Packet Tuesday - NTP
We will be inspecting NTPv4 requests and responses and talk a bit about how NTP is implemented.
Notes:
SEC503 Network Monitoring and Threat Detection In-Depth: https://www.sans.org/u/1obN
RFCs:
RFC 5905: NTPv4 https://www.rfc-editor.org/rfc/rfc5905
Packet: https://packettuesday.com/pcaps/ntp.pcap