Skip to content

Latest commit

 

History

History
405 lines (345 loc) · 11.8 KB

ts-019-facebook-messenger.md

File metadata and controls

405 lines (345 loc) · 11.8 KB
Raw

Specification version number

2016-10-25-001

  • status: current

Specification name

Facebook Messenger

Test preconditions

  • An internet connection

Expected impact

Ability to detect if the Facebook Messenger instant messaging platform is working, by checking if the DNS resolutions are consistent and if it's possible to establish a TCP session with the IPs of the endpoints.

Expected inputs

None

Test description

This test verifies if the following Facebook Messenger endpoints resolve to consistent IPs and if it's possible to establish TCP connection to them on port 443:

  • stun.fbsbx.com (stun)

  • b-api.facebook.com (b_api)

  • b-graph.facebook.com (b_graph)

  • edge-mqtt.facebook.com (edge)

  • external.xx.fbcdn.net (external_cdn)

  • scontent.xx.fbcdn.net (scontent_cdn)

  • star.c10r.facebook.com (star)

In parens is the identifier used inside of the report file to identify that particular endpoint.

NOTE Up until version 0.3.0 (including 0.3.0) all keys had - in place of _.

For each endpoint we do an A lookup for the domain name in question and consider it to be consistent if the IP is inside of a netblock linked to the facebook Authonomous System Number (AS32934).

When we find a certain endpoint presents an inconsistent DNS we write the following in the report file:

{
    "facebook_$ENDPOINT_NAME_dns_consistent": false,
    "facebook_dns_blocking": true
}

Where $ENDPOINT_NAME is one of stun, b_api, b_graph, edge, external_cdn, scontent_cdn, star.

If the endpoint is consistent then we write:

{
    "facebook_$ENDPOINT_NAME_dns_consistent": true,
}

If all endpoints are consistent then we write:

{
    "facebook_dns_blocking": false,
}

For each of the IPs we have found to be consistent we then do a TCP connect on port 443 and check to see if it succeeds. We ignore the IPs resolved to by the stun endpoint since that is UDP based service.

If any of the TCP connections fail then we consider the endpoint to be blocked and mark it as such in the report:

{
    "facebook_$ENDPOINT_NAME_reachable": false,
    "facebook_tcp_blocking": true
}

If the endpoint is not blocked we write:

{
    "facebook_$ENDPOINT_NAME_reachable": true
}

If all the endpoints are not blocked then we write:

{
    "facebook_tcp_blocking": false
}

Expected output

Parent data format

  • df-001-httpt

  • df-002-dnst

Semantics

{
    "facebook-b-api-dns-consistent": true | false | null, (up to version 0.3.0)
    "facebook-b-api-reachable": true | false | null, (up to version 0.3.0)
    "facebook-b-graph-dns-consistent": true | false | null, (up to version 0.3.0)
    "facebook-b-graph-reachable": true | false | null, (up to version 0.3.0)
    "facebook-edge-dns-consistent": true | false | null,
    "facebook-edge-reachable": true | false | null, (up to version 0.3.0)
    "facebook-external-cdn-dns-consistent": true | false | null,
    "facebook-external-cdn-reachable": true | false | null, (up to version 0.3.0)
    "facebook-scontent-cdn-dns-consistent": true | false | null,
    "facebook-scontent-cdn-reachable": true | false | null, (up to version 0.3.0)
    "facebook-star-dns-consistent": true | false | null, (up to version 0.3.0)
    "facebook-star-reachable": true | false | null, (up to version 0.3.0)
    "facebook-stun-dns-consistent": true | false | null, (up to version 0.3.0)
    "facebook-stun-reachable": null, (up to version 0.3.0)

    "facebook-tcp-blocking": true | false | null, (up to version 0.3.0)
    "facebook-dns-blocking": true | false | null, (up to version 0.3.0)


    "facebook_b_api_dns_consistent": true | false | null, (from version 0.4.0)
    "facebook_b_api_reachable": true | false | null, (from version 0.4.0)

    "facebook_b_graph_dns_consistent": true | false | null, (from version 0.4.0)
    "facebook_b_graph_reachable": true | false | null, (from version 0.4.0)

    "facebook_edge_dns_consistent": true | false | null, (from version 0.4.0)
    "facebook_edge_reachable": true | false | null, (from version 0.4.0)

    "facebook_external_cdn_dns_consistent": true | false | null, (from version 0.4.0)
    "facebook_external_cdn_reachable": true | false | null, (from version 0.4.0)

    "facebook_scontent_cdn_dns_consistent": true | false | null, (from version 0.4.0)
    "facebook_scontent_cdn_reachable": true | false | null, (from version 0.4.0)

    "facebook_star_dns_consistent": true | false | null, (from version 0.4.0)
    "facebook_star_reachable": true | false | null, (from version 0.4.0)

    "facebook_stun_dns_consistent": true | false | null, (from version 0.4.0)
    "facebook_stun_reachable": null, (from version 0.4.0)

    "facebook_tcp_blocking": true | false | null, (from version 0.4.0)
    "facebook_dns_blocking": true | false | null, (from version 0.4.0)

    "tcp_connect": [
        {
            "ip": "xxx.xxx.xxx.xxx",
            "port": 5222 | 443,
            "status": {
                "success": true | false,
                "failure": "FAILURE STRING"
            }
        }
    ],
}

The meaning of the various keys is described in the above section.

