Re: [swinog] Facebook down

2012-03-07 Diskussionsfäden Andre Timmermann
Am Mittwoch, den 07.03.2012, 20:39 +0100 schrieb Martin Ebnoether:
> On the Wed, Mar 07, 2012 at 05:33:09PM +0100, Andre Timmermann blubbered:
> 
> Hoi alle.
> 
> > > I am so glad that I deleted my account weeks ago :-D
> > 
> > Never had an account there ;)
> 
> Hey, don't play this down! It could easily have led into a
> bigger crisis than in 1996, when Take That broke up!!


Hehe, do you remember tha famous "Längs! Nicht Quer!" by Harald Schmidt
1996 in the german TV?

http://www.focus.de/magazin/archiv/periskop-gar-nicht-komisch_aid_157064.html


Schmidts Suizidberatung für verzweifelte Fans der aufgelösten
Teenie-Popgruppe „Take That“: Schmidt empfahl: Pulsadern durchschneiden,
und zwar längs, nicht quer!




-- 
Mit freundlichen Gruessen

Andre Timmermann
Nine Internet Solutions AG, Albisriederstr. 243c, CH-8047 Zuerich
Tel +41 44 637 40 00 | Direkt +41 44 637 40 06 | Fax +41 44 637 40 01



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Facebook down

2012-03-07 Diskussionsfäden Martin Ebnoether
On the Wed, Mar 07, 2012 at 05:33:09PM +0100, Andre Timmermann blubbered:

Hoi alle.

> > I am so glad that I deleted my account weeks ago :-D
> 
> Never had an account there ;)

Hey, don't play this down! It could easily have led into a
bigger crisis than in 1996, when Take That broke up!!

CU, Venty

-- 
Hat pazifi sein Sofa schon?

http://hat-pazifi-sein-sofa-schon.semmel.ch/



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Facebook down

2012-03-07 Diskussionsfäden Xaver Aerni

I han't an account since 4 weeks...
And I doesn't miss it... :-D
Greetings
Xaver
- Original Message - 
From: "Andre Timmermann" 

To: 
Sent: Wednesday, March 07, 2012 5:33 PM
Subject: Re: [swinog] Facebook down



Am Mittwoch, den 07.03.2012, 14:39 +0100 schrieb Lukas Eisenberger:

I am so glad that I deleted my account weeks ago :-D


Never had an account there ;)

Andre





___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Facebook down

2012-03-07 Diskussionsfäden roger
It looks like a proof of concept.
i read on different sources, there are some complaining about try endless to 
login and 
allways land on the login page. that's a new form of password grabber ?
some got strange answers like system offline try later 
others got a wrong ip...

strange and shure not only an DNS attack 
myself i  have an "testaccount" on facebook, the only thing wich facebook know 
is an 
allways changing IP from some anon services :D
The purpose is only to know how it works.


Roger


> 
> On monday we had a downstream customer with a hacked server (some bot net 
> root kit). The server "attacked" four Facebook dns servers with 20 parallel 
> udp 53 "floods", each about 2.5Mbps, no idea what packet content.
> 
> Customer told me that there was a known bug in Plesk. Maybe there really was 
> a botnet attack against Facebook today :) does anyone have any specific 
> information? would be interesting. 
> 
> 
> 
> On Mar 7, 2012, at 2:39 PM, Lukas Eisenberger wrote:
> 
> > I am so glad that I deleted my account weeks ago :-D
> > 
> > cheers
> > 
> > Luke
> > 
> > Am 07.03.2012 08:23, schrieb Marco Fretz:
> >> Good morning everyone,
> >> 
> >> Does anyone have an idea what happened to Facebook DNS servers? "A"
> >> www.facebook.com DNS queries are not answered anymore. I'm not sure
> >> but looks like the error exists since about 07:15 today.
> >> 
> >> on facebookdown.com were a lot of reports from around the world, now
> >> this site is also dead (to many mysql connections, which possibly
> >> means to many users...).
> >> 
> >> 
> >> greets
> >> Marco
> >> 
> >> 
> >> ___
> >> swinog mailing list
> >> swinog@lists.swinog.ch
> >> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
> > 
> > 
> > 
> > ___
> > swinog mailing list
> > swinog@lists.swinog.ch
> > http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
> 
> 
> 
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Facebook down

2012-03-07 Diskussionsfäden Marco Fretz
On monday we had a downstream customer with a hacked server (some bot net root 
kit). The server "attacked" four Facebook dns servers with 20 parallel udp 53 
"floods", each about 2.5Mbps, no idea what packet content.

Customer told me that there was a known bug in Plesk. Maybe there really was a 
botnet attack against Facebook today :) does anyone have any specific 
information? would be interesting. 



