> I cannot imagine NTP responses being much bigger than two or three times their related request. I think you must be limiting your imagination to ntp requests

> I cannot imagine NTP responses being much bigger than two or three times their related request. I think you must be limiting your imagination to ntp requests related to setting the time. There are a lot of other commands in the protocol used for management and metrics. The `monlist` command was good for 200x amplification. https://blog.cloudflare.com/understanding-and-mitigating-ntp-based-ddos-attacks https://blog.cloudflare.com/understanding-and-mitigating-ntp...