Posts Tagged ‘Network Time Protocol’

Seven Reasons Why Your Network Needs a Time Server

January 20th, 2010



Time servers, often referred to as NTP time servers after the protocol (Network Time Protocol) used to distribute time are an increasingly important part of any computer network. The NTP server receives a timing signal from an accurate source (such as an atomic clock) and then distributes it to all devices on the network.

However, despite the increasing importance of these time synchronisation devices, many network administrators still fail to accurately synchronise their networks and can leave their entire computer system vulnerable.

Here are seven reasons why a NTP time server is a crucial piece of equipment for YOUR network:

• Security: NTP servers use an external source of time and don’t rely on an open firewall port. An unsynchronized server will also be vulnerable to malicious users who can take advantage of time differences.

• Error logging: failing to adequately synchronize a computer network may mean that it is near impossible to trace errors or malicious attack, especially if the times on the log files from different machine do not match.

• Legal Protection: Not being able to prove the time can have legal implications if somebody has committed fraud or other illegal activity against your company.

• Accuracy: NTP Time Servers ensure that all networked computers are synchronized automatically to the exact time throughout your network so everybody in your company can have access to the exact time.

• Global Harmony: A global timescale known as UTC (Coordinated Universal Time) has been developed to ensure that systems across the globe can run the exact same time. By utilising a NTP server not only will every device on you network be synchronised together but your network will be synchronised with every other network on Earth that is hooked up to UTC.

• Control: With a NTP server you have control of the configuration. You can allow automatic changes each spring and autumn for daylight saving time or set your server time to be locked to UTC time only – or indeed, any time zone you choose.

• Automatic update of time. No user intervention required, a NTP time server will account for leap seconds and time zones ensuring trouble free synchronisation.

By: Richard N Williams

Network Time Protocol – Explaining NTP Servers and Network Time Synchronisation

December 16th, 2009



NTP is almost as old as the Internet itself. It was devised and developed by Dr David Mills of the University of Delaware and has been in constant use and continually updated since 1985. NTP is an internet protocol designed to synchronise clocks on a computer network.

In a modern global economy time synchronisation is essential for carrying out time sensitive transactions such as booking an airline ticket to bidding on Ebay. If clocks were not synchronised to the same time you may find your airline seat sold after you had bought it and Ebay’s administrators would not be able to discover whose bid was the latest.

NTP can synchronise networks across the Internet or a Local/Wide Area Network (LAN/WAN) it synchronises time with reference to a reliable clock source. This source could be relative such as a computer’s internal clock or the time on a wrist-watch or absolute such as time from an atomic clock.

Most network administrators prefer to use an external absolute source, mainly because specialist NTP servers are available that can easily receive an atomic clock timing reference either through specialist radio transmissions (usually from national physics laboratories) or the GPS network.

A universal timescale called UTC (Coordinated Universal Time) has been developed allowing networks all around the world to be synchronized to the same timescale and supports such features as leap seconds – added to compensate for the slowing of the Earth’s rotation

NTP uses an algorithm (a complex sequence of instructions) to keep time by constantly checking the time source and matching it to the time on its clocks on the network and instructs each device to alter if it becomes out of synchronisation.

NTP uses timestamps to represent the current time of the day each. As time is linear each timestamp is always greater than the previous one. NTP timestamps are in two formats but they relay the seconds from a set point in time (known as the prime epoch, set at 00:00 1 January 1900) The NTP algorithm then uses this timestamp to determine the amount to advance or retreat the system or network clock.

NTP analyses the timestamp values including the frequency of errors and the stability. A NTP server will maintain an estimate of the quality of both it’s reference clocks and itself.

The NTP program (daemon on UNIX, service on Windows) runs in the background. NTP receives exchanges time information by packets (a block of data) but refuses to believe the time it is told until several exchanges have taken place, each passing a set of tests or protocol specifications. Only if the replies from a server satisfy these tests does the NTP utilizes this information. It usually takes about five minutes (five good samples) until a NTP server is accepted as a timing source.

Microsoft, who has installed a version of NTP in their operating systems since Windows 2000, strongly recommends that a hardware source is used as a timing reference as Internet sources can’t be authenticated.

