ntpMerlin ntpMerlin - NTP Daemon for AsusWRT Merlin

[JemTheWire]

If I may play Devils Advocate for a moment. If you are using the graphs to see if ntpMerlin is working then why do you have it installed?
You know it’s working because it generates graphs. If you didn’t have it installed you would just use the ‘Merlin/kvic enhanced version’.

 

[SomeWhereOverTheRainBow]

If I may play Devils Advocate for a moment. If you are using the graphs to see if ntpMerlin is working then why do you have it installed?
You know it’s working because it generates graphs. If you didn’t have it installed you would just use the ‘Merlin/kvic enhanced version’.

Well to for tracking accuracy of the ntp server, graphs can be helpful. For instance if i blindly use an ntp server and i set all my devices to get time from my local ntp server, it seems important to track whether the servers you are using are actually effective because you are telling your devices to trust the accuracy of your local ntp server.

 

[dsancho]

Hi,

My AC86U is running on the last asus merlin fw with diversion/pixelserv-tls/skynet/scribe installed.

I've also installed the last version of ntpMerlin but I still having the TIME_ERROR Clock Unsynchronized after more than one hour and ntptime command outputs an error.

Do I need to ignore this ?

Thanks

 

[EmeraldDeer]

Hi,

My AC86U is running on the last asus merlin fw with diversion/pixelserv-tls/skynet/scribe installed.

I've also installed the last version of ntpMerlin but I still having the TIME_ERROR Clock Unsynchronized after more than one hour and ntptime command outputs an error.

Do I need to ignore this ?

Thanks

No, you should only receive that error at startup

 

[dsancho]

No, you should only receive that error at startup

Is it a known issue on 86U?
What can I do to get it work?
Thanks

 

[Jack Yaz]

Is it a known issue on 86U?
What can I do to get it work?
Thanks

What does your ntp.conf look like?
WHat does

ps | grep ntp

show?

 

[JT Strickland]

Guys, I apologize, but I can't get nano to work for me. Is there not something else I can do, like use notebook ++, or copy the file from windows to my router?
I was hoping to get the config setup for cloudfare going before upgrading to 384.18, but alas, it has not happened. Thanks for the help. I would have never thought I would have problems editing a simple file.

RT-AC86U w/ 384.17, RT-AC68U Aimesh node w/ same, Diversion, UiDivstats, Skynet, AiProtection, DoT, Scribe, UiScribe, Connmon, SpdMerlin, ScMerlin, Nsrum, NtpMerlin

 

[JT Strickland]

Guys, I apologize, but I can't get nano to work for me. Is there not something else I can do, like use notebook ++, or copy the file from windows to my router?
I was hoping to get the config setup for cloudfare going before upgrading to 384.18, but alas, it has not happened. Thanks for the help. I would have never thought I would have problems editing a simple file.

RT-AC86U w/ 384.17, RT-AC68U Aimesh node w/ same, Diversion, UiDivstats, Skynet, AiProtection, DoT, Scribe, UiScribe, Connmon, SpdMerlin, ScMerlin, Nsrum, NtpMerlin

Darn, I didn't mean to reply to my own post. Anyway, I have managed to install WinSCP, but where is the file located? I found a ntp.conf, but it isn't the same as the one that I tried to edit in ntpmerlin > nano.
If somebody can tell me where to find it and what to edit, I'll give it a try.
TIA, jts

 

[Jack Yaz]

Darn, I didn't mean to reply to my own post. Anyway, I have managed to install WinSCP, but where is the file located? I found a ntp.conf, but it isn't the same as the one that I tried to edit in ntpmerlin > nano.
If somebody can tell me where to find it and what to edit, I'll give it a try.
TIA, jts

Full path to active ntp.conf should be shown in the header for ntpmerlin

 

[JT Strickland]

Full path to active ntp.conf should be shown in the header for ntpmerlin

Wow, that was too easy. I don't know how I missed that. I should have used some different criteria in my search. I try not to bother you guys unless I am stuck.
thanks a bunch.

 

[JT Strickland]

Here is a simple yet effective ntp.conf
Assumptions:

• Router LAN interface is br0
• NTP pool time.cloudflare.com is closer to you than pool.ntp.org
• Occasionally you will download the leap seconds list

#
logfile /opt/var/spool/ntp/ntp.log
driftfile /opt/var/spool/ntp/ntp.drift
leapfile /opt/var/spool/ntp/leap-seconds.list # https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list
#
restrict default limited kod nomodify notrap nopeer noquery # restrictive default IPv4
restrict -6 default limited kod nomodify notrap nopeer noquery # restrictive default IPv6
restrict source nomodify notrap noquery # required for pool directive if using restrictive default permissions
restrict 127.0.0.1 # permissive localhost IPv4
restrict -6 ::1 # permissive localhost IPv6
#
interface ignore wildcard
interface listen br0
#
pool time.cloudflare.com
#

Thanks, I replaced the default file contents with the contents of this one, # and all.
The line for "disable auth stats" wasn't in yours so I left it out.
There are some of the system logs that are different, but I think it is working. If I don't have any issues with it, I will leave it alone.

Jun 29 16:27:47 RT-AC86U-8F38 ntpMerlin: Restarting ntpd...
Jun 29 16:27:47 RT-AC86U-8F38 S77ntpd: Waiting for NTP to sync before starting...
Jun 29 16:27:48 RT-AC86U-8F38 ntpd[28311]: ntpd 4.2.8p13@1.3847-o Mon Mar 23 13:21:49 UTC 2020 (1): Starting
Jun 29 16:27:48 RT-AC86U-8F38 ntpd[28311]: Command line: ntpd -c /opt/share/ntpmerlin.d/ntp.conf -g
Jun 29 16:27:48 RT-AC86U-8F38 ntpd[28316]: proto: precision = 0.200 usec (-22)
Jun 29 16:27:48 RT-AC86U-8F38 ntpd[28316]: basedate set to 2020-03-11
Jun 29 16:27:48 RT-AC86U-8F38 ntpd[28316]: gps base set to 2020-03-15 (week 2097)
Jun 29 16:27:48 RT-AC86U-8F38 ntpd[28316]: switching logging to file /opt/var/spool/ntp/ntp.log
Jun 29 16:27:48 RT-AC86U-8F38 jtstrickland: Started ntpd from .

 

[EmeraldDeer]

Thanks, I replaced the default file contents with the contents of this one, # and all.
The line for "disable auth stats" wasn't in yours so I left it out.
There are some of the system logs that are different, but I think it is working. If I don't have any issues with it, I will leave it alone.

Jun 29 16:27:47 RT-AC86U-8F38 ntpMerlin: Restarting ntpd...
Jun 29 16:27:47 RT-AC86U-8F38 S77ntpd: Waiting for NTP to sync before starting...
Jun 29 16:27:48 RT-AC86U-8F38 ntpd[28311]: ntpd 4.2.8p13@1.3847-o Mon Mar 23 13:21:49 UTC 2020 (1): Starting
Jun 29 16:27:48 RT-AC86U-8F38 ntpd[28311]: Command line: ntpd -c /opt/share/ntpmerlin.d/ntp.conf -g
Jun 29 16:27:48 RT-AC86U-8F38 ntpd[28316]: proto: precision = 0.200 usec (-22)
Jun 29 16:27:48 RT-AC86U-8F38 ntpd[28316]: basedate set to 2020-03-11
Jun 29 16:27:48 RT-AC86U-8F38 ntpd[28316]: gps base set to 2020-03-15 (week 2097)
Jun 29 16:27:48 RT-AC86U-8F38 ntpd[28316]: switching logging to file /opt/var/spool/ntp/ntp.log
Jun 29 16:27:48 RT-AC86U-8F38 jtstrickland: Started ntpd from .

Check it with "ntpq -p"

# ntpq -p
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
+LaptopPuget     .GPS.            1 u   28   64  377    0.713   -0.815   0.616
*LeoNTP          .GPS.            1 u    6    8  377    0.568   -0.076   0.053
 time.cloudflare .POOL.          16 p    -   64    0    0.000    0.000   0.000
+time.cloudflare 10.106.8.5       3 u    4   64  377    5.531    0.658   4.766
-time.cloudflare 10.106.8.5       3 u   31   64  377    8.828    2.203   0.717
-time.cloudflare 10.106.8.5       3 u   19   64  377    9.149    2.432   1.867
-time.cloudflare 10.106.8.5       3 u   27   64  377    9.161    2.450   1.190

 

[JT Strickland]

looks good I reckon? BTW, I am in rural Mississippi

ASUSWRT-Merlin RT-AC86U 384.18_0 Sun Jun 28 18:00:47 UTC 2020
<username>@RT-AC86U-8F38:/tmp/home/root# ntpq -p
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
 time.cloudflare .POOL.          16 p    -   64    0    0.000    0.000   0.000
+time.cloudflare 10.115.8.113     3 u   72  256  377   25.895   -0.275   0.955
*time.cloudflare 10.14.8.68       3 u   96  256  377   25.635    0.034   0.840
<username>@RT-AC86U-8F38:/tmp/home/root#

 

[EmeraldDeer]

looks good I reckon? BTW, I am in rural Mississippi

ASUSWRT-Merlin RT-AC86U 384.18_0 Sun Jun 28 18:00:47 UTC 2020
<username>@RT-AC86U-8F38:/tmp/home/root# ntpq -p
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
 time.cloudflare .POOL.          16 p    -   64    0    0.000    0.000   0.000
+time.cloudflare 10.115.8.113     3 u   72  256  377   25.895   -0.275   0.955
*time.cloudflare 10.14.8.68       3 u   96  256  377   25.635    0.034   0.840
<username>@RT-AC86U-8F38:/tmp/home/root#

Looks very good!

 

[dsancho]

What does your ntp.conf look like?
WHat does

ps | grep ntp

show?

Hi,

Here my /opt/share/ntpmerlin.d/ntp.conf

# replace the following time servers to the ones close to you
# see http://support.ntp.org/bin/view/Servers/NTPPoolServers
server 0.fr.pool.ntp.org iburst
server 1.fr.pool.ntp.org iburst
server 2.fr.pool.ntp.org iburst
server 3.fr.pool.ntp.org iburst

interface ignore wildcard
interface listen br0

logfile /opt/var/spool/ntp/ntp.log
driftfile /opt/var/spool/ntp/ntp.drift
#leapfile /opt/var/spool/ntp/leap-seconds.list # https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list

restrict default limited kod nomodify notrap nopeer noquery # restrictive default IPv4
restrict -6 default limited kod nomodify notrap nopeer noquery # restrictive default IPv6
restrict source nomodify notrap noquery # required for pool directive if using restrictive default permissions
restrict 127.0.0.1 # permissive localhost IPv4
restrict -6 ::1 # permissive localhost IPv6

disable auth stats

Result of ps | grep ntp

15541 homerout 73156 S    ntpd -c /opt/share/ntpmerlin.d/ntp.conf -g

And result of ntpq -p

     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
+ntp19.kashra-se 192.168.100.15   2 u   11   64  377   42.356   -1.077   7.684
*ip139.ip-5-196- 145.238.203.14   2 u    9   64  377   40.582    0.245   2.911
+ks3370497.kimsu 150.214.94.5     2 u    7   64  377   39.986    1.445   8.761
+eva.aplu.fr     84.199.11.211    2 u   12   64  377   45.846   -0.071  10.207

ntpMerlin Option "redirect of all NTP traffic to ntpMerlin" is enabled
Asus FW option "Enable local NTP server" is disabled

Something wrong ?

Thanks

 

[JT Strickland]

Looks very good!

My stats tightened up the last couple of days after revising the config file.

