mirror of
https://github.com/zeek/zeek.git
synced 2025-10-12 19:48:20 +00:00
add tests for ntp protocol (WIP)
This commit is contained in:
Mauro Palumbo
parent
75b7be302f
commit
50f265353b
14 changed files with 197 additions and 0 deletions
|
|
@ -0,0 +1,16 @@
|
|||
ntp_message 192.168.43.118 -> 80.211.52.109:123 [version=4, mode=4, std_msg=[stratum=4, poll=64.0, precision=0, root_delay=0.048843, root_disp=0.07135, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245852.721794, org_time=1559246614.027421, rec_time=1559246614.048376, xmt_time=1559246614.048407, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 212.45.144.88:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.003799, root_disp=0.032959, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245541.537424, org_time=1559246617.027452, rec_time=1559246617.040799, xmt_time=1559246617.040813, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 31.14.131.188:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.040375, root_disp=0.001266, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559246560.207644, org_time=1559246619.027384, rec_time=1559246619.054018, xmt_time=1559246619.054053, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 185.19.184.35:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0.000008, root_delay=0.003235, root_disp=0.000275, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559246481.481997, org_time=1559246620.027461, rec_time=1559246620.040139, xmt_time=1559246620.040206, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 188.213.165.209:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.013397, root_disp=0.053787, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559244627.070973, org_time=1559246620.027408, rec_time=1559246620.043959, xmt_time=1559246620.043985, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 212.45.144.3:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0.000001, root_delay=0.00351, root_disp=0.036545, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245278.44239, org_time=1559246620.027475, rec_time=1559246620.048058, xmt_time=1559246620.048074, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 31.14.133.122:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.01091, root_disp=0.033463, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245577.265702, org_time=1559246621.027421, rec_time=1559246621.073143, xmt_time=1559246621.073172, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 94.177.187.22:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.013733, root_disp=0.041672, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245709.302032, org_time=1559246622.027446, rec_time=1559246622.071899, xmt_time=1559246622.071924, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 212.45.144.206:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0.000002, root_delay=0.00351, root_disp=0.038559, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245178.020777, org_time=1559246622.027478, rec_time=1559246622.068521, xmt_time=1559246622.06856, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 85.199.214.99:123 [version=4, mode=4, std_msg=[stratum=1, poll=16.0, precision=0, root_delay=0.0, root_disp=0.0, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=GPS\x00, ref_time=1559246622.0, org_time=1559246622.027384, rec_time=1559246622.073734, xmt_time=1559246622.07374, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 147.135.207.214:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0.000008, root_delay=0.042236, root_disp=0.03743, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245356.576177, org_time=1559246622.027464, rec_time=1559246622.086267, xmt_time=1559246622.086348, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 93.41.196.243:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.025391, root_disp=0.011642, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559246412.455332, org_time=1559246623.027478, rec_time=1559246623.041209, xmt_time=1559246623.04122, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 80.211.171.177:123 [version=4, mode=4, std_msg=[stratum=4, poll=64.0, precision=0, root_delay=0.036835, root_disp=0.046951, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245789.870424, org_time=1559246623.027521, rec_time=1559246623.04836, xmt_time=1559246623.048416, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 80.211.155.206:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.013535, root_disp=0.025497, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559246283.180069, org_time=1559246626.027514, rec_time=1559246626.044105, xmt_time=1559246626.044139, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 147.135.207.213:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0.000008, root_delay=0.042236, root_disp=0.037491, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245356.576177, org_time=1559246626.027432, rec_time=1559246626.058084, xmt_time=1559246626.058151, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 80.211.88.132:123 [version=3, mode=4, std_msg=[stratum=3, poll=64.0, precision=0.000001, root_delay=0.011765, root_disp=0.001526, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245638.390748, org_time=1559246627.027459, rec_time=1559246627.050401, xmt_time=1559246627.050438, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
