NTP

From Protocolinfo

NTP is Network Time Protocol, as defined in RFC 1305. SNTP is Simple Network Time Protocol, as defined in RFC 2030. These are commonly used to keep computers' clocks in sync.

Contents 1 Identification 1.1 Ports 1.2 Packet Length 1.3 l7-filter 2 See also

[edit] Identification

[edit] Ports

(S)NTP servers usually run on UDP port 123.

[edit] Packet Length

NTP packets are always 48 bytes long.

[edit] l7-filter

l7-filter uses the ntp pattern. NTP packets are purely binary data and contain very little identifying information. Therefore, in order for the l7-filter pattern to reliably match NTP, the pattern had to be written in such a way that it sometimes also matches random traffic from other binary protocols. Be cautious when using this pattern.

[edit] See also

• Wikipedia's NTP article