CloudShark on cloudshark.org
Yeah, this doesn't make much sense,
An NTP request coming in on port 6667, to be sent back on the computer's NTP port.
I'm trying to think of what the point is
Why are you running an NTP server to the public? Shut the daemon or service down?
Reminds me of the university that Netgear used their NTP IP address to set all their routers' times.
D-Link did similar to a few Stratum 1 servers as well... This doesn't help us though
I'm not running the NTP server if you look at the pcap you would see NTP as source not destination port
Are you running anything on 6667? IRC's default, looks to be the destination, source port really doesn't matter
nope I am not running an IRC server on UDP 6667 I am not running anything on it
IRC Daemon defaults to TCP 6667
Doh... I think it is time for me to get some sleep... Making too many mistakes....
and what is even more funny... if I was running IRC on UDP 6667 why would people be sending me NTP traffic to it?
just think billions of routers asking my server what time it is........ hahahahahaha 60 GBPS NTP flood
Retrieving data ...