Classification query

Question

Hi folks, 
 a question for those who can provide guidance and maybe even answer. 
 The daily report shows various classifications for NTP type traffic. 
 1/. 
 2/. 
 3/. 
 
 I was reviewing the hairpin NAT configurations and found there were some items missing. Since I have corrected the configuration the above traffic is reported. 
 Why are there three types of NTP traffic? 
 Ian

rfcat_vk · Answer

Hi, 
 further investigation shows some of the IoT devices use port UDP 123 to send data back to the company servers which is why the NTP server never responds to those requests. 
 The NTP packets are from the NTP server to the internet NTP servers. 
 Ian