 

[jorgsmash]

Hey guys. I installed this a few days ago via amtm. In the options menu I set
"2. Toggle redirect of all NTP traffic to ntpMerlin" to 'Enabled'

Do I still need to configure anything in the WebUI? There are ntp settings under Administration - System, but they did not get changed by the ntpMerlin install script. I assume these are different and not to be touched? And the graphs are what tell me if it is enabled and working? Is there a way to see logs of ntp queries by the devices on my LAN and see that they are being answered by my router via ntpMerlin?

 

[Vexira]

Hey guys. I installed this a few days ago via amtm. In the options menu I set
"2. Toggle redirect of all NTP traffic to ntpMerlin" to 'Enabled'

Do I still need to configure anything in the WebUI? There are ntp settings under Administration - System, but they did not get changed by the ntpMerlin install script. I assume these are different and not to be touched? And the graphs are what tell me if it is enabled and working? Is there a way to see logs of ntp queries by the devices on my LAN and see that they are being answered by my router via ntpMerlin?

That's it should be fine after that.

 

[Makaveli]

For the Canadians on the server which NTP server are you using?

Here is my NTP conf

# replace the following time servers to the ones close to you
# see http://support.ntp.org/bin/view/Servers/NTPPoolServers
server 0.ca.pool.ntp.org iburst
server 1.ca.pool.ntp.org iburst
server 2.ca.pool.ntp.org iburst
server 3.ca.pool.ntp.org iburst

interface ignore wildcard
interface listen br0

logfile /opt/var/spool/ntp/ntp.log
driftfile /opt/var/spool/ntp/ntp.drift
#leapfile /opt/var/spool/ntp/leap-seconds.list # https://hpiers.obspm.fr/iers/bul/bulc/ntp/lea>

restrict default limited kod nomodify notrap nopeer noquery # restrictive default IPv4
restrict -6 default limited kod nomodify notrap nopeer noquery # restrictive default IPv6
restrict source nomodify notrap noquery # required for pool directive if using restrictive def>
restrict 127.0.0.1 # permissive localhost IPv4
restrict -6 ::1 # permissive localhost IPv6

disable auth stats

NTPQ -p

  remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
 68-69-221-61.nb .ROSS.           1 u 209m 1024    0   34.984   -1.854   0.000
+198.27.76.102 ( 206.108.0.131    2 u 1001 1024  377    9.047   -0.166   0.811
+switch.ca       213.251.128.249  2 u  881 1024  377    8.873   -1.021   0.712
*s216-232-132-31 .PPS.            1 u  458 1024  377   59.772    0.493   0.184

 

[CriticJay]

Makaveli,

I'm a Teksavvy/Rogers Cable user in the GTA. Here's my /jffs/addons/ntpmerlin.d/ntp.conf :

# replace the following time servers to the ones close to you
# see http://support.ntp.org/bin/view/Servers/NTPPoolServers
# server 0.pool.ntp.org iburst
# server 1.pool.ntp.org iburst
# server 2.pool.ntp.org iburst
# server 3.pool.ntp.org iburst

pool -4 time.cloudflare.com iburst

interface ignore wildcard
interface listen br0

logfile /opt/var/spool/ntp/ntp.log
driftfile /opt/var/spool/ntp/ntp.drift
leapfile /opt/var/spool/ntp/leap-seconds.list # https://hpiers.obspm.fr/iers/bul/bulc/ntp/leap-seconds.list

restrict default limited kod nomodify notrap nopeer noquery # restrictive default IPv4
restrict -6 default limited kod nomodify notrap nopeer noquery # restrictive default IPv6
restrict source nomodify notrap noquery # required for pool directive if using restrictive default permissions
restrict 127.0.0.1 # permissive localhost IPv4
restrict -6 ::1 # permissive localhost IPv6

disable auth stats

notes:

i use pool -4 so that it only connects to cloudflare NTP on IPv4. I have disabled IPv6 on my connection. But ntp will still try to connect to the server on IPv6 once every minute otherwise.

in order to use the "leapfile" command/directive you'll need to download a copy of the leapfile to that file location