Lines Matching +full:digital +full:- +full:input +full:- +full:threshold +full:- +full:mode +full:- +full:fixed
1 /* -*- Mode: Text -*- */
7 // We want the synopsis to be "/etc/ntp.conf" but we need the prog-name
8 // to be ntp.conf - the latter is also how autogen produces the output
10 prog-name = "ntp.conf";
11 file-path = "/etc/ntp.conf";
12 prog-title = "Network Time Protocol daemon (ntpd) configuration format";
15 explain = <<- _END_EXPLAIN
18 doc-section = {
19 ds-type = 'DESCRIPTION';
20 ds-format = 'mdoc';
21 ds-text = <<- _END_PROG_MDOC_DESCRIP
48 host addresses written in numeric, dotted-quad form,
64 .Bl -bullet -offset indent
113 If the Basic Socket Interface Extensions for IPv6 (RFC-2553)
141 .Bl -tag -width indent
190 be used and the mode in which to operate.
194 either a DNS name or an IP address in dotted-quad notation.
201 .Bl -tag -width indent
204 client mode association with a number of remote servers.
205 In this mode the local clock can synchronized to the
210 client mode association with the specified remote server or local
212 In this mode the local clock can synchronized to the
221 persistent symmetric-active mode association with the specified
223 In this mode the local clock can be synchronized to
233 command mobilizes a persistent broadcast mode association.
240 In broadcast mode the local server sends periodic broadcast
260 manycast client mode association for the multicast address
275 is to operate in client mode with the remote servers that are
292 .Bl -tag -width indent
362 It specifies the time-to-live
375 Versions 1-4 are the choices, with version 4 the
382 modes only, this flag enables interleave mode.
392 .Bl -tag -width indent
399 server, then enters the broadcast client mode, in which it
402 to avoid accidental or malicious disruption in this mode, both the
403 server and client should operate using symmetric-key or public-key
415 accidental or malicious disruption in this mode, both the server
416 and client should operate using symmetric-key or public-key
425 exchange with the server, then enters the broadcast client mode, in
428 in order to avoid accidental or malicious disruption in this mode,
429 both the server and client should operate using symmetric-key or
430 public-key authentication as described in
452 specification RFC-1305 defines a scheme which provides
456 operating in Cipher Block Chaining (CBC) mode, commonly called
457 DES-CBC.
459 5 (MD5) algorithm using a private key, commonly called keyed-MD5.
460 Either algorithm computes a message digest, or one-way hash, which
562 is manycast mode, in which clients periodically troll
567 cryptographic authentication can be used in this mode.
569 of manycast mode is that potential servers need not be
581 .Ss Symmetric-Key Cryptography
582 The original RFC-1305 specification allows any one of possibly
583 65,535 keys, each distinguished by a 32-bit key identifier, to
631 described in RFC-1305 and in addition the Autokey protocol,
635 and verifies the source with digital signatures and any of several
659 All modes use in addition a variant of the S-KEY scheme,
660 in which a pseudo-random key list is generated and used
670 .Xr ntp-keygen 1ntpkeygenmdoc
686 those based on RSA and DSA digital signatures.
800 Bob sends Cathy a thing called a crypto-NAK, which tells her
824 .Xr ntp-keygen 1ntpkeygenmdoc
857 .Bl -tag -width indent
872 protocol defined in RFC-1305.
903 .Bl -tag -width indent
974 Specifies the interval between re-randomization of certain
978 deflect brute-force attacks on the algorithms of the scheme;
998 arguments are 32-bit unsigned
1004 .Bl -tag -width indent
1074 .Bl -tag -width indent
1080 .Bl -tag -width indent
1087 .Bd -literal
1094 clock address in dotted-quad notation.
1109 .Bd -literal
1116 address in dotted-quad notation, The final message field includes the
1127 .Bd -literal
1134 show time offset (seconds), frequency offset (parts per million -
1146 .Bd -literal
1147 48773 10847.650 127.127.4.1 9714 -0.001605376 0.000000000 0.001424877 0.000958674
1153 show the peer address in dotted-quad notation and status,
1160 Enables recording of raw-timestamp statistics information.
1168 .Bd -literal
1176 in dotted-quad notation.
1188 .Bd -literal
1197 .Bl -tag -width indent
1253 .Bl -tag -width indent
1266 .Bl -tag -width indent
1274 server, usually specified as a compile-time constant.
1308 .Bl -tag -width indent
1340 is a 4-digit year number (e.g., 1992).
1352 The term week is defined by computing day-of-year
1356 filename base: A dot, a 4-digit year number, the letter
1358 and a 2-digit week number.
1365 file name suffix consists of a dot, a 4-digit year number, and
1366 a 2-digit month.
1377 and an 8-digit number.
1379 running at the start of the corresponding 24-hour period.
1387 generation set by a fixed name.
1461 .Ss The Kiss-of-Death Packet
1469 for this purpose called the "kiss-of-death" (KoD) packet.
1471 to zero and the reference identifier field set to a four-byte
1497 .Bl -tag -width indent
1515 and a kiss-o'-death packet returned if enabled.
1565 where a value of -1 means "unlimited", the current default.
