@shortridge doing some log analysis on web logs found that some servers were recording negative values for “request duration” … turns out certain servers had broken clocks and were causing NTP to kind of jump them backwards in order to synchronize. A request would come in, time jumps backwards, and the request appears to finish before it began. 😂