We have checked all DoMore PLCs on the network, which include a mix of Terminator and BRX models, and did not find any mis-configured as a time server. All were either set to "Client" or "Disabled." The PLCs that are syncing time have the correct UTC time but are showing the wrong time zone.
We are in Eastern Standard Time, so the $TimeZone value should be -300, but it is being set to 65236. This value seems suspicious-possibly a misinterpreted 16-bit signed integer (e.g., -300 interpreted as an unsigned value), or something else entirely. Regardless, it's an unusual offset.
In addition to the PLCs, we also have bus couplers, Stride remote I/O, HMIs, and I/O extenders on the network. Could any of these devices interfere with time synchronization?
Do you have any guidance on how to scan the network to identify the source of the incorrect time sync packets, perhaps using a tool like nmap or something similar? Any other suggestions for diagnosing this issue would also be appreciated.
-Thanks