Every time I sniff my network with Pcapdroid I see these connections to pool.ntp.org. Every time. Is this normal?
Screenshot:
https://www1.xup.in/exec/ximg.php?fid=68245451
Are these connections normal?
loxap34792 those are NTP requests to get/sync time from NTP servers, so yes this is perfectly normal.
loxap34792 Every time I sniff my network with Pcapdroid I see these connections to pool.ntp.org.
That is not on the list of services contacted by the OS, so that traffic might be coming from an installed app.
That said, NTP traffic is not particularly threatening in general.
- Edited
de0u That said, NTP traffic is not particularly threatening in general.
Well, PCAPDroid shows "NTP" because the port used is 123. Granted the requests are to pool.ntp.org but one must be cautious in plainly assuming the traffic is DNS if on port 53 / NTP if on port 123 / HTTPS if on port 443 and so on...