IDS mailing list archives

Re: How to keep sensors in sync using NTP?


From: spy guy <spyguy703 () earthlink net>
Date: 15 Oct 2002 12:06:45 -0700

I believe the tool you should use is ntpdate. Its an ntp client. 

I run a cron job at midnight that executes ntpdate against an ntp
server. 

check the man page for ntpdate syntax 
in its simplest form: 

`ntpdate time.nist.gov`  will sync your clock with time.nist.gov 

hope that helps. 

On Tue, 2002-10-15 at 05:56, Bruno Sicchieri wrote: 


Hi all,

I´ve just installed Snort, MySQL and ACID on Redhat7.3 following the Snort 
Installation Manual, by Steven J. Scott 
(http://home.earthlink.net/~sjscott007/)

In one of the sections (Network Time Protocol - NTP) he explain how to 
keep accurate time on the sensors (Snort) without having to manually set 
the clocks, using NTP:

1) Editing the /etc/ntp.conf file and changing the server entry to reflect 
my timeserver and comment out the entry starting with "fudge"
------ntp.conf------
server mytimeserver.com
#fudge 127.127.1.0 stratum 10
--------------------

2) # /etc/rc.d/init.d/ntpd start
3) # chkconfig ntpd on

I´m using "ntp-4.1.1" and writing 
from "/usr/share/zoneinfo/America/Sao_Paulo" with "UTC=true" 
in /etc/sysconfig/clock file.

Everything looks OK but the sensors stay 2 hours in advance. I already 
read the NTP manual but I still can´t figure out what is happen.

Anyone could help please?

Thanks, Bruno.


Current thread: