SSH CLI Data is wrong. Shows Sat May 5 01:07:40 DST 2018.

SirLoinOfSteak · Oct 17, 2020

Hello,

I've been scouring the forums looking for a hint as to why the date on the CLI is set. I've come across a few posts:

[SOLVED] Time synchronization problem

Hi all! Don't know if it's related to the new FW-release but after upgrading to 384.14 on my AC68U I have difficulties with the time synchronization which breaks TLS among other things. Surfing still works but services relying on time sync will not. After reboot or restart (power off/on)...

www.snbforums.com

and you tube suggestions:

Do provide solutions but via startup scripts or changing DST settings in etc.

But why does it just not work via the GUI? I can click Apply on the below and the time and date will be fixed but why doesn't the router automatically do this a boot time? How to permanently set it using UI settings? The NTP servers I have listed below are on the internal LAN. They work and time is synced correctly on other internal devices on my network without issue.

Logs:

https://www.microdevsys.com/WordPressDownloads/asus-merlin.log

dave14305 · Oct 17, 2020

Do your local NTP servers have GPS? Since you intercept NTP at the router they wouldn’t be able to get to an external time source. Or how do they connect to the router (wired or wireless)? Maybe WiFi isn’t fully ready when the router tries to sync time on the LAN.

Also worth noting since we’re discussing accurate time that your timezone settings for EST are reversed and it’s the 1st Sunday in November.

SirLoinOfSteak · Oct 17, 2020

The NTP servers do not have GPS. The NTP servers are VM's running FreeIPA that also act as NTP servers. The IP's are Cluster / VIP. These IPA VM's in turn sync to pool.ntp.org and act as internal time servers for my home devices. Recommended practice.

That was my attempt at trying various options to see what works. The router is wired directly to my local LAN where I run OSPF to provide automatic routing for multiple VLAN's. OSPF works just fine here, so does OpenVPN. I can ping the VLAN's just fine. However, OpenVPN only works as long as the time is right. So here we are.

If NTP does try to set the time before any of the network ports are up then how to force it to retry later on?

The DST change was me pulling at straws at that point. The video link suggested that due to a bug that 'might' work. Of course, it didn't really work. Here are my current settings:

At the moment when I apply the settings this is what pops up in the logs:

Code:

May  5 00:16:28 syslogd started: BusyBox v1.25.1
May  5 00:16:28 kernel: klogd started: BusyBox v1.25.1 (2020-08-14 15:17:43 EDT)
May  5 00:16:28 dropbear[2890]: Running in background
Oct 17 12:15:02 kernel: nf_conntrack_rtsp v0.6.21 loading
Oct 17 12:15:02 kernel: nf_nat_rtsp v0.6.21 loading
Oct 17 12:15:02 admin:  sh /opt/S50asuslighttpd.1 firewall-start
Oct 17 12:15:03 admin:  sh /opt/S50downloadmaster.1 firewall-start
Oct 17 12:15:04 admin:  sh /opt/S50quagga.1 firewall-start
Oct 17 12:15:04 dnsmasq[247]: exiting on receipt of SIGTERM
Oct 17 12:15:04 dnsmasq[3193]: started, version 2.82-34-gb309cca cachesize 1500
Oct 17 12:15:04 dnsmasq[3193]: asynchronous logging enabled, queue limit is 5 messages
Oct 17 12:15:04 dnsmasq[3193]: using only locally-known addresses for domain nix.mds.xyz

Oct 17 12:15:04 dnsmasq[3193]: read /etc/hos t - 6 addresses

Oct 17 12:15:04 dnsmasq[3193]: using nameserver 192.168.0.46#53
Oct 17 12:15:04 dnsmasq[3193]: using nameserver 192.168.0.224#53
Oct 17 12:15:04 dnsmasq[3193]: using only locally-known addresses for domain nix.mds.xyz

Oct 17 12:15:07 kernel: tun: Universal TUN/TAP device driver, 1.6
Oct 17 12:15:07 kernel: tun: (C) 1999-2004 Max Krasnyansky <maxk AT qualcomm DOT com>
Oct 17 12:15:10 ovpn-server1[3380]: WARNING: Using --management on a TCP port WITHOUT passwords is STRONGLY discouraged and considered insecure
Oct 17 12:15:10 ovpn-server1[3380]: OpenVPN 2.4.9 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Aug 14 2020



Oct 17 12:15:10 ovpn-server1[3380]: library versions: OpenSSL 1.1.1g  21 Apr 2020, LZO 2.08
Oct 17 12:15:10 ovpn-server1[3381]: MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:14
Oct 17 12:15:10 ovpn-server1[3381]: NOTE: your local LAN uses the extremely common subnet address 192.168.0.x or 192.168.1.x.  Be aware that this might create routing conflicts if you connect to the VPN server from public locations such as internet cafes that use the same subnet.
Oct 17 12:15:10 ovpn-server1[3381]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Oct 17 12:15:11 ovpn-server1[3381]: Diffie-Hellman initialized with 2048 bit key
Oct 17 12:15:11 ovpn-server1[3381]: Outgoing Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Oct 17 12:15:11 ovpn-server1[3381]: Incoming Control Channel Authentication: Using 256 bit message hash 'SHA256' for HMAC authentication
Oct 17 12:15:11 ovpn-server1[3381]: TUN/TAP device tun21 opened
Oct 17 12:15:11 ovpn-server1[3381]: TUN/TAP TX queue length set to 1000
Oct 17 12:15:11 ovpn-server1[3381]: /sbin/ifconfig tun21 10.1.1.1 netmask 255.255.255.0 mtu 1500 broadcast 10.1.1.255
Oct 17 12:15:11 ovpn-server1[3381]: ovpn-up 1 server tun21 1500 1624 10.1.1.1 255.255.255.0 init
Oct 17 12:15:11 ovpn-server1[3381]: Could not determine IPv4/IPv6 protocol. Using AF_INET6
Oct 17 12:15:11 ovpn-server1[3381]: Socket Buffers: R=[87380->87380] S=[16384->16384]
Oct 17 12:15:11 ovpn-server1[3381]: setsockopt(IPV6_V6ONLY=0)
Oct 17 12:15:11 ovpn-server1[3381]: Listening for incoming TCP connection on [AF_INET6][undef]:47888
Oct 17 12:15:11 ovpn-server1[3381]: TCPv6_SERVER link local (bound): [AF_INET6][undef]:47888
Oct 17 12:15:11 ovpn-server1[3381]: TCPv6_SERVER link remote: [AF_UNSPEC]
Oct 17 12:15:11 ovpn-server1[3381]: MULTI: multi_init called, r=256 v=256
Oct 17 12:15:11 ovpn-server1[3381]: IFCONFIG POOL: base=10.1.1.2 size=252, ipv6=0
Oct 17 12:15:11 ovpn-server1[3381]: IFCONFIG POOL LIST
Oct 17 12:15:11 ovpn-server1[3381]: MULTI: TCP INIT maxclients=1024 maxevents=1028
Oct 17 12:15:11 ovpn-server1[3381]: Initialization Sequence Completed
Oct 17 12:15:32 crond[255]: time disparity of 1290959 minutes detected

So while writing this, I decided to enable the local NTP server. The idea is that when the router starts, even though the network isn't there yet, the service should be able to hang around for a while. Might not if the time difference is too great but let's see.

Code:

admin@ASUS-MERLIN-INTERNET:/tmp/home/root# ps|grep ntp
3758 admin     1436 S    /usr/sbin/ntp -t -S /sbin/ntpd_synced -p 192.168.0.46 -p 192.168.0.51 -l -I br0
4117 admin     1428 R    grep ntp
admin@ASUS-MERLIN-INTERNET:/tmp/home/root#

Rebooted the router. And sure enough, the NTPD daemon simply fails to start:

Code:

admin@ASUS-MERLIN-INTERNET:/tmp/home/root# ps|grep ntp
2146 admin     1428 S    grep ntp
admin@ASUS-MERLIN-INTERNET:/tmp/home/root#

So whatever is causing sync issues is really impacting services from starting up. Hence the problem, I think. And is where I'm at right now.

I have some flexibility here as I'm building out the router to replace my existing one.

Thx,

dave14305 · Oct 17, 2020

So what happens if you run ntp directly?

Code:

/usr/sbin/ntp -d -n -t -S /sbin/ntpd_synced -p 192.168.0.46 -p 192.168.0.51

This command shouldn’t daemonize, so you can see the results.

Also how is DNS setup in your network? Where does the router point to for WAN DNS?

SirLoinOfSteak · Oct 17, 2020

Sorry for the multiple edits. Ran into this issue here:

FYI: Issue with "Oops! We ran into some problems. Please try again later. More error details may be in the browser console.

While posting: https://www.snbforums.com/threads/ssh-cli-data-is-wrong-shows-sat-may-5-01-07-40-dst-2018.67032/ Ran into an issue when I tried to include a part of the logs. After trying a few things, I noticed that adding space to "hosts", such that it reads "host s" fixes the issue: Oct...

www.snbforums.com

So it took a bit of time to get the post accepted.

SirLoinOfSteak · Oct 17, 2020

It works and syncs time as expected:

Code:

admin@ASUS-MERLIN-INTERNET:/tmp/home/root# /usr/sbin/ntp -d -n -t -S /sbin/ntpd_synced -p 192.168.0.46 -p 192.168.0.51
ntp: sending query to 192.168.0.51
ntp: sending query to 192.168.0.46
ntp: reply from 192.168.0.51: offset:+77458854.782095 delay:0.007057 status:0x24 strat:4 refid:0x2c00a8c0 rootdelay:0.023880 reach:0x01
ntp: reply from 192.168.0.46: offset:+77458854.786671 delay:0.007215 status:0x24 strat:3 refid:0x460206d8 rootdelay:0.112444 reach:0x01
ntp: sending query to 192.168.0.51
ntp: sending query to 192.168.0.46
ntp: reply from 192.168.0.51: offset:+77458854.778893 delay:0.000479 status:0x24 strat:4 refid:0x2c00a8c0 rootdelay:0.023880 reach:0x03
ntp: setting time to 2020-10-17 13:15:51.990308 (offset +77458854.778893s)
ntp: executing '/sbin/ntpd_synced step'


ntp: sending query to 192.168.0.46
ntp: reply from 192.168.0.46: offset:+0.004941 delay:0.000546 status:0x24 strat:3 refid:0x460206d8 rootdelay:0.112444 reach:0x05
ntp: sending query to 192.168.0.51
ntp: reply from 192.168.0.51: offset:+0.000396 delay:0.000416 status:0x24 strat:4 refid:0x2c00a8c0 rootdelay:0.023880 reach:0x07
ntp: executing '/sbin/ntpd_synced stratum'

There is no WAN IP on this device yet. Just building it out so it is only locally facing, not web facing. The goal is to plug it in as the WAN facing router in the future. Just building it out. So all local IP's for now.

dave14305 · Oct 17, 2020

SirLoinOfSteak said:
There is no WAN IP on this device yet. Just building it out so it is only locally facing, not web facing. The goal is to plug it in as the WAN facing router in the future. Just building it out. So all local IP's for now.

What side of the Asus firewall are the NTP and DNS servers? You have NAT enabled, so are your 192.168.0 subnet servers considered LAN or WAN to the Asus?

I also might theorize that the Network Monitoring options might be a bad idea right now, depending how this is setup during the build out. Same for the redirect notice option.

Or is the Asus plugged in LAN-to-LAN? What’s the Asus routing table look like?

SirLoinOfSteak · Oct 17, 2020

NTP is outside the Asus router's F/W. 192.168.0.X is considered LAN to the Asus. In other words, there is no cable in the WAN port right now. Only one ethernet port is connected right now. And that port is on the 192.168.0.X VLAN.

As for the monitoring, it's mostly all default options if it's enabled. Which specific monitoring options are you thinking I should try to disable? Can you clarify on more on the redirect notice option?

Asus is LAN-to-LAN .

Code:

admin@ASUS-MERLIN-INTERNET:/tmp/home/root# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
123.123.123.123  192.168.0.6     255.255.255.224 UG    20     0        0 br0
10.2.0.0        192.168.0.1     255.255.255.0   UG    11     0        0 br0
10.0.0.0        192.168.0.1     255.255.255.0   UG    11     0        0 br0
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 br0
192.168.45.0    192.168.0.6     255.255.255.0   UG    20     0        0 br0
10.3.0.0        192.168.0.1     255.255.255.0   UG    11     0        0 br0
10.1.0.0        192.168.0.1     255.255.255.0   UG    11     0        0 br0
10.1.1.0        0.0.0.0         255.255.255.0   U     0      0        0 tun21
192.168.75.0    192.168.0.6     255.255.255.0   UG    20     0        0 br0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         192.168.0.6     0.0.0.0         UG    10     0        0 br0
admin@ASUS-MERLIN-INTERNET:/tmp/home/root# vtysh

Hello, this is Quagga (version 0.99.16).
Copyright 1996-2005 Kunihiro Ishiguro, et al.

ASUS-MERLIN-INTERNET# sh ip ospf route
============ OSPF network routing table ============
N    10.0.0.0/24           [11] area: 0.0.0.0
                           via 192.168.0.1, br0
N    10.1.0.0/24           [11] area: 0.0.0.0
                           via 192.168.0.1, br0
N    10.2.0.0/24           [11] area: 0.0.0.0
                           via 192.168.0.1, br0
N    10.3.0.0/24           [11] area: 0.0.0.0
                           via 192.168.0.1, br0
N    192.168.0.0/24        [10] area: 0.0.0.0
                           directly attached to br0

============ OSPF router routing table =============
R    192.168.0.6           [10] area: 0.0.0.0, ASBR
                           via 192.168.0.6, br0

============ OSPF external routing table ===========
N E2 0.0.0.0/0             [10/10] tag: 0
                           via 192.168.0.6, br0
N E2 10.1.1.0/24           [10/20] tag: 0
                           via 192.168.0.6, br0
N E2 123.123.123.123/27     [10/20] tag: 0
                           via 192.168.0.6, br0
N E2 192.168.45.0/24       [10/20] tag: 0
                           via 192.168.0.6, br0
N E2 192.168.75.0/24       [10/20] tag: 0
                           via 192.168.0.6, br0

ASUS-MERLIN-INTERNET# sh ip ospf neighbor

    Neighbor ID Pri State           Dead Time Address         Interface            RXmtL RqstL DBsmL
192.168.0.1       5 Full/Backup       38.375s 192.168.0.1     br0:192.168.0.16         0     0     0
192.168.0.3      10 Full/DR           34.141s 192.168.0.3     br0:192.168.0.16         0     0     0
192.168.0.6       1 2-Way/DROther     32.365s 192.168.0.6     br0:192.168.0.16         0     0     0
192.168.0.7       1 2-Way/DROther     37.216s 192.168.0.7     br0:192.168.0.16         0     0     0
ASUS-MERLIN-INTERNET# quit
admin@ASUS-MERLIN-INTERNET:/tmp/home/root# ping 10.3.0.8
PING 10.3.0.8 (10.3.0.8): 56 data bytes
64 bytes from 10.3.0.8: seq=0 ttl=63 time=11.419 ms
64 bytes from 10.3.0.8: seq=1 ttl=63 time=0.490 ms
^C
--- 10.3.0.8 ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 0.490/5.954/11.419 ms

admin@ASUS-MERLIN-INTERNET:/tmp/home/root#
admin@ASUS-MERLIN-INTERNET:/tmp/home/root# ping 10.0.0.1
PING 10.0.0.1 (10.0.0.1): 56 data bytes
64 bytes from 10.0.0.1: seq=0 ttl=255 time=2.748 ms
^C
--- 10.0.0.1 ping statistics ---
1 packets transmitted, 1 packets received, 0% packet loss
round-trip min/avg/max = 2.748/2.748/2.748 ms

admin@ASUS-MERLIN-INTERNET:/tmp/home/root#

Thank you!

SirLoinOfSteak · Oct 17, 2020

For now, I put in a workaround to ensure the NTP daemon starts up. Created the script /jffs/scripts/init-start to see if NTPD would start before the network or other services come up given this comment:

----------
https://github.com/RMerl/asuswrt-merlin.ng/wiki/User-scripts
init-start
Called right after JFFS got mounted, and before any of the services get started. This is the earliest part of the boot process where you can insert something.Then NTP should not load.
----------

Shell script:

Code:

admin@ASUS-MERLIN-INTERNET:/jffs/scripts# cat /jffs/scripts/init-start
#!/bin/sh
NTP0=$(nvram show 2>/dev/null | awk -F'=' '/ntp_server0/{ print $2 }')
NTP1=$(nvram show 2>/dev/null | awk -F'=' '/ntp_server1/{ print $2 }')
PSV=$(ps|grep -Ei "ntpd_[s]ynced"|wc -l)

echo "Using the following NTP servers: NTP0 ($NTP0) and NTP1 ($NTP1).  Number of running NTP servers right now is $PSV";

if [[ $NTP0 != "" && $NTP1 != "" && $PSV == 0 ]]; then
        /usr/sbin/ntp -d -n -t -S /sbin/ntpd_synced -p $NTP0 -p $NTP1 &
        if $? == 0; then
                echo "SUCCESS: Started the NTPD server."
        else
                echo "FAILED to start the NTPD server.  Non 0 exit code detected."
        fi
else
        echo "ERROR:  Either NTP0($NTP0) or NTP1($NTP1) was empty.  Or NTPD was already started.  No action taken.";
fi

netstat -pnltu > /jffs/netstat.out
ps > /jffs/ps.out
ps|grep ntp > /jffs/ps-ntp.out
ip a > /jffs/ip-a.out
ifconfig -a /jffs/ifconfig-a.out
admin@ASUS-MERLIN-INTERNET:/jffs/scripts#

NTPD did indeed start up just fine.

Code:

admin@ASUS-MERLIN-INTERNET:/tmp/home/root# cd /jffs/scripts/
admin@ASUS-MERLIN-INTERNET:/jffs/scripts# ls -altri
   9711 -rw-rw-rw-    1 admin    root          4422 May  5  2018 ps-t.out
   8504 drwxr-xr-x    2 admin    root             0 May  5  2018 .
   9640 -rwxr-x---    1 admin    root           857 May  5  2018 init-start
      1 drwxr-xr-x   10 admin    root             0 Oct 17 21:41 ..
admin@ASUS-MERLIN-INTERNET:/jffs/scripts# cd ..
admin@ASUS-MERLIN-INTERNET:/jffs# ls -altri
   9691 -rw-rw-rw-    1 admin    root          1393 May  5  2018 ps.out
   9716 -rw-rw-rw-    1 admin    root            79 May  5  2018 ps-ntp.out
   9690 -rw-rw-rw-    1 admin    root           144 May  5  2018 netstat.out
   9692 -rw-rw-rw-    1 admin    root           978 May  5  2018 ip-a.out
   8508 drwxrwxrwx    4 admin    root             0 May  5  2018 .sys
   8506 drwxr-xr-x    2 admin    root             0 May  5  2018 addons
   8515 -rw-rw-rw-    1 admin    root          2256 May  5  2018 cert.tgz
   8504 drwxr-xr-x    2 admin    root             0 May  5  2018 scripts
   8505 drwxr-xr-x    3 admin    root             0 May  5  2018 configs
   8678 drwx------    3 admin    root             0 May  5  2018 openvpn
    121 drwxr-xr-x   17 admin    root           320 Aug 14 15:23 ..
   8507 drw-------    2 admin    root             0 Oct 11 11:26 .cert
   8558 drwxr-xr-x    2 admin    root             0 Oct 11 12:28 usericon
   8516 -rw-r--r--    1 admin    root          6555 Oct 17 21:06 nmp_cl_json.js
   9731 -rw-rw-rw-    1 admin    root        262146 Oct 17 21:41 syslog.log-1
   9730 -rw-rw-rw-    1 admin    root        253655 Oct 17 21:41 syslog.log
      1 drwxr-xr-x   10 admin    root             0 Oct 17 21:41 .
admin@ASUS-MERLIN-INTERNET:/jffs# cat ps-ntp.out
  131 admin     1416 S    /usr/sbin/ntp -d -n -t -S /sbin/ntpd_synced -p 192.1
admin@ASUS-MERLIN-INTERNET:/jffs#
admin@ASUS-MERLIN-INTERNET:/jffs#


admin@ASUS-MERLIN-INTERNET:/jffs/scripts# cat ../ps.out
  PID USER       VSZ STAT COMMAND
    1 admin     5644 S    /sbin/preinit
    2 admin        0 SW   [kthreadd]
    3 admin        0 SW   [ksoftirqd/0]
    4 admin        0 SW   [kworker/0:0]
    5 admin        0 SW   [kworker/u:0]
    6 admin        0 SW   [migration/0]
    7 admin        0 SW   [migration/1]
    8 admin        0 SW   [kworker/1:0]
    9 admin        0 SW   [ksoftirqd/1]
   10 admin        0 SW<  [khelper]
   11 admin        0 SW   [sync_supers]
   12 admin        0 SW   [bdi-default]
   13 admin        0 SW<  [kblockd]
   14 admin        0 SW   [kswapd0]
   15 admin        0 SW   [fsnotify_mark]
   16 admin        0 SW<  [crypto]
   24 admin        0 SW   [mtdblock0]
   25 admin        0 SW   [mtdblock1]
   26 admin        0 SW   [mtdblock2]
   27 admin        0 SW   [mtdblock3]
   28 admin        0 SW   [kworker/u:1]
   35 admin        0 SW   [kworker/0:1]
   36 admin        0 SW   [kworker/1:1]
   37 admin        0 SW   [mtdblock4]
   38 admin        0 SW   [mtdblock5]
   40 admin      664 S    hotplug2 --persistent --no-coldplug
  107 admin     5636 S    console
  113 admin        0 SWN  [jffs2_gcd_mtd4]
  116 admin     1420 S    {init-start} /bin/sh /jffs/scripts/init-start
  129 admin     1424 R    cp /jffs/syslog.log /jffs/syslog.log-1 /tmp
  131 admin     1416 S    /usr/sbin/ntp -d -n -t -S /sbin/ntpd_synced -p 192.1
  134 admin     1420 R    ps
admin@ASUS-MERLIN-INTERNET:/jffs/scripts#


admin@ASUS-MERLIN-INTERNET:/jffs#
admin@ASUS-MERLIN-INTERNET:/jffs# cat netstat.out
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
admin@ASUS-MERLIN-INTERNET:/jffs# cat ip-a.out
1: lo: <LOOPBACK> mtu 16436 qdisc noop state DOWN
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: ifb0: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN qlen 32
    link/ether f6:d0:90:e2:1c:2d brd ff:ff:ff:ff:ff:ff
3: ifb1: <BROADCAST,NOARP> mtu 1500 qdisc noop state DOWN qlen 32
    link/ether f6:4c:c2:5f:41:05 brd ff:ff:ff:ff:ff:ff
4: aux0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether ac:9e:17:6d:7d:70 brd ff:ff:ff:ff:ff:ff
5: eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether ac:9e:17:6d:7d:70 brd ff:ff:ff:ff:ff:ff
6: dpsta: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN
    link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
7: eth1: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether ac:9e:17:6d:7d:70 brd ff:ff:ff:ff:ff:ff
8: eth2: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
    link/ether ac:9e:17:6d:7d:74 brd ff:ff:ff:ff:ff:ff
admin@ASUS-MERLIN-INTERNET:/jffs# ps | grep ntp
  131 admin     1436 S    /usr/sbin/ntp -d -n -t -S /sbin/ntpd_synced -p 192.168.0.46 -p 192.168.0.51
5787 admin     1428 S    grep ntp
admin@ASUS-MERLIN-INTERNET:/jffs#

Thinking the UI settings are not starting NTPD up then. Not sure where to look from here to find startup configs or logs that could give me more clues.

SirLoinOfSteak · Oct 17, 2020

The final PS table once everything is started up:

Code:

admin@ASUS-MERLIN-INTERNET:/jffs#
admin@ASUS-MERLIN-INTERNET:/jffs# cat scripts/ps-t.out
  PID USER       VSZ STAT COMMAND
    1 admin     5652 S    /sbin/preinit
    2 admin        0 SW   [kthreadd]
    3 admin        0 SW   [ksoftirqd/0]
    4 admin        0 SW   [kworker/0:0]
    5 admin        0 SW   [kworker/u:0]
    6 admin        0 SW   [migration/0]
    7 admin        0 SW   [migration/1]
    8 admin        0 SW   [kworker/1:0]
    9 admin        0 SW   [ksoftirqd/1]
   10 admin        0 SW<  [khelper]
   11 admin        0 SW   [sync_supers]
   12 admin        0 SW   [bdi-default]
   13 admin        0 SW<  [kblockd]
   14 admin        0 SW   [kswapd0]
   15 admin        0 SW   [fsnotify_mark]
   16 admin        0 SW<  [crypto]
   24 admin        0 SW   [mtdblock0]
   25 admin        0 SW   [mtdblock1]
   26 admin        0 SW   [mtdblock2]
   27 admin        0 SW   [mtdblock3]
   28 admin        0 SW   [kworker/u:1]
   35 admin        0 SW   [kworker/0:1]
   36 admin        0 SW   [kworker/1:1]
   37 admin        0 SW   [mtdblock4]
   38 admin        0 SW   [mtdblock5]
   40 admin      668 S    hotplug2 --persistent --no-coldplug
  107 admin     5636 S    console
  113 admin        0 SWN  [jffs2_gcd_mtd4]
  131 admin     1424 S    /usr/sbin/ntp -d -n -t -S /sbin/ntpd_synced -p 192.168.0.46 -p 192.168.0.51
  135 admin     1416 S    /sbin/syslogd -m 0 -S -O /tmp/syslog.log -s 256 -l 7
  137 admin     1416 S    /sbin/klogd -c 5
  205 admin     5640 S    /sbin/wanduck
  210 admin     4940 S    nt_monitor
  211 admin     2164 S    protect_srv
  212 admin     5660 S    /sbin/netool
  220 admin     5660 S    /sbin/netool
  221 admin     5660 S    /sbin/netool
  222 admin     1116 S    dropbear -p 50505 -a
  226 admin     2164 S    protect_srv
  227 admin     2164 S    protect_srv
  228 admin     4940 S    nt_monitor
  229 admin     4940 S    nt_monitor
  231 admin     5080 S    nt_center
  234 admin     5080 S    nt_center
  235 admin     5080 S    nt_center
  236 admin     1276 S    /bin/eapd
  238 admin     5640 S    wpsaide
  239 admin     2144 S    /usr/sbin/wlc_nt
  248 admin     1844 S    nas
  253 admin     2272 S    /usr/sbin/wlceventd
  254 admin     4940 S    nt_monitor
  256 admin     1672 S    nt_actMail
  257 admin     1672 S    nt_actMail
  258 admin     1672 S    nt_actMail
  266 admin     1460 S    /usr/sbin/acsd
  269 nobody    3204 S    dnsmasq --log-async
  270 admin     3200 S    dnsmasq --log-async
  277 admin     1420 S    crond -l 9
  278 admin     5920 S    httpds -s -i br0 -p 11443
  279 admin     5920 S    httpd -i br0
  280 admin     1244 S    /usr/sbin/infosvr br0
  282 admin     1244 S    sysstate
  283 admin     5640 S    watchdog
  284 admin     5636 S    check_watchdog
  291 admin     2832 S    rstats
  304 admin     1288 S    lld2d br0
  306 admin     5936 S    networkmap --bootwait
  307 admin     5640 S    disk_monitor
  309 admin     5520 S    mastiff
  310 admin     5640 S    bwdpi_check
  312 admin     5640 S    pctime
  334 admin     1484 S    lldpd -L /usr/sbin/lldpcli -I vlan1,eth1,eth2,wds0.*,wds1.*,wds2.* -s RT-AC68U
  338 nobody    1456 S    lldpd -L /usr/sbin/lldpcli -I vlan1,eth1,eth2,wds0.*,wds1.*,wds2.* -s RT-AC68U
  342 admin     4504 S    cfg_server
  363 admin     5640 S    amas_lib
  382 admin        0 SW   [khubd]
  418 admin     1424 S    /sbin/udhcpc -i vlan2 -p /var/run/udhcpc0.pid -s /tmp/udhcpc -O33 -O249
  429 admin     4504 S    cfg_server
  430 admin     4504 S    cfg_server
  447 admin     5520 S    mastiff
  452 admin     5520 S    mastiff
  453 admin     5520 S    mastiff
  482 admin        0 SW   [scsi_eh_0]
  483 admin        0 SW   [usb-storage]
  527 admin     5640 S    usbled
  528 admin     2456 S    u2ec
  537 admin     1320 S    lpd br0
  539 admin     2456 S    u2ec
  540 admin     2456 S    u2ec
  558 admin        0 SW   [jbd2/sda-8]
  559 admin        0 SW<  [ext4-dio-unwrit]
  602 admin        0 SW   [flush-8:0]
1042 admin     5128 S    ./asus_lighttpd -Df /opt/etc/asus_lighttpd.conf
1852 admin     1172 S    dropbear -p 50505 -a
1859 admin     1440 S    -sh
1946 1000      2516 S    /opt/sbin/zebra -d -A127.0.0.1
1949 1000      2964 S    /opt/sbin/ospfd -d -A127.0.0.1
1957 admin        0 SW   [flush-mtd-unmap]
2074 admin     5804 S    /usr/sbin/nmbd -D -s /etc/smb.conf
2075 admin     6000 S    /usr/sbin/smbd -D -s /etc/smb.conf
2078 admin     1000 S    /usr/sbin/wsdd2 -d -w -i br0 -b sku:RT-AC68U,serial:ac8d249e8c51
2127 admin     1420 R    ps
admin@ASUS-MERLIN-INTERNET:/jffs#

dave14305 · Oct 17, 2020

If your WAN port was configured, I don’t think this would be an issue. Normally ntpd will get started after the WAN comes up, because it assumes it needs to talk to a public NTP server.

rc: start ntpd later in the boot process · RMerl/asuswrt-merlin.ng@a6d339a

ntpd won't daemonize until it has succesfully resolved and contacted a peer. Start it from refresh_ntpc() which gets called after WAN comes up.

github.com

SirLoinOfSteak · Oct 17, 2020

That explains it. Thank you!

SirLoinOfSteak · Oct 18, 2020

The only thing that remains now is that the time is off by 1 hour. Hoping I could verify the locale / zone is set and applied correctly.

The NVRAM settings appear correct however are still off.

Code:

admin@ASUS-MERLIN-INTERNET:/tmp/home/root# nvram show|grep zone
size: 52633 bytes (12903 left)
time_zone_dst=1
time_zone_x=EST5DST,M11.1.0/1,M3.2.0/1
time_zone_dstoff=M11.1.0/1,M3.2.0/1
time_zone=EST5DST
admin@ASUS-MERLIN-INTERNET:/tmp/home/root#

dave14305 · Oct 18, 2020

SirLoinOfSteak said:
The only thing that remains now is that the time is off by 1 hour. Hoping I could verify the locale / zone is set and applied correctly.

The NVRAM settings appear correct however are still off.

Code:

admin@ASUS-MERLIN-INTERNET:/tmp/home/root# nvram show|grep zone size: 52633 bytes (12903 left) time_zone_dst=1 time_zone_x=EST5DST,M11.1.0/1,M3.2.0/1 time_zone_dstoff=M11.1.0/1,M3.2.0/1 time_zone=EST5DST admin@ASUS-MERLIN-INTERNET:/tmp/home/root#

You still have the start and end dates reversed. Mine:

Code:

time_zone=EST5DST
time_zone_dst=1
time_zone_dstoff=M3.2.0/2,M11.1.0/2
time_zone_x=EST5DST,M3.2.0/2,M11.1.0/2

SirLoinOfSteak · Oct 18, 2020

That's fine now. Thank you. However, since I installed Entware, time is now in UTC and I can't find a way to change it to EST.

Code:

admin@ASUS-MERLIN-INTERNET:/tmp/home/root# nvram show|grep zone
time_zone_dst=1
time_zone_x=EST5DST,M3.2.0/1,M11.1.0/1
time_zone_dstoff=M3.2.0/1,M11.1.0/1
time_zone=EST5DST
size: 52853 bytes (12683 left)
admin@ASUS-MERLIN-INTERNET:/tmp/home/root# date
Sun Oct 18 23:16:10 UTC 2020
admin@ASUS-MERLIN-INTERNET:/tmp/home/root# ls -altri /etc/localtime
520 lrwxrwxrwx 1 admin root 35 May  5  2018 /etc/localtime -> /opt/share/zoneinfo/America/Toronto
admin@ASUS-MERLIN-INTERNET:/tmp/home/root# opkg list_installed|grep zone
zoneinfo-asia - 2020a-1
zoneinfo-europe - 2020a-1
zoneinfo-northamerica - 2020a-1
admin@ASUS-MERLIN-INTERNET:/tmp/home/root#

dave14305 · Oct 18, 2020

Common solution is to add a TZ statement to each startup script in /opt/etc/init.d:

Code:

export TZ=$(cat /etc/TZ)

Or do you mean the time in the shell? What else did you install from entware?

SirLoinOfSteak · Oct 19, 2020

Yes, correct. Referring to the time in the shell / cli above.

How many packages? Let's just say I'm giving this tiny machine a workout. I'll probably toss in a few more in time.

Perhaps locale is the one stirring things up but ran out of time to dig deeper.

Code:

admin@ASUS-MERLIN-INTERNET:/jffs/scripts# opkg list_installed
ca-bundle - 20200601-1
coreutils - 8.32-1
coreutils-b2sum - 8.32-1
coreutils-base32 - 8.32-1
coreutils-base64 - 8.32-1
coreutils-basename - 8.32-1
coreutils-basenc - 8.32-1
coreutils-cat - 8.32-1
coreutils-chcon - 8.32-1
coreutils-chgrp - 8.32-1
coreutils-chmod - 8.32-1
coreutils-chown - 8.32-1
coreutils-chroot - 8.32-1
coreutils-cksum - 8.32-1
coreutils-comm - 8.32-1
coreutils-cp - 8.32-1
coreutils-csplit - 8.32-1
coreutils-cut - 8.32-1
coreutils-date - 8.32-1
coreutils-dd - 8.32-1
coreutils-df - 8.32-1
coreutils-dir - 8.32-1
coreutils-dircolors - 8.32-1
coreutils-dirname - 8.32-1
coreutils-du - 8.32-1
coreutils-echo - 8.32-1
coreutils-env - 8.32-1
coreutils-expand - 8.32-1
coreutils-expr - 8.32-1
coreutils-factor - 8.32-1
coreutils-false - 8.32-1
coreutils-fmt - 8.32-1
coreutils-fold - 8.32-1
coreutils-head - 8.32-1
coreutils-hostid - 8.32-1
coreutils-id - 8.32-1
coreutils-install - 8.32-1
coreutils-join - 8.32-1
coreutils-kill - 8.32-1
coreutils-link - 8.32-1
coreutils-ln - 8.32-1
coreutils-logname - 8.32-1
coreutils-ls - 8.32-1
coreutils-md5sum - 8.32-1
coreutils-mkdir - 8.32-1
coreutils-mkfifo - 8.32-1
coreutils-mknod - 8.32-1
coreutils-mktemp - 8.32-1
coreutils-mv - 8.32-1
coreutils-nice - 8.32-1
coreutils-nl - 8.32-1
coreutils-nohup - 8.32-1
coreutils-nproc - 8.32-1
coreutils-numfmt - 8.32-1
coreutils-od - 8.32-1
coreutils-paste - 8.32-1
coreutils-pathchk - 8.32-1
coreutils-pinky - 8.32-1
coreutils-pr - 8.32-1
coreutils-printenv - 8.32-1
coreutils-printf - 8.32-1
coreutils-ptx - 8.32-1
coreutils-pwd - 8.32-1
coreutils-readlink - 8.32-1
coreutils-realpath - 8.32-1
coreutils-rm - 8.32-1
coreutils-rmdir - 8.32-1
coreutils-runcon - 8.32-1
coreutils-seq - 8.32-1
coreutils-sha1sum - 8.32-1
coreutils-sha224sum - 8.32-1
coreutils-sha256sum - 8.32-1
coreutils-sha384sum - 8.32-1
coreutils-sha512sum - 8.32-1
coreutils-shred - 8.32-1
coreutils-shuf - 8.32-1
coreutils-sleep - 8.32-1
coreutils-sort - 8.32-1
coreutils-split - 8.32-1
coreutils-stat - 8.32-1
coreutils-stdbuf - 8.32-1
coreutils-stty - 8.32-1
coreutils-sum - 8.32-1
coreutils-sync - 8.32-1
coreutils-tac - 8.32-1
coreutils-tail - 8.32-1
coreutils-tee - 8.32-1
coreutils-test - 8.32-1
coreutils-timeout - 8.32-1
coreutils-touch - 8.32-1
coreutils-tr - 8.32-1
coreutils-true - 8.32-1
coreutils-truncate - 8.32-1
coreutils-tsort - 8.32-1
coreutils-tty - 8.32-1
coreutils-uname - 8.32-1
coreutils-unexpand - 8.32-1
coreutils-uniq - 8.32-1
coreutils-unlink - 8.32-1
coreutils-uptime - 8.32-1
coreutils-users - 8.32-1
coreutils-vdir - 8.32-1
coreutils-wc - 8.32-1
coreutils-who - 8.32-1
coreutils-whoami - 8.32-1
coreutils-yes - 8.32-1
entware-opt - 227000-3
entware-release - 1.0-2
entware-upgrade - 1.0-1
findutils - 4.7.0-2
grep - 3.4-2
libacl - 2.2.53-1
libattr - 2.4.48-2
libc - 2.23-10
libcap - 2.43-1
libcurl - 7.72.0-2
libevent2-core - 2.1.11-2
libevent2-pthreads - 2.1.11-2
libgcc - 8.4.0-10
libgcrypt - 1.8.6-1
libgmp - 6.1.2-2
libgpg-error - 1.37-1
libiconv-full - 1.11.1-4
libidn2 - 2.3.0-1
libintl-full - 0.19.8.1-2
libmariadb - 3.1.8-1
libncurses - 6.2-1
libncursesw - 6.2-1
libopenldap - 2.4.48-1
libopenssl - 1.1.1g-1
libpcre - 8.44-2
libpthread - 2.23-10
libreadline - 8.0-1a
librt - 2.23-10
libsasl2 - 2.1.27-3
libsqlite3 - 3330000-1
libssp - 8.4.0-10
libstdcpp - 8.4.0-10
libsysfs - 2.1.0-3
libtirpc - 1.2.6-2
libunistring - 0.9.10-1
libxml2 - 2.9.10-1
locales - 2.23-9
lsof - 4.91-1
mariadb-common - 1.0-2
ntpdate - 4.2.8p15-2
olsrd - 2020-06-18-84400e5c-3
olsrd-mod-quagga - 2020-06-18-84400e5c-3
opkg - 2020-05-07-f2166a89-1
progress - 0.15-1
quagga - 1.1.0-1
quagga-bgpd - 1.1.0-1
quagga-isisd - 1.1.0-1
quagga-libospf - 1.1.0-1
quagga-libzebra - 1.1.0-1
quagga-ospf6d - 1.1.0-1
quagga-ospfd - 1.1.0-1
quagga-ripd - 1.1.0-1
quagga-ripngd - 1.1.0-1
quagga-vtysh - 1.1.0-1
quagga-watchquagga - 1.1.0-1
quagga-zebra - 1.1.0-1
shadow-chage - 4.8.1-3
shadow-chfn - 4.8.1-3
shadow-chgpasswd - 4.8.1-3
shadow-chpasswd - 4.8.1-3
shadow-chsh - 4.8.1-3
shadow-common - 4.8.1-3
shadow-expiry - 4.8.1-3
shadow-faillog - 4.8.1-3
shadow-gpasswd - 4.8.1-3
shadow-groupadd - 4.8.1-3
shadow-groupdel - 4.8.1-3
shadow-groupmems - 4.8.1-3
shadow-groupmod - 4.8.1-3
shadow-groups - 4.8.1-3
shadow-grpck - 4.8.1-3
shadow-grpconv - 4.8.1-3
shadow-grpunconv - 4.8.1-3
shadow-lastlog - 4.8.1-3
shadow-login - 4.8.1-3
shadow-logoutd - 4.8.1-3
shadow-newgidmap - 4.8.1-3
shadow-newgrp - 4.8.1-3
shadow-newuidmap - 4.8.1-3
shadow-newusers - 4.8.1-3
shadow-nologin - 4.8.1-3
shadow-passwd - 4.8.1-3
shadow-pwck - 4.8.1-3
shadow-pwconv - 4.8.1-3
shadow-pwunconv - 4.8.1-3
shadow-su - 4.8.1-3
shadow-useradd - 4.8.1-3
shadow-userdel - 4.8.1-3
shadow-usermod - 4.8.1-3
shadow-utils - 4.8.1-3
shadow-vipw - 4.8.1-3
strace - 5.8-1
strongswan - 5.9.0-1
strongswan-charon - 5.9.0-1
strongswan-ipsec - 5.9.0-1
strongswan-libtls - 5.9.0-1
strongswan-mod-addrblock - 5.9.0-1
strongswan-mod-aes - 5.9.0-1
strongswan-mod-af-alg - 5.9.0-1
strongswan-mod-agent - 5.9.0-1
strongswan-mod-attr - 5.9.0-1
strongswan-mod-attr-sql - 5.9.0-1
strongswan-mod-blowfish - 5.9.0-1
strongswan-mod-ccm - 5.9.0-1
strongswan-mod-cmac - 5.9.0-1
strongswan-mod-constraints - 5.9.0-1
strongswan-mod-coupling - 5.9.0-1
strongswan-mod-ctr - 5.9.0-1
strongswan-mod-curl - 5.9.0-1
strongswan-mod-curve25519 - 5.9.0-1
strongswan-mod-des - 5.9.0-1
strongswan-mod-dhcp - 5.9.0-1
strongswan-mod-dnskey - 5.9.0-1
strongswan-mod-duplicheck - 5.9.0-1
strongswan-mod-eap-identity - 5.9.0-1
strongswan-mod-eap-md5 - 5.9.0-1
strongswan-mod-eap-mschapv2 - 5.9.0-1
strongswan-mod-eap-radius - 5.9.0-1
strongswan-mod-eap-tls - 5.9.0-1
strongswan-mod-farp - 5.9.0-1
strongswan-mod-fips-prf - 5.9.0-1
strongswan-mod-gcm - 5.9.0-1
strongswan-mod-gcrypt - 5.9.0-1
strongswan-mod-gmp - 5.9.0-1
strongswan-mod-gmpdh - 5.9.0-1
strongswan-mod-ha - 5.9.0-1
strongswan-mod-hmac - 5.9.0-1
strongswan-mod-kernel-libipsec - 5.9.0-1
strongswan-mod-kernel-netlink - 5.9.0-1
strongswan-mod-ldap - 5.9.0-1
strongswan-mod-led - 5.9.0-1
strongswan-mod-load-tester - 5.9.0-1
strongswan-mod-md4 - 5.9.0-1
strongswan-mod-md5 - 5.9.0-1
strongswan-mod-mysql - 5.9.0-1
strongswan-mod-nonce - 5.9.0-1
strongswan-mod-openssl - 5.9.0-1
strongswan-mod-pem - 5.9.0-1
strongswan-mod-pgp - 5.9.0-1
strongswan-mod-pkcs1 - 5.9.0-1
strongswan-mod-pkcs11 - 5.9.0-1
strongswan-mod-pkcs12 - 5.9.0-1
strongswan-mod-pkcs7 - 5.9.0-1
strongswan-mod-pkcs8 - 5.9.0-1
strongswan-mod-pubkey - 5.9.0-1
strongswan-mod-random - 5.9.0-1
strongswan-mod-rc2 - 5.9.0-1
strongswan-mod-resolve - 5.9.0-1
strongswan-mod-revocation - 5.9.0-1
strongswan-mod-sha1 - 5.9.0-1
strongswan-mod-sha2 - 5.9.0-1
strongswan-mod-smp - 5.9.0-1
strongswan-mod-socket-default - 5.9.0-1
strongswan-mod-socket-dynamic - 5.9.0-1
strongswan-mod-sql - 5.9.0-1
strongswan-mod-sqlite - 5.9.0-1
strongswan-mod-sshkey - 5.9.0-1
strongswan-mod-stroke - 5.9.0-1
strongswan-mod-test-vectors - 5.9.0-1
strongswan-mod-unity - 5.9.0-1
strongswan-mod-updown - 5.9.0-1
strongswan-mod-vici - 5.9.0-1
strongswan-mod-whitelist - 5.9.0-1
strongswan-mod-x509 - 5.9.0-1
strongswan-mod-xauth-eap - 5.9.0-1
strongswan-mod-xauth-generic - 5.9.0-1
strongswan-mod-xcbc - 5.9.0-1
strongswan-pki - 5.9.0-1
strongswan-scepclient - 5.9.0-1
strongswan-swanctl - 5.9.0-1
sysfsutils - 2.1.0-3
terminfo - 6.2-1
vim - 8.2-2
wget - 1.20.3-4
whois - 5.5.6-1
zlib - 1.2.11-3
zoneinfo-asia - 2020a-1
zoneinfo-europe - 2020a-1
zoneinfo-northamerica - 2020a-1
admin@ASUS-MERLIN-INTERNET:/jffs/scripts#

Thread starter	Title	Forum	Replies	Date
P	SSH with id_rsa.pub (public key)	Asuswrt-Merlin	9	Feb 27, 2025
G	How to start Wireguard Server in ssh ?	Asuswrt-Merlin	2	Jan 7, 2025
	SSH+RT-AX88U Merlin+3004.388.8_4 Cannot log in	Asuswrt-Merlin	1	Dec 23, 2024
M	AC86U - SSH Disabled few seconds after boot - 386.14.	Asuswrt-Merlin	2	Nov 16, 2024
A	RT-AX88U - 3004.388.8_2 - SSH connection closed after few minutes from reboot	Asuswrt-Merlin	10	Oct 26, 2024
	Switch WAN type from SSH	Asuswrt-Merlin	3	Sep 25, 2024
W	Question: About AX4200 regarding SSH support and Entware	Asuswrt-Merlin	23	Jul 8, 2024
S	restart web server from SSH	Asuswrt-Merlin	13	Jun 28, 2024
K	Toggle VPN Director rules for WireGuard via SSH	Asuswrt-Merlin	2	Jun 13, 2024
M	ssh access with DNS name takes a long time where it did not used to	Asuswrt-Merlin	0	May 17, 2024

SSH CLI Data is wrong. Shows Sat May 5 01:07:40 DST 2018.

Occasional Visitor

Part of the Furniture

Occasional Visitor

Part of the Furniture

Occasional Visitor

Occasional Visitor

Part of the Furniture

Occasional Visitor

Occasional Visitor

Occasional Visitor

Part of the Furniture

Occasional Visitor

Occasional Visitor

Part of the Furniture

Occasional Visitor

Part of the Furniture

Occasional Visitor

Similar threads

Similar threads

Support SNBForums w/ Amazon

Sign Up For SNBForums Daily Digest