[nsp-sec] NTP server under attack

[John Kristoff]

On Mon, 4 Nov 2013 17:34:34 -0800
Joe Abley <jabley at hopcount.ca> wrote:

> NTP as a protocol makes a pretty poor amplifier. If this is a
> reflection attack, I'd be interested to understand why.

The fundamental clock sync messages may make for poor amplification,
but there are other NTP messages, particularly administrative related
(aka mode 6 or mode 7) messages that can potentially pack quite a
wallop.

John