Re: Re: Tracking Clock Skew; Computer Forensics

Matthew Toseland <toad-EI5O+8PHWbJeeLb3ft/[email protected]>
Newsgroups gmane.network.freenet.general
Message-ID <[email protected]>
My understanding is that ntpd, as opposed to ntpdate, is supposed to
synchronize continuously.. for some definition of "continuously" :)

On Wed, Mar 09, 2005 at 10:42:15AM +0100, Adam Duck wrote:
> Matthew Toseland <toad-EI5O+8PHWbJeeLb3ft/[email protected]> writes:
> 
> >> I thought about that.  But wouldn't you still have a consistent,
> >> detectable skew, at least most of the time? 
> >
> > You think so? Caused by what?
> 
> If you don't synchronize often enough.  From page 10 of the paper in
> question:
> 
> ---
> "As the horizontal line in Table 3 indicates, we divide our
> experiments into two sets. In the first set, our experiments last for
> three hours and exchange one TCP packet every minute (we do this by
> performing a sleep(60) on host1). For the second set of experiments,
> the connections last for 30 minutes, and a packet is exchanged at
> random intervals between 0 and 2 seconds, as determined by a usleep on
> host1. With few exceptions, the packets from laptop are all ACKs with
> no data."
> ---
> 
> The clock skew estimates are roughly the same.  And I always found
> that synching one time a day would be enough, well...
> 
> bye, Adam.
> 
> _______________________________________________
> chat mailing list
> [email protected]
> Archived: http://news.gmane.org/gmane.network.freenet.general
> Unsubscribe at http://dodo.freenetproject.org/cgi-bin/mailman/listinfo/chat
> Or mailto:[email protected]?subject=unsubscribe

-- 
Matthew J Toseland - toad-EI5O+8PHWbJeeLb3ft/[email protected]
Freenet Project Official Codemonkey - http://freenetproject.org/
ICTHUS - Nothing is impossible. Our Boss says so.

_______________________________________________
chat mailing list
[email protected]
Archived: http://news.gmane.org/gmane.network.freenet.general
Unsubscribe at http://dodo.freenetproject.org/cgi-bin/mailman/listinfo/chat
Or mailto:[email protected]?subject=unsubscribe
signature.asc (application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iD8DBQFCLw6vHzsuOmVUoi0RAjBfAJ9nrhsLSiFFiTTd4Ucw3h2nkWG75wCghDiy
gWBG/I5oGbOu6mDQBCWtfds=
=/FM7
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.