Re: How to keep sensors in sync using NTP?

From: roy lo (roylo@sr2c.com)
Date: 10/17/02


Date: Wed, 16 Oct 2002 17:29:11 -0500
From: roy lo <roylo@sr2c.com>
To: Bruno Sicchieri <bsicchieri@hotmail.com>

Just saw your post
and I think I know what your problem is
BRDT -2:00 (I guess here is why there is a 2 hour difference)
while you have it set to "UTC=true" on your NTP conf
I guess you forgot to set your system clock to UTC time but instead you
are running local time
(thus, the ntp did the time adjustment for you)

Bruno Sicchieri wrote:

>Hi all,
>
>I?e just installed Snort, MySQL and ACID on Redhat7.3 following the Snort
>Installation Manual, by Steven J. Scott
>(http://home.earthlink.net/~sjscott007/)
>
>In one of the sections (Network Time Protocol - NTP) he explain how to
>keep accurate time on the sensors (Snort) without having to manually set
>the clocks, using NTP:
>
>1) Editing the /etc/ntp.conf file and changing the server entry to reflect
>my timeserver and comment out the entry starting with "fudge"
>------ntp.conf------
>server mytimeserver.com
>#fudge 127.127.1.0 stratum 10
>--------------------
>
>2) # /etc/rc.d/init.d/ntpd start
>3) # chkconfig ntpd on
>
>I? using "ntp-4.1.1" and writing
>from "/usr/share/zoneinfo/America/Sao_Paulo" with "UTC=true"
>in /etc/sysconfig/clock file.
>
>Everything looks OK but the sensors stay 2 hours in advance. I already
>read the NTP manual but I still can? figure out what is happen.
>
>Anyone could help please?
>
>Thanks, Bruno.
>
>
>

-- 
Roy Lo  
Freelance Consultant 
E-mail -  roylo@sr2c.com

Sun Certified Network Administrator (SCNA) Sun Certified System Administrator (SCSA) Cisco Certified Network Associate (CCNA)



Relevant Pages

  • Re: How to keep sensors in sync using NTP?
    ... It's snort -U not snort -O sorry. ... How to keep sensors in sync using NTP? ... > I´ve just installed Snort, MySQL and ACID on Redhat7.3 following the Snort ...
    (Focus-IDS)
  • How to keep sensors in sync using NTP?
    ... I´ve just installed Snort, MySQL and ACID on Redhat7.3 following the Snort ... In one of the sections (Network Time Protocol - NTP) he explain how to ... my timeserver and comment out the entry starting with "fudge" ...
    (Focus-IDS)
  • Re: How to keep sensors in sync using NTP?
    ... Are you using snort with the option: ... How to keep sensors in sync using NTP? ... > 1) Editing the /etc/ntp.conf file and changing the server entry to reflect ...
    (Focus-IDS)