Z
ZeeshanAF
Guest
All domain controllers and clients are unable to sync their time from PDC and getting below error. PDC is dyncing from another NTP server in our environment.
NTP port is accessable
already run
/resync /rediscover
/unregister /register
Tried to change PDC role to another server.
152575 11:15:22.7860879s - ---------- Log File Opened -----------------
152575 11:15:22.7860879s - CurSpc:15625000ns BaseSpc:15625000ns SyncToCmos:Yes
152575 11:15:22.7860879s - PerfFreq:10000000c/s
152575 11:15:22.7860879s - ReadConfig: Found provider 'NtpClient':
152575 11:15:22.7860879s - ReadConfig: 'Enabled'=0x00000001
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\system32\w32time.dll'
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\system32\w32time.dll'
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\system32\w32time.dll'
152575 11:15:22.7860879s - ReadConfig: 'InputProvider'=0x00000001
152575 11:15:22.7860879s - ReadConfig: 'RunOnVirtualOnly'=0x00000000
152575 11:15:22.7860879s - ReadConfig: Found provider 'NtpServer':
152575 11:15:22.7860879s - ReadConfig: 'Enabled'=0x00000000
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\system32\w32time.dll'
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\system32\w32time.dll'
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\system32\w32time.dll'
152575 11:15:22.7860879s - ReadConfig: 'InputProvider'=0x00000000
152575 11:15:22.7860879s - ReadConfig: 'RunOnVirtualOnly'=0x00000000
152575 11:15:22.7860879s - ReadConfig: Found provider 'VMICTimeProvider':
152575 11:15:22.7860879s - ReadConfig: 'Enabled'=0x00000001
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\System32\vmictimeprovider.dll'
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\System32\vmictimeprovider.dll'
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\System32\vmictimeprovider.dll'
152575 11:15:22.7860879s - ReadConfig: 'InputProvider'=0x00000001
152575 11:15:22.7860879s - ReadConfig: 'RunOnVirtualOnly'=0x00000001
152575 11:15:22.7860879s - ReadConfig: 'PhaseCorrectRate'=0x00000001 (2)
152575 11:15:22.7860879s - ReadConfig: 'UpdateInterval'=0x00007530 (2)
152575 11:15:22.7860879s - ReadConfig: 'FrequencyCorrectRate'=0x00000004 (2)
152575 11:15:22.7860879s - ReadConfig: 'PollAdjustFactor'=0x00000005 (2)
152575 11:15:22.7860879s - ReadConfig: 'LargePhaseOffset'=0x02FAF080 (2)
152575 11:15:22.7860879s - ReadConfig: 'SpikeWatchPeriod'=0x00000384 (2)
152575 11:15:22.7860879s - ReadConfig: 'HoldPeriod'=0x00000005 (2)
152575 11:15:22.7860879s - ReadConfig: 'MinPollInterval'=0x0000000A (2)
152575 11:15:22.7860879s - ReadConfig: 'MaxPollInterval'=0x0000000F (2)
152575 11:15:22.7860879s - ReadConfig: 'AnnounceFlags'=0x00000005 (2)
152575 11:15:22.7860879s - ReadConfig: 'LocalClockDispersion'=0x0000000A (2)
152575 11:15:22.7860879s - ReadConfig: 'MaxNegPhaseCorrection'=0xFFFFFFFF (2)
152575 11:15:22.7860879s - ReadConfig: 'MaxPosPhaseCorrection'=0xFFFFFFFF (2)
152575 11:15:22.7860879s - ReadConfig: 'EventLogFlags'=0x00000002 (2)
152575 11:15:22.7860879s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C (2)
152575 11:15:22.7860879s - ReadConfig: 'TimeJumpAuditOffset'=0x00007080 (2)
152575 11:15:22.7860879s - lastClockRate=156250, clockPrecision=-6
152575 11:15:22.7860879s - SetTimeSlipNotification succeeds with 0x00000000.
152575 11:15:22.7860879s - W32TmServiceMain: RequestNetTopoChangeNotification Succeed
152575 11:15:22.7860879s - W32TmServiceMain: RequestNetTopoChangeNotification Succeed
152575 11:15:22.7860879s - DomainHierarchy: LSA role change notification. Redetecting.
152575 11:15:22.8017151s - ClockDisciplineThread: Starting: SetUnsync: LI:0 S:1 RDl:0 RDs:100000000 TSF:0x0
152575 11:15:22.8017151s - ClockDispln: we're a reliable time service with no time source: LS: 0, TN: 864000000000, WAIT: 86400000
152575 11:15:22.8017151s - Starting Providers.
