0 4.0 ( 3.4 - 4.8) 2 5.7 ( 4.8 - 6.7) 2 8.0 ( 6.7 - 9.5) 5 11.3 ( 9.5 - 13.5) 3 16.0 ( 13.5 - 19.0) 3 22.6 ( 19.0 - 26.9) 9 32.0 ( 26.9 - 38.1) 2 45.3 ( 38.1 - 53.8) 7 64.0 ( 53.8 - 76.1) 11 * 90.5 ( 76.1 - 107.6) 7 128.0 ( 107.6 - 152.2) 12 * 181.0 ( 152.2 - 215.3) 11 * 256.0 ( 215.3 - 304.4) 466 ********************************************* 362.0 ( 304.4 - 430.5) 0 512.0 ( 430.5 - 608.9) 2 Clients distribution by time since first request (in hours): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 33 *** 1.4 ( 1.2 - 1.7) 2 2.0 ( 1.7 - 2.4) 9 2.8 ( 2.4 - 3.4) 14 * 4.0 ( 3.4 - 4.8) 10 5.7 ( 4.8 - 6.7) 1 8.0 ( 6.7 - 9.5) 5 11.3 ( 9.5 - 13.5) 4 16.0 ( 13.5 - 19.0) 3 22.6 ( 19.0 - 26.9) 9 32.0 ( 26.9 - 38.1) 2 45.3 ( 38.1 - 53.8) 7 64.0 ( 53.8 - 76.1) 11 * 90.5 ( 76.1 - 107.6) 7 128.0 ( 107.6 - 152.2) 12 * 181.0 ( 152.2 - 215.3) 11 * 256.0 ( 215.3 - 304.4) 466 ********************************************* 362.0 ( 304.4 - 430.5) 0 512.0 ( 430.5 - 608.9) 2 Active clients distribution by time since last request (in secs): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 3 * 1.4 ( 1.2 - 1.7) 0 2.0 ( 1.7 - 2.4) 2 2.8 ( 2.4 - 3.4) 2 4.0 ( 3.4 - 4.8) 1 5.7 ( 4.8 - 6.7) 1 8.0 ( 6.7 - 9.5) 4 * 11.3 ( 9.5 - 13.5) 10 **** 16.0 ( 13.5 - 19.0) 6 ** 22.6 ( 19.0 - 26.9) 7 ** 32.0 ( 26.9 - 38.1) 11 **** 45.3 ( 38.1 - 53.8) 13 ***** 64.0 ( 53.8 - 76.1) 21 ******** 90.5 ( 76.1 - 107.6) 22 ********* 128.0 ( 107.6 - 152.2) 33 ************* 181.0 ( 152.2 - 215.3) 33 ************* 256.0 ( 215.3 - 304.4) 53 ********************** 362.0 ( 304.4 - 430.5) 59 ************************ 512.0 ( 430.5 - 608.9) 62 ************************** 724.1 ( 608.9 - 861.1) 107 ********************************************* 1024.0 ( 861.1 - 1217.7) 57 *********************** 1448.2 ( 1217.7 - 1722.2) 12 ***** 2048.0 ( 1722.2 - 2435.5) 7 ** 2896.3 ( 2435.5 - 3444.3) 10 **** 4096.0 ( 3444.3 - 4871.0) 1 5792.6 ( 4871.0 - 6888.6) 3 * 8192.0 ( 6888.6 - 9742.0) 2 11585.2 ( 9742.0 - 13777.2) 2 Inactive clients distribution by time since last request (in secs): bin ( bin range ) count 1.0 ( 0.0 - 1.2) 0 1.4 ( 1.2 - 1.7) 0 2.0 ( 1.7 - 2.4) 0 2.8 ( 2.4 - 3.4) 0 4.0 ( 3.4 - 4.8) 0 5.7 ( 4.8 - 6.7) 0 8.0 ( 6.7 - 9.5) 0 11.3 ( 9.5 - 13.5) 0 16.0 ( 13.5 - 19.0) 0 22.6 ( 19.0 - 26.9) 0 32.0 ( 26.9 - 38.1) 0 45.3 ( 38.1 - 53.8) 0 64.0 ( 53.8 - 76.1) 0 90.5 ( 76.1 - 107.6) 0 128.0 ( 107.6 - 152.2) 0 181.0 ( 152.2 - 215.3) 0 256.0 ( 215.3 - 304.4) 1 ** 362.0 ( 304.4 - 430.5) 0 512.0 ( 430.5 - 608.9) 1 ** 724.1 ( 608.9 - 861.1) 0 1024.0 ( 861.1 - 1217.7) 1 ** 1448.2 ( 1217.7 - 1722.2) 2 **** 2048.0 ( 1722.2 - 2435.5) 7 *************** 2896.3 ( 2435.5 - 3444.3) 18 **************************************** 4096.0 ( 3444.3 - 4871.0) 2 **** 5792.6 ( 4871.0 - 6888.6) 5 *********** 8192.0 ( 6888.6 - 9742.0) 7 *************** 11585.2 ( 9742.0 - 13777.2) 20 *********************************************