1580 restrict informational queries and attempts to do run-time
1584 .Bl -tag -width indent
1592 If this flag is set when a rate violation occurs, a kiss-o'-death
1631 to become the default in ntp-4.4.
1673 Decline to provide mode 6 control message trap service to matching
1719 Remove a previously-set restriction. This is useful for
1746 with the anycast paradigm described in RFC-1546,
1778 and minimum feasible time-to-live (TTL) hops, depending
1805 in burst mode in order to reliably set the host clock
1808 in a volley of eight client/server at 2-s intervals
1817 in ordinary client/server mode.
1821 and the effects of implosion due to near-simultaneous
1989 re-associate accordingly.
2013 Each time a manycast client sends a client mode packet
2028 This is in general transparent in client/server mode.
2043 .Bl -tag -width indent
2058 broadcast mode, attempts to perform a replay attack are possible.
2063 .Bl -tag -width indent
2077 and is most useful in manycast mode.
2080 .Bl -tag -width indent
2130 In manycast mode these values are used in turn
2131 in an expanding-ring search.
2137 satellite and modem reference clocks plus a special pseudo-clock
2157 .Qq Pulse-per-second (PPS) Signal Interfacing
2207 number in the range 0-3.
2226 .Cm mode
2267 device-dependent time offsets and four flags that can be included
2284 involving both a reference clock and a pulse-per-second (PPS)
2293 .Bl -tag -width indent
2299 .Op Cm mode Ar int
2306 .Bl -tag -width indent
2319 .It Cm mode Ar int
2320 Specifies a mode number which is interpreted in a
2321 device-specific fashion.
2351 .Op Cm mode Ar int
2368 .Bl -tag -width indent
2371 the driver, a fixed-point decimal number in seconds.
2399 Specifies a fixed-point decimal number in seconds, which is
2400 interpreted in a driver-dependent way.
2419 .It Cm mode Ar int
2420 Specifies a mode number which is interpreted in a
2421 device-specific fashion.
2450 .Bl -tag -width indent
2484 in parts-per-million (PPM).
2495 a 6-bit code.
2523 .Bl -tag -width indent
2551 Enables processing of NTP mode 7 implementation-specific requests
2562 using standard mode 6 requests.
2585 receives a crypto-NAK packet that
2590 a properly forged and appropriately delivered crypto-NAK packet
2633 receives a crypto-NAK packet that
2638 a properly forged and appropriately delivered crypto-NAK packet
2696 opens, and whether input is dropped without processing.
2718 .Fl -interface ,
2721 .Fl -novirtualips
2722 command-line options are specified in the configuration file,
2733 .Li https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list
2735 .Li ftp://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list .
2750 .Xr update-leap 1update_leapmdoc
2758 .Cm --enable-leap-smear
2765 .Sy DO NOT USE THIS OPTION ON PUBLIC-ACCESS SERVERS!
2781 .Ql - ,
2789 .Ql -
2833 .Bd -literal
2842 .Bd -literal
2870 .Bl -tag -width indent
2914 .It Ic nonvolatile Ar threshold
2916 .Ar threshold
2919 (frequency file) will be written, with a default value of 1e-7 (0.1 PPM).
2922 exceeds the threshold, the file is written and the
2923 .Cm threshold
2924 becomes the new threshold value.
2925 If the threshold is not exceeeded, it is reduced by half.
2931 or the JJY driver (type 40, mode 100 - 180).
2935 For the JJY driver (type 40 mode 100 - 180), the argument is
2958 The next two numbers must be between 0 and one-half of the poll interval,
3002 .Bl -tag -width indent
3010 The default is 32 megabytes on non-Linux machines, and -1 under Linux.
3011 -1 means "do not lock the process into memory".
3039 .Cm config-from-file
3056 .Cm saveconfig\ ntp-%Y%m%d-%H%M%S.conf .
3133 .Bl -tag -width indent
3145 parts-per-million.
3150 huff-n'-puff filter span, which determines the most recent interval
3158 The argument is the panic threshold, normally 1000 s.
3163 The argument is the step threshold, which by default is 0.128 s.
3169 disabled if the step threshold is set to zero or greater than the
3172 The argument is the step threshold for the backward direction,
3180 each direction of step threshold are either
3222 mode these values are used in-turn in an expanding-ring search.
3234 In manycast mode these values are used in turn in
3235 an expanding-ring search.
3242 doc-section = {
3243 ds-type = 'FILES';
3244 ds-format = 'mdoc';
3245 ds-text = <<- _END_MDOC_FILES
3246 .Bl -tag -width /etc/ntp.drift -compact
3256 Diffie-Hellman agreement parameters
3261 doc-section = {
3262 ds-type = 'SEE ALSO';
3263 ds-format = 'mdoc';
3264 ds-text = <<- _END_MDOC_SEE_ALSO
3283 doc-section = {
3284 ds-type = 'BUGS';
3285 ds-format = 'mdoc';
3286 ds-text = <<- _END_MDOC_BUGS
3293 files are really digital
3300 doc-section = {
3301 ds-type = 'NOTES';
3302 ds-format = 'mdoc';
3303 ds-text = <<- _END_MDOC_NOTES