Authentication verifies that each timestamp has come from the intended time reference by analysing a set of agreed encryption keys that are sent along with the time information. NTP, using Message Digest encryption (MD5) to un-encrypt the key, analyses it and confirms whether it has come from the trusted time source by verifying it against a set of trusted keys.

The best solution is to use a specialist NTP server and receive an authoritative time reference via either the GPS network or radio transmissions (known as MSF in the UK or WWVB in the US).

NTP servers judge the distance of each network device from a timing source and organises them into Strata. These Stratum levels exist to prevent cycles and guarantee accuracy. Stratum 0 are devices such as reference clocks connected directly to a computer. Stratum 1 are computers attached to stratum 0 devices, while Stratum 2 are computers further out.

NTP is free to download via NTP.org and is continually supported and updated. The current version is v 4. A simplified version of NTP (SNTP) exists has less functions and is used in some devices and applications (and also included in older versions of Windows) where high accuracy timing is not as important.

By: Richard N Williams

NTP Server Systems and Network Timing

October 10th, 2009



The Network Time Protocol, more commonly known as NTP, is a widely used Internet protocol for the transfer of time across a network. NTP is commonly used to synchronise network time clients to an accurate time source.

This article describes the Network Time Protocol and provides an overview of how NTP servers utilise NTP to provide an accurate source of time to network time clients.

A Brief History

The NTP protocol is one of the oldest Internet protocols still in use today. It has been in continuous use for more than 25 years. The protocol was originally designed to synchronise computers and time critical processes across the Internet. Initially developed for the Linux operating system, the protocol has recently been partly ported to the Microsoft Windows operating system. NTP is installed by default in many Linux Unix and Free BSD distributions. Most NTP server systems utilise the Linux operating system due to its specialised kernel timing algorithms.

About the Protocol

NTP is a client-server based protocol. The NTP protocol provides clients with 3 fundamental products: clock offset, network round-trip delay and reference clock dispersion. The clock offset specifies the difference between the local system time and an external reference clock. The round-trip delay specifies the time latencies measured during the transfer of packets around the network. Time dispersion specifies the maximum error associated with timing information received from the external reference clock.

The NTP protocol has a hierarchical structure. A stratum 1 time server is the primary reference server and sits at the top of the heirachy. The primary reference server it is followed by secondary reference servers and clients. A primary reference NTP server is generally synchronised by an external timing reference, such as a radio or GPS clock. At the highest level a primary reference NTP server has a stratum of one. Each lower-level NTP server and client is attributed a stratum one greater than the previous level. As the stratum increases, accuracy decreases due to inconsistencies in network path timing.

Network Time Protocol uses the UDP protocol which is an integral part of the TCP/IP protocol suite. Each NTP message consists of a number of fields: Leap Indicator; Version Number; Mode; Stratum; Poll; Precision; Root Delay; Root Dispersion; Reference Identifier; Reference Timestamp; Originate Timestamp; Receive Timestamp; Transmit Timestamp; Key Identifier and Message Digest. The fields are used to identify messages and provide time stamp and round-trip delay information.

The current release of NTP is version 4. All versions of the protocol are backwards compatible with previous versions. The only significant modification to the protocol between versions 3 and 4 is a slight header re-interpretation to accommodate IPv6.

NTP Server Modes of Operation

A stratum 1 NTP server has three modes of operation: unicast; anycast and multicast. The client initiates the unicast and anycast modes, the server responds with a NTP time message that the client uses for synchronisation. Multicast is a broadcast mode of operation, at periodic intervals time messages are broadcast to the entire sub-domain.

Accurate External Reference Clocks

The standard NTP distribution can operate with a number of external time references, or ‘reference clocks’. The Global Positioning System (GPS) is a popular choice since it provides a global precise time reference. A number of national time and frequency radio broadcasts are also available, such as WWVB (US), DCF-77 (Germany) and MSF (UK).

The Simple Network Time Protocol (SNTP)

SNTP is a simplified version of the full-blown Network Time Protocol. SNTP is generally used where the complexities and high accuracy of the NTP protocol is not required. The SNTP protocol is often used by micro-controllers and SBC computers. The SNTP and NTP protocols are fully interchangeable. Any SNTP client can synchronise with a full-blown NTP server.

By: David Evans