|
|
@ -0,0 +1,25 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path ntp
|
||||
#open 2019-06-04-15-48-36
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p version mode stratum poll precision root_delay root_disp kiss_code ref_id ref_addr ref_v6_hash_prefix ref_time org_time rec_time xmt_time key_id digest num_exts OpCode resp_bit err_bit more_bit sequence status association_id ReqCode auth_bit sequence implementation err
|
||||
#types time string addr port addr port count count count interval interval interval interval string string addr string time time time time count string count count bool bool bool count count count count bool count count count
|
||||
1559246614.074475 CHhAvVGS1DHFjwGM9 192.168.43.118 123 80.211.52.109 123 4 4 4 64.000000 0.000000 0.048843 0.071350 - - - - 1559245852.721794 1559246614.027421 1559246614.048376 1559246614.048407 - - 0 - - - - - - - - - - - -
|
||||
1559246617.063504 ClEkJM2Vm5giqnMf4h 192.168.43.118 123 212.45.144.88 123 4 4 2 64.000000 0.000000 0.003799 0.032959 - - - - 1559245541.537424 1559246617.027452 1559246617.040799 1559246617.040813 - - 0 - - - - - - - - - - - -
|
||||
1559246619.074513 C4J4Th3PJpwUYZZ6gc 192.168.43.118 123 31.14.131.188 123 4 4 2 64.000000 0.000000 0.040375 0.001266 - - - - 1559246560.207644 1559246619.027384 1559246619.054018 1559246619.054053 - - 0 - - - - - - - - - - - -
|
||||
1559246620.059693 CUM0KZ3MLUfNB0cl11 192.168.43.118 123 185.19.184.35 123 4 4 2 64.000000 0.000008 0.003235 0.000275 - - - - 1559246481.481997 1559246620.027461 1559246620.040139 1559246620.040206 - - 0 - - - - - - - - - - - -
|
||||
1559246620.065302 CtPZjS20MLrsMUOJi2 192.168.43.118 123 188.213.165.209 123 4 4 2 64.000000 0.000000 0.013397 0.053787 - - - - 1559244627.070973 1559246620.027408 1559246620.043959 1559246620.043985 - - 0 - - - - - - - - - - - -
|
||||
1559246620.065335 CmES5u32sYpV7JYN 192.168.43.118 123 212.45.144.3 123 4 4 2 64.000000 0.000001 0.003510 0.036545 - - - - 1559245278.442390 1559246620.027475 1559246620.048058 1559246620.048074 - - 0 - - - - - - - - - - - -
|
||||
1559246621.095645 CP5puj4I8PtEU4qzYg 192.168.43.118 123 31.14.133.122 123 4 4 2 64.000000 0.000000 0.010910 0.033463 - - - - 1559245577.265702 1559246621.027421 1559246621.073143 1559246621.073172 - - 0 - - - - - - - - - - - -
|
||||
1559246622.092519 C3eiCBGOLw3VtHfOj 192.168.43.118 123 94.177.187.22 123 4 4 2 64.000000 0.000000 0.013733 0.041672 - - - - 1559245709.302032 1559246622.027446 1559246622.071899 1559246622.071924 - - 0 - - - - - - - - - - - -
|
||||
1559246622.092556 C0LAHyvtKSQHyJxIl 192.168.43.118 123 212.45.144.206 123 4 4 2 64.000000 0.000002 0.003510 0.038559 - - - - 1559245178.020777 1559246622.027478 1559246622.068521 1559246622.068560 - - 0 - - - - - - - - - - - -
|
||||
1559246622.100109 C37jN32gN3y3AZzyf6 192.168.43.118 123 85.199.214.99 123 4 4 1 16.000000 0.000000 0.000000 0.000000 - - - - 1559246622.000000 1559246622.027384 1559246622.073734 1559246622.073740 - - 0 - - - - - - - - - - - -
|
||||
1559246622.100152 CwjjYJ2WqgTbAqiHl6 192.168.43.118 123 147.135.207.214 123 4 4 2 64.000000 0.000008 0.042236 0.037430 - - - - 1559245356.576177 1559246622.027464 1559246622.086267 1559246622.086348 - - 0 - - - - - - - - - - - -
|
||||
1559246623.062844 CFLRIC3zaTU1loLGxh 192.168.43.118 123 93.41.196.243 123 4 4 2 64.000000 0.000000 0.025391 0.011642 - - - - 1559246412.455332 1559246623.027478 1559246623.041209 1559246623.041220 - - 0 - - - - - - - - - - - -
|
||||
1559246623.070217 C9rXSW3KSpTYvPrlI1 192.168.43.118 123 80.211.171.177 123 4 4 4 64.000000 0.000000 0.036835 0.046951 - - - - 1559245789.870424 1559246623.027521 1559246623.048360 1559246623.048416 - - 0 - - - - - - - - - - - -
|
||||
1559246626.065984 C9mvWx3ezztgzcexV7 192.168.43.118 123 80.211.155.206 123 4 4 2 64.000000 0.000000 0.013535 0.025497 - - - - 1559246283.180069 1559246626.027514 1559246626.044105 1559246626.044139 - - 0 - - - - - - - - - - - -
|
||||
1559246626.075079 Ck51lg1bScffFj34Ri 192.168.43.118 123 147.135.207.213 123 4 4 2 64.000000 0.000008 0.042236 0.037491 - - - - 1559245356.576177 1559246626.027432 1559246626.058084 1559246626.058151 - - 0 - - - - - - - - - - - -
|
||||
1559246627.073485 CNnMIj2QSd84NKf7U3 192.168.43.118 123 80.211.88.132 123 3 4 3 64.000000 0.000001 0.011765 0.001526 - - - - 1559245638.390748 1559246627.027459 1559246627.050401 1559246627.050438 - - 0 - - - - - - - - - - - -
|
||||
#close 2019-06-04-15-48-36
|
||||
|
|
@ -0,0 +1,18 @@
|
|||
ntp_message 192.168.43.118 -> 80.211.52.109:123 [version=4, mode=4, std_msg=[stratum=4, poll=64.0, precision=0, root_delay=0.048843, root_disp=0.075409, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245852.721794, org_time=1559246885.027449, rec_time=1559246885.069212, xmt_time=1559246885.069247, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 212.45.144.88:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.003799, root_disp=0.037018, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245541.537424, org_time=1559246887.027425, rec_time=1559246887.050758, xmt_time=1559246887.050774, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 185.19.184.35:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0.000008, root_delay=0.003235, root_disp=0.000565, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559246481.481997, org_time=1559246888.030021, rec_time=1559246888.22033, xmt_time=1559246888.220401, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 31.14.131.188:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.040375, root_disp=0.001236, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559246882.967102, org_time=1559246888.027454, rec_time=1559246888.234035, xmt_time=1559246888.234061, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 212.45.144.3:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0.000001, root_delay=0.00351, root_disp=0.040573, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245278.44239, org_time=1559246889.027449, rec_time=1559246889.061203, xmt_time=1559246889.06122, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 188.213.165.209:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.013596, root_disp=0.025208, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559246828.086879, org_time=1559246890.027523, rec_time=1559246890.060644, xmt_time=1559246890.060687, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 31.14.133.122:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.01091, root_disp=0.037491, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245577.265702, org_time=1559246890.027512, rec_time=1559246890.069012, xmt_time=1559246890.069048, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 85.199.214.99:123 [version=4, mode=4, std_msg=[stratum=1, poll=16.0, precision=0, root_delay=0.0, root_disp=0.0, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=GPS\x00, ref_time=1559246890.0, org_time=1559246890.027469, rec_time=1559246890.070262, xmt_time=1559246890.070268, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 93.41.196.243:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.025391, root_disp=0.015671, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559246412.455332, org_time=1559246891.027395, rec_time=1559246891.051818, xmt_time=1559246891.051827, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 94.177.187.22:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.013657, root_disp=0.025818, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559246788.670839, org_time=1559246891.029953, rec_time=1559246891.061992, xmt_time=1559246891.062023, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 212.45.144.206:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0.000002, root_delay=0.00351, root_disp=0.042603, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245178.020777, org_time=1559246892.027401, rec_time=1559246892.05139, xmt_time=1559246892.051436, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 147.135.207.214:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0.000008, root_delay=0.042236, root_disp=0.041504, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245356.576177, org_time=1559246894.027491, rec_time=1559246894.059304, xmt_time=1559246894.05938, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 80.211.88.132:123 [version=3, mode=4, std_msg=[stratum=3, poll=64.0, precision=0.000001, root_delay=0.011917, root_disp=0.000565, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559246667.219303, org_time=1559246898.027403, rec_time=1559246898.077958, xmt_time=1559246898.078029, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 80.211.171.177:123 [version=4, mode=4, std_msg=[stratum=4, poll=64.0, precision=0, root_delay=0.036819, root_disp=0.050842, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559246822.40751, org_time=1559246898.029953, rec_time=1559246898.078347, xmt_time=1559246898.07843, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 80.211.155.206:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0, root_delay=0.013535, root_disp=0.029602, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559246283.180069, org_time=1559246900.030036, rec_time=1559246900.08881, xmt_time=1559246900.088844, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 147.135.207.213:123 [version=4, mode=4, std_msg=[stratum=2, poll=64.0, precision=0.000008, root_delay=0.042236, root_disp=0.041595, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1559245356.576177, org_time=1559246900.027439, rec_time=1559246900.103765, xmt_time=1559246900.103887, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 193.204.114.232:123 [version=4, mode=3, std_msg=[stratum=0, poll=16.0, precision=0.015625, root_delay=1.0, root_disp=1.0, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1101309131.444112, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.43.118 -> 193.204.114.232:123 [version=4, mode=4, std_msg=[stratum=1, poll=16.0, precision=0, root_delay=0.0, root_disp=0.000122, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=CTD\x00, ref_time=1559246910.937978, org_time=1101309131.444112, rec_time=1559246940.281161, xmt_time=1559246940.281191, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
|
|
@ -0,0 +1,27 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path ntp
|
||||
#open 2019-06-04-15-48-51
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p version mode stratum poll precision root_delay root_disp kiss_code ref_id ref_addr ref_v6_hash_prefix ref_time org_time rec_time xmt_time key_id digest num_exts OpCode resp_bit err_bit more_bit sequence status association_id ReqCode auth_bit sequence implementation err
|
||||
#types time string addr port addr port count count count interval interval interval interval string string addr string time time time time count string count count bool bool bool count count count count bool count count count
|
||||
1559246885.088815 CHhAvVGS1DHFjwGM9 192.168.43.118 123 80.211.52.109 123 4 4 4 64.000000 0.000000 0.048843 0.075409 - - - - 1559245852.721794 1559246885.027449 1559246885.069212 1559246885.069247 - - 0 - - - - - - - - - - - -
|
||||
1559246887.060766 ClEkJM2Vm5giqnMf4h 192.168.43.118 123 212.45.144.88 123 4 4 2 64.000000 0.000000 0.003799 0.037018 - - - - 1559245541.537424 1559246887.027425 1559246887.050758 1559246887.050774 - - 0 - - - - - - - - - - - -
|
||||
1559246888.422200 CtPZjS20MLrsMUOJi2 192.168.43.118 123 185.19.184.35 123 4 4 2 64.000000 0.000008 0.003235 0.000565 - - - - 1559246481.481997 1559246888.030021 1559246888.220330 1559246888.220401 - - 0 - - - - - - - - - - - -
|
||||
1559246888.422229 C4J4Th3PJpwUYZZ6gc 192.168.43.118 123 31.14.131.188 123 4 4 2 64.000000 0.000000 0.040375 0.001236 - - - - 1559246882.967102 1559246888.027454 1559246888.234035 1559246888.234061 - - 0 - - - - - - - - - - - -
|
||||
1559246889.075261 CUM0KZ3MLUfNB0cl11 192.168.43.118 123 212.45.144.3 123 4 4 2 64.000000 0.000001 0.003510 0.040573 - - - - 1559245278.442390 1559246889.027449 1559246889.061203 1559246889.061220 - - 0 - - - - - - - - - - - -
|
||||
1559246890.076319 C37jN32gN3y3AZzyf6 192.168.43.118 123 188.213.165.209 123 4 4 2 64.000000 0.000000 0.013596 0.025208 - - - - 1559246828.086879 1559246890.027523 1559246890.060644 1559246890.060687 - - 0 - - - - - - - - - - - -
|
||||
1559246890.082370 CP5puj4I8PtEU4qzYg 192.168.43.118 123 31.14.133.122 123 4 4 2 64.000000 0.000000 0.010910 0.037491 - - - - 1559245577.265702 1559246890.027512 1559246890.069012 1559246890.069048 - - 0 - - - - - - - - - - - -
|
||||
1559246890.094824 CmES5u32sYpV7JYN 192.168.43.118 123 85.199.214.99 123 4 4 1 16.000000 0.000000 0.000000 0.000000 - - - - 1559246890.000000 1559246890.027469 1559246890.070262 1559246890.070268 - - 0 - - - - - - - - - - - -
|
||||
1559246891.068733 C3eiCBGOLw3VtHfOj 192.168.43.118 123 93.41.196.243 123 4 4 2 64.000000 0.000000 0.025391 0.015671 - - - - 1559246412.455332 1559246891.027395 1559246891.051818 1559246891.051827 - - 0 - - - - - - - - - - - -
|
||||
1559246891.075965 CwjjYJ2WqgTbAqiHl6 192.168.43.118 123 94.177.187.22 123 4 4 2 64.000000 0.000000 0.013657 0.025818 - - - - 1559246788.670839 1559246891.029953 1559246891.061992 1559246891.062023 - - 0 - - - - - - - - - - - -
|
||||
1559246892.077560 C0LAHyvtKSQHyJxIl 192.168.43.118 123 212.45.144.206 123 4 4 2 64.000000 0.000002 0.003510 0.042603 - - - - 1559245178.020777 1559246892.027401 1559246892.051390 1559246892.051436 - - 0 - - - - - - - - - - - -
|
||||
1559246894.070325 CFLRIC3zaTU1loLGxh 192.168.43.118 123 147.135.207.214 123 4 4 2 64.000000 0.000008 0.042236 0.041504 - - - - 1559245356.576177 1559246894.027491 1559246894.059304 1559246894.059380 - - 0 - - - - - - - - - - - -
|
||||
1559246898.094782 C9rXSW3KSpTYvPrlI1 192.168.43.118 123 80.211.88.132 123 3 4 3 64.000000 0.000001 0.011917 0.000565 - - - - 1559246667.219303 1559246898.027403 1559246898.077958 1559246898.078029 - - 0 - - - - - - - - - - - -
|
||||
1559246898.094827 Ck51lg1bScffFj34Ri 192.168.43.118 123 80.211.171.177 123 4 4 4 64.000000 0.000000 0.036819 0.050842 - - - - 1559246822.407510 1559246898.029953 1559246898.078347 1559246898.078430 - - 0 - - - - - - - - - - - -
|
||||
1559246900.102991 CNnMIj2QSd84NKf7U3 192.168.43.118 123 80.211.155.206 123 4 4 2 64.000000 0.000000 0.013535 0.029602 - - - - 1559246283.180069 1559246900.030036 1559246900.088810 1559246900.088844 - - 0 - - - - - - - - - - - -
|
||||
1559246900.111834 C9mvWx3ezztgzcexV7 192.168.43.118 123 147.135.207.213 123 4 4 2 64.000000 0.000008 0.042236 0.041595 - - - - 1559245356.576177 1559246900.027439 1559246900.103765 1559246900.103887 - - 0 - - - - - - - - - - - -
|
||||
1559246940.262220 C7fIlMZDuRiqjpYbb 192.168.43.118 58229 193.204.114.232 123 4 3 0 16.000000 0.015625 1.000000 1.000000 - - - - 0.000000 0.000000 0.000000 1101309131.444112 - - 0 - - - - - - - - - - - -
|
||||
1559246940.304152 C7fIlMZDuRiqjpYbb 192.168.43.118 58229 193.204.114.232 123 4 4 1 16.000000 0.000000 0.000000 0.000122 - - - - 1559246910.937978 1101309131.444112 1559246940.281161 1559246940.281191 - - 0 - - - - - - - - - - - -
|
||||
#close 2019-06-04-15-48-51
|
||||
|
|
@ -0,0 +1,30 @@
|
|||
ntp_message 192.168.50.50 -> 67.129.68.9:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.922896, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 69.44.57.60:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.922896, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 207.234.209.181:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.922896, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 209.132.176.4:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.922896, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 216.27.185.42:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.922896, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 24.34.79.42:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.922896, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 24.123.202.230:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.922896, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 63.164.62.249:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.922896, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 64.112.189.11:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.922896, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 65.125.233.206:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.922896, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 66.33.206.5:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.932911, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 66.33.216.11:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.932911, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 66.92.68.246:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.932911, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 66.111.46.200:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.932911, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 66.115.136.4:123 [version=3, mode=1, std_msg=[stratum=0, poll=1024.0, precision=0.015625, root_delay=0.0, root_disp=1.01001, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=\x00\x00\x00\x00, ref_v6_hash_prefix=<uninitialized>, ref_time=0.0, org_time=0.0, rec_time=0.0, xmt_time=1096255084.932911, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 69.44.57.60:123 [version=3, mode=2, std_msg=[stratum=3, poll=1024.0, precision=0.000004, root_delay=0.109238, root_disp=0.081726, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1096254668.551001, org_time=1096255084.922896, rec_time=1096255083.809713, xmt_time=1096255083.80976, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 24.123.202.230:123 [version=3, mode=2, std_msg=[stratum=2, poll=1024.0, precision=0.000001, root_delay=0.030319, root_disp=0.185547, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1096252181.259041, org_time=1096255084.922896, rec_time=1096255083.821124, xmt_time=1096255083.821134, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 67.129.68.9:123 [version=3, mode=2, std_msg=[stratum=2, poll=1024.0, precision=0.000008, root_delay=0.060455, root_disp=7.46431, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1095788645.064548, org_time=1096255084.922896, rec_time=1096255083.848508, xmt_time=1096255083.848601, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 65.125.233.206:123 [version=3, mode=2, std_msg=[stratum=2, poll=1024.0, precision=0.000031, root_delay=0.023254, root_disp=0.012848, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1096254901.858123, org_time=1096255084.922896, rec_time=1096255083.828025, xmt_time=1096255083.828189, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 63.164.62.249:123 [version=3, mode=2, std_msg=[stratum=2, poll=1024.0, precision=0.000001, root_delay=0.015015, root_disp=0.037491, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1096254668.213801, org_time=1096255084.922896, rec_time=1096255083.829249, xmt_time=1096255083.829301, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 207.234.209.181:123 [version=3, mode=2, std_msg=[stratum=3, poll=1024.0, precision=0.000008, root_delay=0.072678, root_disp=0.035049, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1096254326.1896, org_time=1096255084.922896, rec_time=1096255083.824154, xmt_time=1096255083.824174, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 66.92.68.246:123 [version=3, mode=2, std_msg=[stratum=1, poll=1024.0, precision=0.000015, root_delay=0.0, root_disp=0.00032, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=GPS\x00, ref_time=1096255078.223498, org_time=1096255084.932911, rec_time=1096255083.836845, xmt_time=1096255083.83687, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 24.34.79.42:123 [version=3, mode=2, std_msg=[stratum=2, poll=1024.0, precision=0.000031, root_delay=0.123322, root_disp=0.039917, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1096254970.010788, org_time=1096255084.922896, rec_time=1096255083.825662, xmt_time=1096255083.825692, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 66.115.136.4:123 [version=3, mode=2, std_msg=[stratum=2, poll=1024.0, precision=0.000008, root_delay=0.016632, root_disp=0.028641, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1096254406.517429, org_time=1096255084.932911, rec_time=1096255083.853291, xmt_time=1096255083.853336, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 66.33.206.5:123 [version=3, mode=2, std_msg=[stratum=2, poll=1024.0, precision=0.000004, root_delay=0.01236, root_disp=0.022202, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1096255027.694744, org_time=1096255084.932911, rec_time=1096255083.850895, xmt_time=1096255083.850907, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 66.33.216.11:123 [version=3, mode=2, std_msg=[stratum=2, poll=1024.0, precision=0.000001, root_delay=0.009857, root_disp=0.043747, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1096254508.255586, org_time=1096255084.932911, rec_time=1096255083.850965, xmt_time=1096255083.851024, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 66.111.46.200:123 [version=3, mode=2, std_msg=[stratum=2, poll=1024.0, precision=0.000001, root_delay=0.056396, root_disp=0.062164, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1096253376.841474, org_time=1096255084.932911, rec_time=1096255083.847619, xmt_time=1096255083.847644, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 64.112.189.11:123 [version=3, mode=2, std_msg=[stratum=2, poll=1024.0, precision=0.000015, root_delay=0.081268, root_disp=0.029877, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1096254706.14029, org_time=1096255084.922896, rec_time=1096255083.850451, xmt_time=1096255083.850465, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 216.27.185.42:123 [version=3, mode=2, std_msg=[stratum=2, poll=1024.0, precision=0.000004, root_delay=0.029846, root_disp=0.045456, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=<uninitialized>, ref_time=1096254209.896379, org_time=1096255084.922896, rec_time=1096255083.849099, xmt_time=1096255083.849269, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
ntp_message 192.168.50.50 -> 209.132.176.4:123 [version=3, mode=2, std_msg=[stratum=1, poll=1024.0, precision=0.000015, root_delay=0.0, root_disp=0.000504, kiss_code=<uninitialized>, ref_id=<uninitialized>, ref_addr=<uninitialized>, ref_v6_hash_prefix=CDMA, ref_time=1096255068.944018, org_time=1096255084.922896, rec_time=1096255083.827772, xmt_time=1096255083.828313, key_id=<uninitialized>, digest=<uninitialized>, num_exts=0], control_msg=<uninitialized>, mode7_msg=<uninitialized>]
|
||||
|
|
@ -0,0 +1,39 @@
|
|||
#separator \x09
|
||||
#set_separator ,
|
||||
#empty_field (empty)
|
||||
#unset_field -
|
||||
#path ntp
|
||||
#open 2019-06-04-15-48-57
|
||||
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p version mode stratum poll precision root_delay root_disp kiss_code ref_id ref_addr ref_v6_hash_prefix ref_time org_time rec_time xmt_time key_id digest num_exts OpCode resp_bit err_bit more_bit sequence status association_id ReqCode auth_bit sequence implementation err
|
||||
#types time string addr port addr port count count count interval interval interval interval string string addr string time time time time count string count count bool bool bool count count count count bool count count count
|
||||
1096255084.954975 ClEkJM2Vm5giqnMf4h 192.168.50.50 123 67.129.68.9 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.922896 - - 0 - - - - - - - - - - - -
|
||||
1096255084.955306 C4J4Th3PJpwUYZZ6gc 192.168.50.50 123 69.44.57.60 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.922896 - - 0 - - - - - - - - - - - -
|
||||
1096255084.955760 CtPZjS20MLrsMUOJi2 192.168.50.50 123 207.234.209.181 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.922896 - - 0 - - - - - - - - - - - -
|
||||
1096255084.956155 CUM0KZ3MLUfNB0cl11 192.168.50.50 123 209.132.176.4 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.922896 - - 0 - - - - - - - - - - - -
|
||||
1096255084.956577 CmES5u32sYpV7JYN 192.168.50.50 123 216.27.185.42 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.922896 - - 0 - - - - - - - - - - - -
|
||||
1096255084.956975 CP5puj4I8PtEU4qzYg 192.168.50.50 123 24.34.79.42 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.922896 - - 0 - - - - - - - - - - - -
|
||||
1096255084.957457 C37jN32gN3y3AZzyf6 192.168.50.50 123 24.123.202.230 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.922896 - - 0 - - - - - - - - - - - -
|
||||
1096255084.957903 C3eiCBGOLw3VtHfOj 192.168.50.50 123 63.164.62.249 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.922896 - - 0 - - - - - - - - - - - -
|
||||
1096255084.958625 CwjjYJ2WqgTbAqiHl6 192.168.50.50 123 64.112.189.11 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.922896 - - 0 - - - - - - - - - - - -
|
||||
1096255084.959273 C0LAHyvtKSQHyJxIl 192.168.50.50 123 65.125.233.206 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.922896 - - 0 - - - - - - - - - - - -
|
||||
1096255084.960065 CFLRIC3zaTU1loLGxh 192.168.50.50 123 66.33.206.5 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.932911 - - 0 - - - - - - - - - - - -
|
||||
1096255084.960866 C9rXSW3KSpTYvPrlI1 192.168.50.50 123 66.33.216.11 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.932911 - - 0 - - - - - - - - - - - -
|
||||
1096255084.961475 Ck51lg1bScffFj34Ri 192.168.50.50 123 66.92.68.246 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.932911 - - 0 - - - - - - - - - - - -
|
||||
1096255084.962222 C9mvWx3ezztgzcexV7 192.168.50.50 123 66.111.46.200 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.932911 - - 0 - - - - - - - - - - - -
|
||||
1096255084.962915 CNnMIj2QSd84NKf7U3 192.168.50.50 123 66.115.136.4 123 3 1 0 1024.000000 0.015625 0.000000 1.010010 - - - - 0.000000 0.000000 0.000000 1096255084.932911 - - 0 - - - - - - - - - - - -
|
||||
1096255085.012029 C4J4Th3PJpwUYZZ6gc 192.168.50.50 123 69.44.57.60 123 3 2 3 1024.000000 0.000004 0.109238 0.081726 - - - - 1096254668.551001 1096255084.922896 1096255083.809713 1096255083.809760 - - 0 - - - - - - - - - - - -
|
||||
1096255085.049280 C37jN32gN3y3AZzyf6 192.168.50.50 123 24.123.202.230 123 3 2 2 1024.000000 0.000001 0.030319 0.185547 - - - - 1096252181.259041 1096255084.922896 1096255083.821124 1096255083.821134 - - 0 - - - - - - - - - - - -
|
||||
1096255085.092991 ClEkJM2Vm5giqnMf4h 192.168.50.50 123 67.129.68.9 123 3 2 2 1024.000000 0.000008 0.060455 7.464310 - - - - 1095788645.064548 1096255084.922896 1096255083.848508 1096255083.848601 - - 0 - - - - - - - - - - - -
|
||||
1096255085.120557 C0LAHyvtKSQHyJxIl 192.168.50.50 123 65.125.233.206 123 3 2 2 1024.000000 0.000031 0.023254 0.012848 - - - - 1096254901.858123 1096255084.922896 1096255083.828025 1096255083.828189 - - 0 - - - - - - - - - - - -
|
||||
1096255085.185955 C3eiCBGOLw3VtHfOj 192.168.50.50 123 63.164.62.249 123 3 2 2 1024.000000 0.000001 0.015015 0.037491 - - - - 1096254668.213801 1096255084.922896 1096255083.829249 1096255083.829301 - - 0 - - - - - - - - - - - -
|
||||
1096255085.223026 CtPZjS20MLrsMUOJi2 192.168.50.50 123 207.234.209.181 123 3 2 3 1024.000000 0.000008 0.072678 0.035049 - - - - 1096254326.189600 1096255084.922896 1096255083.824154 1096255083.824174 - - 0 - - - - - - - - - - - -
|
||||
1096255085.280949 Ck51lg1bScffFj34Ri 192.168.50.50 123 66.92.68.246 123 3 2 1 1024.000000 0.000015 0.000000 0.000320 - - - - 1096255078.223498 1096255084.932911 1096255083.836845 1096255083.836870 - - 0 - - - - - - - - - - - -
|
||||
1096255085.304774 CP5puj4I8PtEU4qzYg 192.168.50.50 123 24.34.79.42 123 3 2 2 1024.000000 0.000031 0.123322 0.039917 - - - - 1096254970.010788 1096255084.922896 1096255083.825662 1096255083.825692 - - 0 - - - - - - - - - - - -
|
||||
1096255085.353360 CNnMIj2QSd84NKf7U3 192.168.50.50 123 66.115.136.4 123 3 2 2 1024.000000 0.000008 0.016632 0.028641 - - - - 1096254406.517429 1096255084.932911 1096255083.853291 1096255083.853336 - - 0 - - - - - - - - - - - -
|
||||
1096255085.406368 CFLRIC3zaTU1loLGxh 192.168.50.50 123 66.33.206.5 123 3 2 2 1024.000000 0.000004 0.012360 0.022202 - - - - 1096255027.694744 1096255084.932911 1096255083.850895 1096255083.850907 - - 0 - - - - - - - - - - - -
|
||||
1096255085.439833 C9rXSW3KSpTYvPrlI1 192.168.50.50 123 66.33.216.11 123 3 2 2 1024.000000 0.000001 0.009857 0.043747 - - - - 1096254508.255586 1096255084.932911 1096255083.850965 1096255083.851024 - - 0 - - - - - - - - - - - -
|
||||
1096255085.480955 C9mvWx3ezztgzcexV7 192.168.50.50 123 66.111.46.200 123 3 2 2 1024.000000 0.000001 0.056396 0.062164 - - - - 1096253376.841474 1096255084.932911 1096255083.847619 1096255083.847644 - - 0 - - - - - - - - - - - -
|
||||
1096255085.522297 CwjjYJ2WqgTbAqiHl6 192.168.50.50 123 64.112.189.11 123 3 2 2 1024.000000 0.000015 0.081268 0.029877 - - - - 1096254706.140290 1096255084.922896 1096255083.850451 1096255083.850465 - - 0 - - - - - - - - - - - -
|
||||
1096255085.562197 CmES5u32sYpV7JYN 192.168.50.50 123 216.27.185.42 123 3 2 2 1024.000000 0.000004 0.029846 0.045456 - - - - 1096254209.896379 1096255084.922896 1096255083.849099 1096255083.849269 - - 0 - - - - - - - - - - - -
|
||||
1096255085.599961 CUM0KZ3MLUfNB0cl11 192.168.50.50 123 209.132.176.4 123 3 2 1 1024.000000 0.000015 0.000000 0.000504 - - - - 1096255068.944018 1096255084.922896 1096255083.827772 1096255083.828313 - - 0 - - - - - - - - - - - -
|
||||
#close 2019-06-04-15-48-57
|
||||
BIN
testing/btest/Traces/ntp/NTP_sync.pcap
Normal file
BIN
testing/btest/Traces/ntp/NTP_sync.pcap
Normal file
Binary file not shown.
BIN
testing/btest/Traces/ntp/ntp.pcap
Normal file
BIN
testing/btest/Traces/ntp/ntp.pcap
Normal file
Binary file not shown.
BIN
testing/btest/Traces/ntp/ntp2.pcap
Normal file
BIN
testing/btest/Traces/ntp/ntp2.pcap
Normal file
Binary file not shown.
BIN
testing/btest/Traces/ntp/ntpmode67.pcap
Normal file
BIN
testing/btest/Traces/ntp/ntpmode67.pcap
Normal file
Binary file not shown.
11
testing/btest/scripts/base/protocols/ntp/ntp.test
Normal file
11
testing/btest/scripts/base/protocols/ntp/ntp.test
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
# @TEST-EXEC: bro -r $TRACES/ntp/ntp.pcap %INPUT
|
||||
# @TEST-EXEC: btest-diff ntp.log
|
||||
# @TEST-EXEC: btest-diff .stdout
|
||||
|
||||
@load base/protocols/ntp
|
||||
|
||||
event ntp_message(c: connection, is_orig: bool, msg: NTP::Message)
|
||||
{
|
||||
print fmt("ntp_message %s -> %s:%d %s", c$id$orig_h, c$id$resp_h, c$id$resp_p, msg);
|
||||
}
|
||||
|
||||
11
testing/btest/scripts/base/protocols/ntp/ntp2.test
Normal file
11
testing/btest/scripts/base/protocols/ntp/ntp2.test
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
# @TEST-EXEC: bro -r $TRACES/ntp/ntp2.pcap %INPUT
|
||||
# @TEST-EXEC: btest-diff ntp.log
|
||||
# @TEST-EXEC: btest-diff .stdout
|
||||
|
||||
@load base/protocols/ntp
|
||||
|
||||
event ntp_message(c: connection, is_orig: bool, msg: NTP::Message)
|
||||
{
|
||||
print fmt("ntp_message %s -> %s:%d %s", c$id$orig_h, c$id$resp_h, c$id$resp_p, msg);
|
||||
}
|
||||
|
||||
11
testing/btest/scripts/base/protocols/ntp/ntp3.test
Normal file
11
testing/btest/scripts/base/protocols/ntp/ntp3.test
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
# @TEST-EXEC: bro -r $TRACES/ntp/NTP_sync.pcap %INPUT
|
||||
# @TEST-EXEC: btest-diff ntp.log
|
||||
# @TEST-EXEC: btest-diff .stdout
|
||||
|
||||
@load base/protocols/ntp
|
||||
|
||||
event ntp_message(c: connection, is_orig: bool, msg: NTP::Message)
|
||||
{
|
||||
print fmt("ntp_message %s -> %s:%d %s", c$id$orig_h, c$id$resp_h, c$id$resp_p, msg);
|
||||
}
|
||||
|
||||
9
testing/btest/scripts/base/protocols/ntp/ntpmode67.test
Normal file
9
testing/btest/scripts/base/protocols/ntp/ntpmode67.test
Normal file
|
|
@ -0,0 +1,9 @@
|
|||
# @TEST-EXEC: bro -r $TRACES/ntp/ntpmode67.pcap %INPUT
|
||||
|
||||
@load base/protocols/ntp
|
||||
|
||||
event ntp_message(c: connection, is_orig: bool, msg: NTP::Message)
|
||||
{
|
||||
print fmt("ntp_message %s -> %s:%d %s", c$id$orig_h, c$id$resp_h, c$id$resp_p, msg);
|
||||
}
|
||||
|
||||
Loading…
Add table
Add a link
Reference in a new issue