IDS mailing list archives

Re: How to keep sensors in sync using NTP?


From: roy lo <roylo () sr2c com>
Date: Wed, 16 Oct 2002 17:29:11 -0500

Just saw your post
and I think I know what your problem is
BRDT -2:00 (I guess here is why there is a 2 hour difference)
while you have it set to "UTC=true" on your NTP conf
I guess you forgot to set your system clock to UTC time but instead you are running local time
(thus, the ntp did the time adjustment for you)




Bruno Sicchieri wrote:

Hi all,

I?e just installed Snort, MySQL and ACID on Redhat7.3 following the Snort Installation Manual, by Steven J. Scott (http://home.earthlink.net/~sjscott007/)

In one of the sections (Network Time Protocol - NTP) he explain how to keep accurate time on the sensors (Snort) without having to manually set the clocks, using NTP:

1) Editing the /etc/ntp.conf file and changing the server entry to reflect my timeserver and comment out the entry starting with "fudge"
------ntp.conf------
server mytimeserver.com
#fudge 127.127.1.0 stratum 10
--------------------

2) # /etc/rc.d/init.d/ntpd start
3) # chkconfig ntpd on

I? using "ntp-4.1.1" and writing from "/usr/share/zoneinfo/America/Sao_Paulo" with "UTC=true" in /etc/sysconfig/clock file.

Everything looks OK but the sensors stay 2 hours in advance. I already read the NTP manual but I still can? figure out what is happen.

Anyone could help please?

Thanks, Bruno.



--
Roy Lo Freelance Consultant E-mail - roylo () sr2c com


Sun Certified Network Administrator (SCNA)
Sun Certified System Administrator (SCSA)
Cisco Certified Network Associate (CCNA)


Current thread: