Marc Lognoul's IT Infrastructure Blog

Cloudy with a Chance of On-Prem

Windows: Win32Time Service Log File Explained

Applies to
Windows 2000, XP, 2003, 2003-R2, Vista, 2008, Seven and 2008-R2
Log Type
Debug/Trace
Description
  • Service Start-up
  • Configuration load, validation and application
  • Time synchroization (SNTP Client)
  • Time service (SNTP Server)
File Name and Location
Configurable
Default Configuration
Disabled
How To Configure
Recommended Configuration
Disabled. Enable for troubleshooting purpose only. For normal operations, rely on Windows System Event Log, source: W32Time
Parsing and Analysis
None at current time
Additional Information
Example
149577 13:52:58.4981474s – Ignoring packet invalid mode combination (in:3 out:0).
149577 13:53:02.1695994s – ListeningThread — DataAvailEvent set for socket 0 (171.26.172.74:123)
149577 13:53:02.1695994s – ListeningThread — response heard from 171.26.172.209:10241
149577 13:53:02.1695994s – /– NTP Packet:
149577 13:53:02.1695994s – | LeapIndicator: 0 – no warning;  VersionNumber: 3;  Mode: 3 – Client;  LiVnMode: 0x1B
149577 13:53:02.1695994s – | Stratum: 15 – secondary reference (syncd by (S)NTP)
149577 13:53:02.1695994s – | Poll Interval: 10 – 1024s;  Precision: -20 – 953.674ns per tick
149577 13:53:02.1695994s – | RootDelay: 0x0000.2710s – 0.152588s;  RootDispersion: 0x0000.2710s – 0.152588s
149577 13:53:02.1695994s – | ReferenceClockIdentifier: 0x4C4F434C – source IP: 76.79.67.76
149577 13:53:02.1695994s – | ReferenceTimestamp:   0xAB2A4F8000000000149577 13:53:02.1695994s –  – 12307161600000000000ns – 142444 00:00:00.0000000s
149577 13:53:02.1695994s – | OriginateTimestamp:   0xAB2A4F8000000000149577 13:53:02.1695994s –  – 12307161600000000000ns – 142444 00:00:00.0000000s
149577 13:53:02.1695994s – | ReceiveTimestamp:     0x0000000000000000 – unspecified
149577 13:53:02.1695994s – | TransmitTimestamp:    0x0000000000000000 – unspecified
149577 13:53:02.1695994s – >– Non-packet info:
149577 13:53:02.1695994s – | DestinationTimestamp: 149577 13:53:02.1695994s – 0xCFE6EE3E2B6ADDC4149577 13:53:02.1695994s –  – 12923502782169599400ns149577 13:53:02.1695994s –  – 149577 13:53:02.1695994s
149577 13:53:02.1695994s – | RoundtripDelay: 616341182169599400ns (616341182s)
149577 13:53:02.1695994s – | LocalClockOffset: -3179847391084799700ns – 52997456:31.084799700s
149577 13:53:02.1695994s – —
Advertisements