On Mar 7, 2012, at 2:39 PM, Lukas Eisenberger wrote:

> I am so glad that I deleted my account weeks ago :-D
> 
> cheers
> 
> Luke
> 
> Am 07.03.2012 08:23, schrieb Marco Fretz:
>> Good morning everyone,
>> 
>> Does anyone have an idea what happened to Facebook DNS servers? "A"
>> www.facebook.com DNS queries are not answered anymore. I'm not sure
>> but looks like the error exists since about 07:15 today.
>> 
>> on facebookdown.com were a lot of reports from around the world, now
>> this site is also dead (to many mysql connections, which possibly
>> means to many users...).
>> 
>> 
>> greets
>> Marco
>> 
>> 
>> ___
>> swinog mailing list
>> swinog@lists.swinog.ch
>> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
> 
> 
> 
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Facebook down

2012-03-07 Diskussionsfäden Andre Timmermann
Am Mittwoch, den 07.03.2012, 14:39 +0100 schrieb Lukas Eisenberger:
> I am so glad that I deleted my account weeks ago :-D

Never had an account there ;)

Andre





___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


[swinog] Cisco

2012-03-07 Diskussionsfäden Rolf Tschumi

HI all,

i search for the 72xx VXR Router

NPE-G1  1GB Ram.


thanks.

Rolf




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Facebook down

2012-03-07 Diskussionsfäden Lukas Eisenberger

I am so glad that I deleted my account weeks ago :-D

cheers

Luke

Am 07.03.2012 08:23, schrieb Marco Fretz:

Good morning everyone,

Does anyone have an idea what happened to Facebook DNS servers? "A"
www.facebook.com DNS queries are not answered anymore. I'm not sure
but looks like the error exists since about 07:15 today.

on facebookdown.com were a lot of reports from around the world, now
this site is also dead (to many mysql connections, which possibly
means to many users...).


greets
Marco


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog




___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


[swinog] cisco 7600 strange behaviour

2012-03-07 Diskussionsfäden naz

Hello Swinoggers, 

has anyone already faced a problem with some arp requests on a sup720 who never 
recieve an answer ? 

the setup is : 

two 7600 with a sup720 in a failover configuration. 

each one has one ip, the failover has a vip 

if i plug the machines routed on the gateway on the vip directly on the 7600 , 
there is no problem at all. 
if i plug the same machine behind a switch , from time to time, the arp 
requests for the vip got no answer at all, and so the machine loose her 
gateway... 


to solve the issue, i have to add the mac adress by hand in the table, or 
change by hand the failover status and pass the vip on the standby 7600.. 

i wasnt able to find out any solution on this... 

any advice  ? 


Best regards, 

philippe


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Facebook down

2012-03-07 Diskussionsfäden roger

On 7 Mar 2012 at 9:06, Marco Fretz wrote:

> 
> looks like its back up:

well B.O.F.H. seems to getting old 





___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Facebook down

2012-03-07 Diskussionsfäden Marco Fretz
looks like its back up:

dig A www.facebook.com

; <<>> DiG 9.8.1-RedHat-9.8.1-1.fc15 <<>> A www.facebook.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3178
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;www.facebook.com.  IN  A

;; ANSWER SECTION:
www.facebook.com.   80  IN  A   69.63.190.10

;; AUTHORITY SECTION:
www.facebook.com.   82019   IN  NS  glb1.facebook.com.
www.facebook.com.   82019   IN  NS  glb2.facebook.com.

;; Query time: 9 msec
;; SERVER: 172.16.101.3#53(172.16.101.3)
;; WHEN: Wed Mar  7 09:04:45 2012
;; MSG SIZE  rcvd: 88

2012/3/7 Stefan Neufeind :
> On 03/07/2012 08:38 AM, Klaus Ethgen wrote:
>>
>> Am Mi den  7. Mär 2012 um  8:34 schrieb Olivier Beytrison:
>>> Same here, I already have like 30 tickets of students who complain that
>>> they can't reach facebook.
>>
>> Heureka, endlich hat sich jemand dessen angenommen und Gesichtsbuch vom
>> Netz genommen. ;-)
>>
>>> But facebook over ipv6 works correctly (https://www.v6.facebook.com/)
>>
>> Schade, doch nicht.
>
> Sie engagieren sich einfach aktiv für die Einführung von IPv6. #ILike
>
> IPv6-only-day at facebook :-)
>
>
> Grüße,
>  Stefan
>
>
> ___
> swinog mailing list
> swinog@lists.swinog.ch
> http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


Re: [swinog] Facebook down

2012-03-07 Diskussionsfäden Adrian Kägi

Maybe they didn't paid the bill by godaddy??


Am 07.03.2012 08:44, schrieb Marco Fretz:

Yes, https://www.v6.facebook.com/ works. The interesting thing is that
there is no information on facebook about the outage. Ok maybe they
think it wouln't be read anyway :D

On Wed, Mar 7, 2012 at 8:34 AM, Vincent Magnin  wrote:

Marco,

You can access facebook using ipv6...

Add this to your host file:

2620:0:1c18:0:face:b00c:0:2 www.facebook.com


Regards,

Vincent



Marco Fretz  a écrit :



Good morning everyone,

Does anyone have an idea what happened to Facebook DNS servers? "A"
www.facebook.com DNS queries are not answered anymore. I'm not sure
but looks like the error exists since about 07:15 today.





___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog


___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog



--
Freundliche Grüsse

Adrian Kägi
System Engineering
Teamleiter

ZAPP AG
Bahnhofstr. 28, 3076 Worb
Telefon +41 31 710 34 23
Fax +41 31 710 34 25
adrian.ka...@medianet.ch
http://www.zapp.ch

Surfen ohne Grenzen



___
swinog mailing list
swinog@lists.swinog.ch
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog