Message-ID:

Why do we want intelligent terminals when there are so many stupid users?

devel / comp.protocols.time.ntp / Unexpected origin timestamp ... does not match aorg 0000000000.0000

Unexpected origin timestamp ... does not match aorg 0000000000.0000

<f0ce381c-6f46-48d9-b432-a8e4412dda59n@googlegroups.com>

https://www.rocksolidbbs.com/devel/article-flat.php?id=275&group=comp.protocols.time.ntp#275

copy link Newsgroups: comp.protocols.time.ntp

X-Received: by 2002:ae9:efcf:0:b0:47e:15e1:2a34 with SMTP id d198-20020ae9efcf000000b0047e15e12a34mr2330983qkg.689.1646400088414;
Fri, 04 Mar 2022 05:21:28 -0800 (PST)
X-Received: by 2002:a05:6870:596:b0:d3:5287:5567 with SMTP id
m22-20020a056870059600b000d352875567mr8000028oap.38.1646400088145; Fri, 04
Mar 2022 05:21:28 -0800 (PST)
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!1.us.feeder.erje.net!feeder.erje.net!border1.nntp.dca1.giganews.com!nntp.giganews.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.protocols.time.ntp
Date: Fri, 4 Mar 2022 05:21:27 -0800 (PST)
Injection-Info: google-groups.googlegroups.com; posting-host=130.107.68.164; posting-account=zj0vOwoAAABQnGvcSNt_IzGMr-eUW9qH
NNTP-Posting-Host: 130.107.68.164
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <f0ce381c-6f46-48d9-b432-a8e4412dda59n@googlegroups.com>
Subject: Unexpected origin timestamp ... does not match aorg 0000000000.0000
From: mabrytyson@gmail.com (Mabry T)
Injection-Date: Fri, 04 Mar 2022 13:21:28 +0000
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Lines: 38

by: Mabry T - Fri, 4 Mar 2022 13:21 UTC

I have a set of (local) NTP peers, and a host that is a client of them. (Ubuntu 18.04, with their ntp 4.2.8p10 derivative). It has been getting log messages of the form
ntpd[2779]: receive: Unexpected origin timestamp 0xe5c94914.1cfa0625 does not match aorg 0000000000.0000
0000 from sym_active@A.B.C.D xmt 0xe5c94928.e8f5c510
where the sources (A.B.C.D) include the the servers for the client.

There were a number of hits on that log message when I searched the net, but none I saw seemed appropriate to me.

I captured the NTP packets from one server to the client over a period of about 10 log messages. In exactly those cases (on the order of half of the packets) where the log message was generated, the origin timestamp was the same as in the previous packet. AIUI, that means that the server had not gotten an update from its authority in the interval between the server's packets to the client.

It makes sense that NTP would disregard that packet. But it didn't - it generated a log message.

I noticed that one of my (Cisco-ntpv4-1.0) NTP servers reported
system poll interval is 1024, last update was 2269 sec ago.

That's starting to make sense. If the selected upstream server (external to me, and not pool.ntp.org) is taking longer to answer than expected, then my server will send out two or more packets that have the same origin time. This situation may be uncommon, which may explain why I didn't easily find such an explanation.

I'm not that familiar with the internals of NTP, so does this make sense? Is this log message a misfeature that should be reported to the maintainers, at least with a request to make the situation clearer to end users?

(As it turned out, those 3 peers were essentially using just two external servers. That wasn't the design, but other configured external servers were no longer accessible. That's been corrected. But this lack of external servers made for an incestuous situation that meant the log message happened more frequently.)

Re: Unexpected origin timestamp ... does not match aorg 0000000000.0000

<4a0e64cb-93d6-4ffd-b8c3-f57b2ffb0e98n@googlegroups.com>

copy mid

https://www.rocksolidbbs.com/devel/article-flat.php?id=276&group=comp.protocols.time.ntp#276

copy link Newsgroups: comp.protocols.time.ntp

X-Received: by 2002:ac8:5c81:0:b0:2dd:97b6:bcc7 with SMTP id r1-20020ac85c81000000b002dd97b6bcc7mr4426690qta.412.1646526184122;
Sat, 05 Mar 2022 16:23:04 -0800 (PST)
X-Received: by 2002:a05:6870:ec8c:b0:da:249c:1807 with SMTP id
eo12-20020a056870ec8c00b000da249c1807mr1728792oab.148.1646526183835; Sat, 05
Mar 2022 16:23:03 -0800 (PST)
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!news.misty.com!border2.nntp.dca1.giganews.com!nntp.giganews.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.protocols.time.ntp
Date: Sat, 5 Mar 2022 16:23:03 -0800 (PST)
In-Reply-To: <f0ce381c-6f46-48d9-b432-a8e4412dda59n@googlegroups.com>
Injection-Info: google-groups.googlegroups.com; posting-host=202.124.96.215; posting-account=1zIU2QoAAAAR6nqDQ69ULrb9wZUZFOC3
NNTP-Posting-Host: 202.124.96.215
References: <f0ce381c-6f46-48d9-b432-a8e4412dda59n@googlegroups.com>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <4a0e64cb-93d6-4ffd-b8c3-f57b2ffb0e98n@googlegroups.com>
Subject: Re: Unexpected origin timestamp ... does not match aorg 0000000000.0000
From: decibel47@gmail.com (Derek Barnes)
Injection-Date: Sun, 06 Mar 2022 00:23:04 +0000
Content-Type: text/plain; charset="UTF-8"
Lines: 4

by: Derek Barnes - Sun, 6 Mar 2022 00:23 UTC

On Saturday, March 5, 2022 at 2:21:29 AM UTC+13, Mabry T wrote:

> That's starting to make sense. If the selected upstream server (external to me, and not pool.ntp.org) is taking longer to answer than expected, then my server will send out two or more packets that have the same origin time.

No, NTP runs on UDP so there should be not follow-up packets sent with the same timestamp. You are thinking of TCP.

Subject	Author
Unexpected origin timestamp ... does not match aorg 0000000000.0000	Mabry T
Re: Unexpected origin timestamp ... does not match aorg 0000000000.0000	Derek Barnes