ntp_services probe giving

[Nijin K]

hi 

i am trying to check ntp response parameters for a wintel server but getting error unable to connect host i have checked the pre-requisite
and the fips encryption is not activated which the client don't want to activate in security policy for probe version1.42
Also this issue is also occurring in probe version 1.41 which do not require fips encryption
so can anyone suggest why this error is occuring for wintel servers

------------------------------
regards
Nijin
------------------------------

[Gene Howard]

NTP us a UDP connection so it is hard to test for and troubleshoot.
We will need more information to try and help you.

what is the version of the Wintel server
Is the NTP service the build-in windows service?
What version of NTP Service is being run?
Is the probe running on the same server or remote?

------------------------------
Gene Howard
Principal Support Engineer
Broadcom
------------------------------

[David Michel]

FIPS is not required. 

FYI probes write to a log and log level and size can be increased to capture troubleshooting details. 

Have checked out:
NTP_Response Error: unable to contact host
Article Id: 4163
https://ca-broadcom.wolkenservicedesk.com/external/article?articleId=4163

------------------------------
Support Engineer
Broadcom
------------------------------

[Nijin K]

hi david please find a screenshot of error logs

further do i need any certain ports open for this to work

[Gregg Stillwell]

Hi Nijin,

Are you sure your running NTP Server on a windows box? Verify it is listening on the ntp port using the net_connect. Not sure off the top of my head which port that is, but it is listed in net_connect config.

[Nijin K]

greg 

No these wintel servers are domain controller of our environment and these are getting synced with ntp servers running on unix os.

also other servers are getting synced usig these domain controller

so when we tried on a ntp probe on few servers it worked with host name of the server it self nothing was done from our side but on most of the servers we are getting same error not able to contact host

and i have checked that the ntp services are running on the server through nt services probe

also ntpsync is happening on the server i tested this probe

[Franklin Ravi D'souza]

Hi 

Have you also checked with KB provided earlier if any differrence ?

NTP_Response Error: unable to contact host

https://ca-broadcom.wolkenservicedesk.com/external/article?articleId=4163

[Nijin K]

hi 

the server team does not want to change anything in the time servers config file since it can directly impact the environment 

so that is why i am looking for the workaround

[Gene Howard]

if the problem is the restriction in the ntp.conf file there will be no workaround with the current probe if you are unwilling to change the ntp.conf
you should test this in your lab and see if it makes a difference or not.

------------------------------
Gene Howard
Principal Support Engineer
Broadcom
------------------------------

[David Michel]

based on the log sample, it looks like a target side problem

------------------------------
Support Engineer
Broadcom
------------------------------

[Nijin K]

david 

can you suggest steps to check the target machines so that i can narrow down the issue.

[Gregg Stillwell]

Did you verify connectivity (listening) with the net_connect Probe? Is this ntp server servicing ntp requests? Check the event/service logs of servers and clients. After that then something like wireshark.

[Gregg Stillwell]

or TCPview which I believe Daniel introduced. Apologies if not.

[David Michel]

Not sure my understanding is correct. 
Is the question how to enable and verify ntp at a ntp server? 
Or perhaps there is a misunderstanding as to exactly what you want to monitor.

------------------------------
Support Engineer
Broadcom
------------------------------

[Nijin K]

i want to use ntp_response probe to get response of host to NTP server or if NTP sync is in place for that host to the NTP server

but when i install NTP_response probe on some server i get the response like response time ,jitter speed once i put in the host name of server

but most of them give unable to connect to host error which i am unable to resolve

[Gregg Stillwell]

using net_connect is simply a test to verify your ntp server is listening and servicing ntp on port 123. If it works then it verifies a response from a ntp ping. No ntp data or response data is looked at or measured. If this fails it means port is block or ntp server is not configured correctly or acting like a server and there is no way that ntp_response probe will work if net_connect, ntp ping fails.

[David Michel]

Does the built in test profile work to 0.asia.pool.ntp.org? 
FYI ntp server type is SNTP.

------------------------------
Support Engineer
Broadcom
------------------------------