Recent NTP pool traffic increase
justin at cloudflare.com
Mon Dec 19 21:19:40 UTC 2016
the new Mario app perhaps? :)
Head of Trust & Safety
PGP: BBAA 6BCE 3305 7FD6 6452 7115 57B6 0114 DE0B 314D
On Mon, Dec 19, 2016 at 1:12 PM, David <opendak at shaw.ca> wrote:
> On 2016-12-19 1:55 PM, Jan Tore Morken wrote:
>> On Mon, Dec 19, 2016 at 01:32:50PM -0700, David wrote:
>>> I found devices doing lookups for all of these at the same time
>>> and then it proceeds to use everything returned, which explains why
>>> everyone is seeing an increase.
>> Thanks, David. That perfectly matches the list of servers used by
>> older versions of the ios-ntp library, which would point toward
>> some iPhone app being the source of the traffic.
> That would make sense - I see a lot of iCloud related lookups from these
> hosts as well.
> Also, app.snapchat.com generally seems to follow just after the NTP pool DNS
> lookups. I don't have an iPhone to test that though.
More information about the NANOG