Does anyone know if I can use xntpd or another util to see if time
requests are coming from servers? Or am I better off going the
sniffer route?

Thanks