I found the following site which reports that a "popcorn spike" is a spike in NTP message delay variance. In other words, an NTP message that has an unusually large delay.   http://what-when-how.com/computer-network-time-synchronization/popcorn-and-s...