nanog mailing list archives

Re: did facebook just DoS me?


From: Christopher Morrow <morrowc.lists () gmail com>
Date: Tue, 4 Apr 2017 18:58:43 -0600

On Tue, Apr 4, 2017 at 6:47 PM, Kurt Kraut <listas () kurtkraut net> wrote:


I perform some PCAPs I many IP addresses belonged to Facebook. At first I
thought: - 'Clever attacker. He guesses I could not be as severe as I am to
regular UDP traffic if the origin was Facebook and he deliberately spoofed
their IP address.'

But one of my collegues quickly realized the incoming MAC ADDRESS was the
actual Facebook router we have a peering at a internet exchange. So indeed
the traffic came from their network.


one wonders if this is the new (ish?) Streaming thingy they launched?


Current thread: