Ntp enumeration

PRTG Network Monitor

Source: https://www.paessler.com PRTG monitors all systems, devices, traffic and applications of the IT infrastructure using various technologies such as SNMP, WMI, SSH, etc. PRTG Network Monitor includes SNTP Sensor monitors, a Simple Network Time Protocol (SNTP) server that shows response time of the server and time difference in comparison to the local system time.

ntpdate

This command collects the number of time samples from a number of time sources..

ntptrace

This command determines from where the NTP server gets time and follows the chain of NTP servers back to its prime time source.

ntpq

This command monitors NTP daemon ntpd operations and determine performance.

ntpdc

This command queries the ntpd daemon about its current state and requests changes in that state.

NNTP

is designed to synchronize clocks of networked computers. It uses UDP port 123 as its primary means of communication. NTP can maintain time to within 10 milliseconds (1/100 seconds) over the public Internet. It can achieve accuracies of 200 microseconds or better in local area networks under ideal conditions. Attacker queries NTP server to gather valuable information such as: List of hosts connected to NTP server Clients IP addresses in a network, their system names and OSs Internal IPs can also be obtained if NTP server is in the DMZ.