152575 11:15:22.8017151s - Starting 'NtpClient', dll:'C:\Windows\system32\w32time.dll'
152575 11:15:22.8017151s - LoadLibrary
152575 11:15:22.8017151s - NtpTimeProvOpen("NtpClient") called.
152575 11:15:22.8017151s - StartNtpProv
152575 11:15:22.8017151s - sysPrecision=-6, systmeClockResolution=156250
152575 11:15:22.8017151s - NtpProvider: Created 2 sockets (0 listen-only): [::]:123<0x0>, 0.0.0.0:123<0x0>
152575 11:15:22.8017151s - PeerPollingThread: waiting forever
152575 11:15:22.8017151s - ReadConfig: 'AllowNonstandardModeCombinations'=0x00000001 (2)
152575 11:15:22.8017151s - ReadConfig: 'CompatibilityFlags'=0x80000000 (2)
152575 11:15:22.8017151s - ReadConfig: 'SpecialPollInterval'=0x00000E10 (2)
152575 11:15:22.8017151s - ReadConfig: 'ResolvePeerBackoffMinutes'=0x0000000F (2)
152575 11:15:22.8017151s - ReadConfig: 'ResolvePeerBackoffMaxTimes'=0x00000007 (2)
152575 11:15:22.8017151s - ReadConfig: 'EventLogFlags'=0x00000001 (2)
152575 11:15:22.8017151s - ReadConfig: 'LargeSampleSkew'=0x00000003 (2)
152575 11:15:22.8017151s - ReadConfig: 'SignatureAuthAllowed'=0x00000001 (2)
152575 11:15:22.8017151s - ReadConfig: 'Type'=NT5DS (2)
152575 11:15:22.8017151s - ReadConfig: 'CrossSiteSyncFlags'=0x00000002 (2)
152575 11:15:22.8017151s - AddNewPendingPeer: domain
152575 11:15:22.8017151s - PeerPollingThread: waiting 0.000s
152575 11:15:22.8017151s - PeerPollingThread: PeerListUpdated
152575 11:15:22.8017151s - NtpClient started.
152575 11:15:22.8017151s - Starting 'VMICTimeProvider', dll:'C:\Windows\System32\vmictimeprovider.dll'
152575 11:15:22.8017151s - Resolving domain peer
152575 11:15:22.8017151s - LoadLibrary
152575 11:15:22.8017151s - Successfully started 2 providers.
152575 11:15:22.8017151s - W32TmServiceMain: waiting i16.000s (1024.000s)
152575 11:15:22.8017151s - Domain member syncing from \\dc.mydomain.com.
152575 11:15:22.8017151s - Association: (Local) 0.0.0.0:123 => 172.16.100.100:123 (Remote)
152575 11:15:22.8017151s - Created reachability group: (
152575 11:15:22.8017151s - 172.16.100.100:123,
152575 11:15:22.8017151s - )
152575 11:15:22.8017151s - PeerPollingThread: waiting 0.000s
152575 11:15:22.8017151s - PeerPollingThread: PeerListUpdated
152575 11:15:22.8017151s - Reachability: Attempting to contact peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123).
152575 11:15:22.8017151s - Polling peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123)
152575 11:15:22.8017151s - Sending packet to dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123) in Win2K detect mode, stage 1.
152575 11:15:22.8017151s - Peer poll: Max:1024.0000000s Cur:00.0000000s
152575 11:15:22.8017151s - PeerPollingThread: waiting 1024.000s
152575 11:15:22.8017151s - ListeningThread -- DataAvailEvent set for socket 1 (0.0.0.0:123)
152575 11:15:22.8017151s - ListeningThread -- response heard from 172.16.100.100:123 <- 172.16.100.5:123
152575 11:15:22.8017151s - W32TmServiceMain: Network Topology Change
152575 11:15:22.8017151s - TimeProvCommand([NtpClient], TPC_NetTopoChange) called.
152575 11:15:22.8017151s - W32TmServiceMain: Network Topology Change
152575 11:15:22.8017151s - TimeProvCommand([NtpClient], TPC_NetTopoChange) called.
152575 11:15:22.8017151s - /-- NTP Packet:
152575 11:15:22.8017151s - | LeapIndicator: 0 - no warning; VersionNumber: 3; Mode: 4 - Server; LiVnMode: 0x1C
152575 11:15:22.8017151s - | Stratum: 15 - secondary reference (syncd by (S)NTP)
152575 11:15:22.8017151s - | Poll Interval: 17 - out of valid range; Precision: -6 - 15.625ms per tick
152575 11:15:22.8017151s - | RootDelay: 0x0000.0800s - 0.03125s; RootDispersion: 0x0000.1A50s - 0.102783s
152575 11:15:22.8017151s - | ReferenceClockIdentifier: 0xAC106402 - source IP: 172.16.100.2
152575 11:15:22.8017151s - | ReferenceTimestamp: 0xDF57382F4EE8D617 - 13182519983308240300ns - 152575 11:06:23.3082403s
152575 11:15:22.8017151s - | OriginateTimestamp: 0xDF573A4ACD3D3367 - 13182520522801715100ns - 152575 11:15:22.8017151s
152575 11:15:22.8017151s - | ReceiveTimestamp: 0xDF573A6DD4078E69 - 13182520557828240300ns - 152575 11:15:57.8282403s
152575 11:15:22.8173377s - | TransmitTimestamp: 0xDF573A6DD4078E69 - 13182520557828240300ns - 152575 11:15:57.8282403s
152575 11:15:22.8173377s - >-- Non-packet info:
152575 11:15:22.8173377s - | DestinationTimestamp: 152575 11:15:22.8173377s - 0xDF573A4ACD3D3367152575 11:15:22.8173377s - - 13182520522801715100ns152575 11:15:22.8173377s - - 152575 11:15:22.8017151s
152575 11:15:22.8173377s - | RoundtripDelay: 000ns (0s)
152575 11:15:22.8173377s - | LocalClockOffset: 35026525200ns - 0:35.026525200s
152575 11:15:22.8173377s - \--
152575 11:15:22.8173377s - Response received from domain controller dc.mydomain.com authenticated successfully (using digest format)
152575 11:15:22.8173377s - Peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123) is not Win2K. Setting compat flags.
152575 11:15:22.8173377s - Packet test 7 failed (bad stratum: system - 1, sample - 15).
152575 11:15:22.8173377s - Ignoring packet that failed tests from dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123).
152575 11:15:22.8173377s - NtpProvider: Network Topology Change
152575 11:15:22.8173377s - Reachability: removing peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123). LAST PEER IN GROUP!
152575 11:15:22.8173377s - Peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123) never sync'd, resync now!
152575 11:15:22.8173377s - Peers reset: p-p:0 a-p:1 a-x:0
152575 11:15:22.8173377s - NtpProvider: Created 2 sockets (0 listen-only): [::]:123<0x0>, 0.0.0.0:123<0x0>
152575 11:15:22.8173377s - PeerPollingThread: waiting 1.485s
152575 11:15:22.8173377s - PeerPollingThread: PeerListUpdated
152575 11:15:22.8173377s - Logging error: NtpClient has been configured to acquire time from one or more time sources, however none of the sources are currently accessible and no attempt to contact a source will be made for 1 minutes. NTPCLIENT HAS NO SOURCE OF ACCURATE TIME.
152575 11:15:22.8173377s - PeerPollingThread: waiting 1.485s
152575 11:15:22.8173377s - NtpProvider: Network Topology Change
152575 11:15:22.8173377s - Peer never sync'd, resync now!
152575 11:15:22.8173377s - Peers reset: p-p:1 a-p:1 a-x:0
152575 11:15:22.8173377s - NtpProvider: Created 2 sockets (0 listen-only): [::]:123<0x0>, 0.0.0.0:123<0x0>
152575 11:15:22.8173377s - PeerPollingThread: waiting 1.500s
152575 11:15:22.8173377s - W32TmServiceMain: waiting i16.000s (1024.000s)
152575 11:15:22.8173377s - W32TmServiceMain: RequestNetTopoChangeNotification Succeed
152575 11:15:22.8173377s - PeerPollingThread: PeerListUpdated
152575 11:15:22.8173377s - Logging error: NtpClient has been configured to acquire time from one or more time sources, however none of the sources are currently accessible and no attempt to contact a source will be made for 1 minutes. NTPCLIENT HAS NO SOURCE OF ACCURATE TIME.
152575 11:15:22.8173377s - PeerPollingThread: waiting 1.500s
152575 11:15:22.8173377s - W32TmServiceMain: waiting i16.000s (1024.000s)
152575 11:15:22.8173377s - W32TmServiceMain: RequestNetTopoChangeNotification Succeed
152575 11:15:24.3173388s - PeerPollingThread: WaitTimeout
152575 11:15:24.3173388s - Resolving domain peer
152575 11:15:24.3173388s - Domain member syncing from \\dc.mydomain.com.
152575 11:15:24.3173388s - Association: (Local) 0.0.0.0:123 => 172.16.100.100:123 (Remote)
152575 11:15:24.3173388s - Created reachability group: (
152575 11:15:24.3173388s - 172.16.100.100:123,
152575 11:15:24.3173388s - )
152575 11:15:24.3173388s - PeerPollingThread: PeerListUpdated
152575 11:15:24.3173388s - Reachability: Attempting to contact peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123).
152575 11:15:24.3173388s - Polling peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123)
152575 11:15:24.3173388s - Sending packet to dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123) in Win2K detect mode, stage 1.
152575 11:15:24.3173388s - Peer poll: Max:1024.0000000s Cur:00.0000000s
152575 11:15:24.3173388s - PeerPollingThread: waiting 1024.000s
152575 11:15:24.3173388s - PeerPollingThread: waiting 1024.000s
152575 11:15:24.3173388s - ListeningThread -- DataAvailEvent set for socket 1 (0.0.0.0:123)
152575 11:15:24.3173388s - ListeningThread -- response heard from 172.16.100.100:123 <- 172.16.100.5:123
152575 11:15:24.3173388s - /-- NTP Packet:
152575 11:15:24.3173388s - | LeapIndicator: 0 - no warning; VersionNumber: 3; Mode: 4 - Server; LiVnMode: 0x1C
152575 11:15:24.3173388s - | Stratum: 15 - secondary reference (syncd by (S)NTP)
152575 11:15:24.3173388s - | Poll Interval: 17 - out of valid range; Precision: -6 - 15.625ms per tick
152575 11:15:24.3173388s - | RootDelay: 0x0000.0800s - 0.03125s; RootDispersion: 0x0000.1A51s - 0.102798s
152575 11:15:24.3173388s - | ReferenceClockIdentifier: 0xAC106402 - source IP: 172.16.100.2
152575 11:15:24.3173388s - | ReferenceTimestamp: 0xDF57382F4EF87C7D - 13182519983308479100ns - 152575 11:06:23.3084791s
152575 11:15:24.3173388s - | OriginateTimestamp: 0xDF573A4C513D1D97 - 13182520524317338800ns - 152575 11:15:24.3173388s
152575 11:15:24.3173388s - | ReceiveTimestamp: 0xDF573A6F576B2C9E - 13182520559341479100ns - 152575 11:15:59.3414791s
152575 11:15:24.3173388s - | TransmitTimestamp: 0xDF573A6F576B2C9E - 13182520559341479100ns - 152575 11:15:59.3414791s
152575 11:15:24.3173388s - >-- Non-packet info:
152575 11:15:24.3173388s - | DestinationTimestamp: 152575 11:15:24.3173388s - 0xDF573A4C513D1D97152575 11:15:24.3173388s - - 13182520524317338800ns152575 11:15:24.3173388s - - 152575 11:15:24.3173388s
152575 11:15:24.3173388s - | RoundtripDelay: 000ns (0s)
152575 11:15:24.3173388s - | LocalClockOffset: 35024140300ns - 0:35.024140300s
152575 11:15:24.3173388s - \--
152575 11:15:24.3173388s - Response received from domain controller dc.mydomain.com authenticated successfully (using digest format)
152575 11:15:24.3173388s - Peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123) is not Win2K. Setting compat flags.
152575 11:15:24.3173388s - Packet test 7 failed (bad stratum: system - 1, sample - 15).
152575 11:15:24.3173388s - Ignoring packet that failed tests from dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123).
152575 11:15:24.8017134s - W32TimeHandler called: SERVICE_CONTROL_INTERROGATE
152575 11:15:32.5674287s - RPC Caller is mydomain\asad.admin (S-1-5-21-1699421847-4021460542-3915083997-186050)
152575 11:15:32.5674287s - RPC Call Attribute is local=1, kernel=0, session=0, authentication=6, protocol=2, OpNum=3
152575 11:15:32.5674287s - RPC Call - Query Source
152575 11:15:38.8173411s - W32TmServiceMain: timeout
152575 11:15:38.8173411s - Sample Prepared at 131825205388173411 for peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123)
152575 11:15:38.8173411s - W32TmServiceMain: waiting 1024.000s
152575 11:15:41.6142149s - W32TimeHandler called: SERVICE_CONTROL_INTERROGATE
152575 11:15:41.8173334s - W32TimeHandler called: SERVICE_CONTROL_INTERROGATE
Continue reading...
NTP port is accessable
already run
/resync /rediscover
/unregister /register
Tried to change PDC role to another server.
152575 11:15:22.7860879s - ---------- Log File Opened -----------------
152575 11:15:22.7860879s - CurSpc:15625000ns BaseSpc:15625000ns SyncToCmos:Yes
152575 11:15:22.7860879s - PerfFreq:10000000c/s
152575 11:15:22.7860879s - ReadConfig: Found provider 'NtpClient':
152575 11:15:22.7860879s - ReadConfig: 'Enabled'=0x00000001
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\system32\w32time.dll'
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\system32\w32time.dll'
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\system32\w32time.dll'
152575 11:15:22.7860879s - ReadConfig: 'InputProvider'=0x00000001
152575 11:15:22.7860879s - ReadConfig: 'RunOnVirtualOnly'=0x00000000
152575 11:15:22.7860879s - ReadConfig: Found provider 'NtpServer':
152575 11:15:22.7860879s - ReadConfig: 'Enabled'=0x00000000
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\system32\w32time.dll'
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\system32\w32time.dll'
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\system32\w32time.dll'
152575 11:15:22.7860879s - ReadConfig: 'InputProvider'=0x00000000
152575 11:15:22.7860879s - ReadConfig: 'RunOnVirtualOnly'=0x00000000
152575 11:15:22.7860879s - ReadConfig: Found provider 'VMICTimeProvider':
152575 11:15:22.7860879s - ReadConfig: 'Enabled'=0x00000001
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\System32\vmictimeprovider.dll'
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\System32\vmictimeprovider.dll'
152575 11:15:22.7860879s - ReadConfig: 'DllName'='C:\Windows\System32\vmictimeprovider.dll'
152575 11:15:22.7860879s - ReadConfig: 'InputProvider'=0x00000001
152575 11:15:22.7860879s - ReadConfig: 'RunOnVirtualOnly'=0x00000001
152575 11:15:22.7860879s - ReadConfig: 'PhaseCorrectRate'=0x00000001 (2)
152575 11:15:22.7860879s - ReadConfig: 'UpdateInterval'=0x00007530 (2)
152575 11:15:22.7860879s - ReadConfig: 'FrequencyCorrectRate'=0x00000004 (2)
152575 11:15:22.7860879s - ReadConfig: 'PollAdjustFactor'=0x00000005 (2)
152575 11:15:22.7860879s - ReadConfig: 'LargePhaseOffset'=0x02FAF080 (2)
152575 11:15:22.7860879s - ReadConfig: 'SpikeWatchPeriod'=0x00000384 (2)
152575 11:15:22.7860879s - ReadConfig: 'HoldPeriod'=0x00000005 (2)
152575 11:15:22.7860879s - ReadConfig: 'MinPollInterval'=0x0000000A (2)
152575 11:15:22.7860879s - ReadConfig: 'MaxPollInterval'=0x0000000F (2)
152575 11:15:22.7860879s - ReadConfig: 'AnnounceFlags'=0x00000005 (2)
152575 11:15:22.7860879s - ReadConfig: 'LocalClockDispersion'=0x0000000A (2)
152575 11:15:22.7860879s - ReadConfig: 'MaxNegPhaseCorrection'=0xFFFFFFFF (2)
152575 11:15:22.7860879s - ReadConfig: 'MaxPosPhaseCorrection'=0xFFFFFFFF (2)
152575 11:15:22.7860879s - ReadConfig: 'EventLogFlags'=0x00000002 (2)
152575 11:15:22.7860879s - ReadConfig: 'MaxAllowedPhaseOffset'=0x0000012C (2)
152575 11:15:22.7860879s - ReadConfig: 'TimeJumpAuditOffset'=0x00007080 (2)
152575 11:15:22.7860879s - lastClockRate=156250, clockPrecision=-6
152575 11:15:22.7860879s - SetTimeSlipNotification succeeds with 0x00000000.
152575 11:15:22.7860879s - W32TmServiceMain: RequestNetTopoChangeNotification Succeed
152575 11:15:22.7860879s - W32TmServiceMain: RequestNetTopoChangeNotification Succeed
152575 11:15:22.7860879s - DomainHierarchy: LSA role change notification. Redetecting.
152575 11:15:22.8017151s - ClockDisciplineThread: Starting: SetUnsync: LI:0 S:1 RDl:0 RDs:100000000 TSF:0x0
152575 11:15:22.8017151s - ClockDispln: we're a reliable time service with no time source: LS: 0, TN: 864000000000, WAIT: 86400000
152575 11:15:22.8017151s - Starting Providers.
152575 11:15:22.8017151s - Starting 'NtpClient', dll:'C:\Windows\system32\w32time.dll'
152575 11:15:22.8017151s - LoadLibrary
152575 11:15:22.8017151s - NtpTimeProvOpen("NtpClient") called.
152575 11:15:22.8017151s - StartNtpProv
152575 11:15:22.8017151s - sysPrecision=-6, systmeClockResolution=156250
152575 11:15:22.8017151s - NtpProvider: Created 2 sockets (0 listen-only): [::]:123<0x0>, 0.0.0.0:123<0x0>
152575 11:15:22.8017151s - PeerPollingThread: waiting forever
152575 11:15:22.8017151s - ReadConfig: 'AllowNonstandardModeCombinations'=0x00000001 (2)
152575 11:15:22.8017151s - ReadConfig: 'CompatibilityFlags'=0x80000000 (2)
152575 11:15:22.8017151s - ReadConfig: 'SpecialPollInterval'=0x00000E10 (2)
152575 11:15:22.8017151s - ReadConfig: 'ResolvePeerBackoffMinutes'=0x0000000F (2)
152575 11:15:22.8017151s - ReadConfig: 'ResolvePeerBackoffMaxTimes'=0x00000007 (2)
152575 11:15:22.8017151s - ReadConfig: 'EventLogFlags'=0x00000001 (2)
152575 11:15:22.8017151s - ReadConfig: 'LargeSampleSkew'=0x00000003 (2)
152575 11:15:22.8017151s - ReadConfig: 'SignatureAuthAllowed'=0x00000001 (2)
152575 11:15:22.8017151s - ReadConfig: 'Type'=NT5DS (2)
152575 11:15:22.8017151s - ReadConfig: 'CrossSiteSyncFlags'=0x00000002 (2)
152575 11:15:22.8017151s - AddNewPendingPeer: domain
152575 11:15:22.8017151s - PeerPollingThread: waiting 0.000s
152575 11:15:22.8017151s - PeerPollingThread: PeerListUpdated
152575 11:15:22.8017151s - NtpClient started.
152575 11:15:22.8017151s - Starting 'VMICTimeProvider', dll:'C:\Windows\System32\vmictimeprovider.dll'
152575 11:15:22.8017151s - Resolving domain peer
152575 11:15:22.8017151s - LoadLibrary
152575 11:15:22.8017151s - Successfully started 2 providers.
152575 11:15:22.8017151s - W32TmServiceMain: waiting i16.000s (1024.000s)
152575 11:15:22.8017151s - Domain member syncing from \\dc.mydomain.com.
152575 11:15:22.8017151s - Association: (Local) 0.0.0.0:123 => 172.16.100.100:123 (Remote)
152575 11:15:22.8017151s - Created reachability group: (
152575 11:15:22.8017151s - 172.16.100.100:123,
152575 11:15:22.8017151s - )
152575 11:15:22.8017151s - PeerPollingThread: waiting 0.000s
152575 11:15:22.8017151s - PeerPollingThread: PeerListUpdated
152575 11:15:22.8017151s - Reachability: Attempting to contact peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123).
152575 11:15:22.8017151s - Polling peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123)
152575 11:15:22.8017151s - Sending packet to dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123) in Win2K detect mode, stage 1.
152575 11:15:22.8017151s - Peer poll: Max:1024.0000000s Cur:00.0000000s
152575 11:15:22.8017151s - PeerPollingThread: waiting 1024.000s
152575 11:15:22.8017151s - ListeningThread -- DataAvailEvent set for socket 1 (0.0.0.0:123)
152575 11:15:22.8017151s - ListeningThread -- response heard from 172.16.100.100:123 <- 172.16.100.5:123
152575 11:15:22.8017151s - W32TmServiceMain: Network Topology Change
152575 11:15:22.8017151s - TimeProvCommand([NtpClient], TPC_NetTopoChange) called.
152575 11:15:22.8017151s - W32TmServiceMain: Network Topology Change
152575 11:15:22.8017151s - TimeProvCommand([NtpClient], TPC_NetTopoChange) called.
152575 11:15:22.8017151s - /-- NTP Packet:
152575 11:15:22.8017151s - | LeapIndicator: 0 - no warning; VersionNumber: 3; Mode: 4 - Server; LiVnMode: 0x1C
152575 11:15:22.8017151s - | Stratum: 15 - secondary reference (syncd by (S)NTP)
152575 11:15:22.8017151s - | Poll Interval: 17 - out of valid range; Precision: -6 - 15.625ms per tick
152575 11:15:22.8017151s - | RootDelay: 0x0000.0800s - 0.03125s; RootDispersion: 0x0000.1A50s - 0.102783s
152575 11:15:22.8017151s - | ReferenceClockIdentifier: 0xAC106402 - source IP: 172.16.100.2
152575 11:15:22.8017151s - | ReferenceTimestamp: 0xDF57382F4EE8D617 - 13182519983308240300ns - 152575 11:06:23.3082403s
152575 11:15:22.8017151s - | OriginateTimestamp: 0xDF573A4ACD3D3367 - 13182520522801715100ns - 152575 11:15:22.8017151s
152575 11:15:22.8017151s - | ReceiveTimestamp: 0xDF573A6DD4078E69 - 13182520557828240300ns - 152575 11:15:57.8282403s
152575 11:15:22.8173377s - | TransmitTimestamp: 0xDF573A6DD4078E69 - 13182520557828240300ns - 152575 11:15:57.8282403s
152575 11:15:22.8173377s - >-- Non-packet info:
152575 11:15:22.8173377s - | DestinationTimestamp: 152575 11:15:22.8173377s - 0xDF573A4ACD3D3367152575 11:15:22.8173377s - - 13182520522801715100ns152575 11:15:22.8173377s - - 152575 11:15:22.8017151s
152575 11:15:22.8173377s - | RoundtripDelay: 000ns (0s)
152575 11:15:22.8173377s - | LocalClockOffset: 35026525200ns - 0:35.026525200s
152575 11:15:22.8173377s - \--
152575 11:15:22.8173377s - Response received from domain controller dc.mydomain.com authenticated successfully (using digest format)
152575 11:15:22.8173377s - Peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123) is not Win2K. Setting compat flags.
152575 11:15:22.8173377s - Packet test 7 failed (bad stratum: system - 1, sample - 15).
152575 11:15:22.8173377s - Ignoring packet that failed tests from dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123).
152575 11:15:22.8173377s - NtpProvider: Network Topology Change
152575 11:15:22.8173377s - Reachability: removing peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123). LAST PEER IN GROUP!
152575 11:15:22.8173377s - Peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123) never sync'd, resync now!
152575 11:15:22.8173377s - Peers reset: p-p:0 a-p:1 a-x:0
152575 11:15:22.8173377s - NtpProvider: Created 2 sockets (0 listen-only): [::]:123<0x0>, 0.0.0.0:123<0x0>
152575 11:15:22.8173377s - PeerPollingThread: waiting 1.485s
152575 11:15:22.8173377s - PeerPollingThread: PeerListUpdated
152575 11:15:22.8173377s - Logging error: NtpClient has been configured to acquire time from one or more time sources, however none of the sources are currently accessible and no attempt to contact a source will be made for 1 minutes. NTPCLIENT HAS NO SOURCE OF ACCURATE TIME.
152575 11:15:22.8173377s - PeerPollingThread: waiting 1.485s
152575 11:15:22.8173377s - NtpProvider: Network Topology Change
152575 11:15:22.8173377s - Peer never sync'd, resync now!
152575 11:15:22.8173377s - Peers reset: p-p:1 a-p:1 a-x:0
152575 11:15:22.8173377s - NtpProvider: Created 2 sockets (0 listen-only): [::]:123<0x0>, 0.0.0.0:123<0x0>
152575 11:15:22.8173377s - PeerPollingThread: waiting 1.500s
152575 11:15:22.8173377s - W32TmServiceMain: waiting i16.000s (1024.000s)
152575 11:15:22.8173377s - W32TmServiceMain: RequestNetTopoChangeNotification Succeed
152575 11:15:22.8173377s - PeerPollingThread: PeerListUpdated
152575 11:15:22.8173377s - Logging error: NtpClient has been configured to acquire time from one or more time sources, however none of the sources are currently accessible and no attempt to contact a source will be made for 1 minutes. NTPCLIENT HAS NO SOURCE OF ACCURATE TIME.
152575 11:15:22.8173377s - PeerPollingThread: waiting 1.500s
152575 11:15:22.8173377s - W32TmServiceMain: waiting i16.000s (1024.000s)
152575 11:15:22.8173377s - W32TmServiceMain: RequestNetTopoChangeNotification Succeed
152575 11:15:24.3173388s - PeerPollingThread: WaitTimeout
152575 11:15:24.3173388s - Resolving domain peer
152575 11:15:24.3173388s - Domain member syncing from \\dc.mydomain.com.
152575 11:15:24.3173388s - Association: (Local) 0.0.0.0:123 => 172.16.100.100:123 (Remote)
152575 11:15:24.3173388s - Created reachability group: (
152575 11:15:24.3173388s - 172.16.100.100:123,
152575 11:15:24.3173388s - )
152575 11:15:24.3173388s - PeerPollingThread: PeerListUpdated
152575 11:15:24.3173388s - Reachability: Attempting to contact peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123).
152575 11:15:24.3173388s - Polling peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123)
152575 11:15:24.3173388s - Sending packet to dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123) in Win2K detect mode, stage 1.
152575 11:15:24.3173388s - Peer poll: Max:1024.0000000s Cur:00.0000000s
152575 11:15:24.3173388s - PeerPollingThread: waiting 1024.000s
152575 11:15:24.3173388s - PeerPollingThread: waiting 1024.000s
152575 11:15:24.3173388s - ListeningThread -- DataAvailEvent set for socket 1 (0.0.0.0:123)
152575 11:15:24.3173388s - ListeningThread -- response heard from 172.16.100.100:123 <- 172.16.100.5:123
152575 11:15:24.3173388s - /-- NTP Packet:
152575 11:15:24.3173388s - | LeapIndicator: 0 - no warning; VersionNumber: 3; Mode: 4 - Server; LiVnMode: 0x1C
152575 11:15:24.3173388s - | Stratum: 15 - secondary reference (syncd by (S)NTP)
152575 11:15:24.3173388s - | Poll Interval: 17 - out of valid range; Precision: -6 - 15.625ms per tick
152575 11:15:24.3173388s - | RootDelay: 0x0000.0800s - 0.03125s; RootDispersion: 0x0000.1A51s - 0.102798s
152575 11:15:24.3173388s - | ReferenceClockIdentifier: 0xAC106402 - source IP: 172.16.100.2
152575 11:15:24.3173388s - | ReferenceTimestamp: 0xDF57382F4EF87C7D - 13182519983308479100ns - 152575 11:06:23.3084791s
152575 11:15:24.3173388s - | OriginateTimestamp: 0xDF573A4C513D1D97 - 13182520524317338800ns - 152575 11:15:24.3173388s
152575 11:15:24.3173388s - | ReceiveTimestamp: 0xDF573A6F576B2C9E - 13182520559341479100ns - 152575 11:15:59.3414791s
152575 11:15:24.3173388s - | TransmitTimestamp: 0xDF573A6F576B2C9E - 13182520559341479100ns - 152575 11:15:59.3414791s
152575 11:15:24.3173388s - >-- Non-packet info:
152575 11:15:24.3173388s - | DestinationTimestamp: 152575 11:15:24.3173388s - 0xDF573A4C513D1D97152575 11:15:24.3173388s - - 13182520524317338800ns152575 11:15:24.3173388s - - 152575 11:15:24.3173388s
152575 11:15:24.3173388s - | RoundtripDelay: 000ns (0s)
152575 11:15:24.3173388s - | LocalClockOffset: 35024140300ns - 0:35.024140300s
152575 11:15:24.3173388s - \--
152575 11:15:24.3173388s - Response received from domain controller dc.mydomain.com authenticated successfully (using digest format)
152575 11:15:24.3173388s - Peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123) is not Win2K. Setting compat flags.
152575 11:15:24.3173388s - Packet test 7 failed (bad stratum: system - 1, sample - 15).
152575 11:15:24.3173388s - Ignoring packet that failed tests from dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123).
152575 11:15:24.8017134s - W32TimeHandler called: SERVICE_CONTROL_INTERROGATE
152575 11:15:32.5674287s - RPC Caller is mydomain\asad.admin (S-1-5-21-1699421847-4021460542-3915083997-186050)
152575 11:15:32.5674287s - RPC Call Attribute is local=1, kernel=0, session=0, authentication=6, protocol=2, OpNum=3
152575 11:15:32.5674287s - RPC Call - Query Source
152575 11:15:38.8173411s - W32TmServiceMain: timeout
152575 11:15:38.8173411s - Sample Prepared at 131825205388173411 for peer dc.mydomain.com (ntp.d|0.0.0.0:123->172.16.100.100:123)
152575 11:15:38.8173411s - W32TmServiceMain: waiting 1024.000s
152575 11:15:41.6142149s - W32TimeHandler called: SERVICE_CONTROL_INTERROGATE
152575 11:15:41.8173334s - W32TimeHandler called: SERVICE_CONTROL_INTERROGATE
Continue reading...