Possible conclusions

  • If it is possible for users to use the Facebook Messenger app

  • Which endpoints of Facebook Messenger appear to be blocked and how

Example output sample

{
    "annotations": {
        "platform": "macos"
    },
    "data_format_version": "0.2.0",
    "id": "0651db48-f4fb-41fb-8e35-40869380fdd6",
    "input": null,
    "input_hashes": [],
    "measurement_start_time": "2016-11-25 12:52:05",
    "options": [],
    "probe_asn": "AS30722",
    "probe_cc": "IT",
    "probe_city": null,
    "probe_ip": "127.0.0.1",
    "report_id": "OOc2k6mbJ0a4w32uXfr02vdlR7292kpbnN1jTPcSWx4bcUo0N8kurasA4fsvrLbh",
    "software_name": "ooniprobe",
    "software_version": "2.0.3.dev0",
    "test_helpers": {},
    "test_keys": {
        "agent": "redirect",
        "facebook_b_api_dns_consistent": true,
        "facebook_b_api_reachable": true,
        "facebook_b_graph_dns_consistent": true,
        "facebook_b_graph_reachable": true,
        "facebook_dns_blocking": false,
        "facebook_edge_dns_consistent": true,
        "facebook_edge_reachable": true,
        "facebook_external_cdn_dns_consistent": true,
        "facebook_external_cdn_reachable": true,
        "facebook_scontent_cdn_dns_consistent": true,
        "facebook_scontent_cdn_reachable": true,
        "facebook_star_dns_consistent": true,
        "facebook_star_reachable": true,
        "facebook_stun_dns_consistent": true,
        "facebook_stun_reachable": null,
        "facebook_tcp_blocking": false,
        "queries": [
            {
                "answers": [
                    {
                        "answer_type": "A",
                        "ipv4": "31.13.86.8"
                    }
                ],
                "failure": null,
                "hostname": "star.c10r.facebook.com",
                "query_type": "A",
                "resolver_hostname": null,
                "resolver_port": null
            },
            {
                "answers": [
                    {
                        "answer_type": "A",
                        "ipv4": "69.171.239.36"
                    }
                ],
                "failure": null,
                "hostname": "stun.fbsbx.com",
                "query_type": "A",
                "resolver_hostname": null,
                "resolver_port": null
            },
            {
                "answers": [
                    {
                        "answer_type": "CNAME",
                        "hostname": "scontent.xx.fbcdn.net"
                    },
                    {
                        "answer_type": "A",
                        "ipv4": "31.13.86.4"
                    }
                ],
                "failure": null,
                "hostname": "external.xx.fbcdn.net",
                "query_type": "A",
                "resolver_hostname": null,
                "resolver_port": null
            },
            {
                "answers": [
                    {
                        "answer_type": "A",
                        "ipv4": "31.13.86.4"
                    }
                ],
                "failure": null,
                "hostname": "scontent.xx.fbcdn.net",
                "query_type": "A",
                "resolver_hostname": null,
                "resolver_port": null
            },
            {
                "answers": [
                    {
                        "answer_type": "CNAME",
                        "hostname": "mqtt.c10r.facebook.com"
                    },
                    {
                        "answer_type": "A",
                        "ipv4": "31.13.86.2"
                    }
                ],
                "failure": null,
                "hostname": "edge-mqtt.facebook.com",
                "query_type": "A",
                "resolver_hostname": null,
                "resolver_port": null
            },
            {
                "answers": [
                    {
                        "answer_type": "CNAME",
                        "hostname": "z-m.facebook.com"
                    },
                    {
                        "answer_type": "CNAME",
                        "hostname": "z-m.c10r.facebook.com"
                    },
                    {
                        "answer_type": "A",
                        "ipv4": "31.13.86.37"
                    }
                ],
                "failure": null,
                "hostname": "b-graph.facebook.com",
                "query_type": "A",
                "resolver_hostname": null,
                "resolver_port": null
            },
            {
                "answers": [
                    {
                        "answer_type": "CNAME",
                        "hostname": "z-m.facebook.com"
                    },
                    {
                        "answer_type": "CNAME",
                        "hostname": "z-m.c10r.facebook.com"
                    },
                    {
                        "answer_type": "A",
                        "ipv4": "31.13.86.37"
                    }
                ],
                "failure": null,
                "hostname": "b-api.facebook.com",
                "query_type": "A",
                "resolver_hostname": null,
                "resolver_port": null
            }
        ],
        "socksproxy": null,
        "tcp_connect": [
            {
                "ip": "31.13.86.8",
                "port": 443,
                "status": {
                    "failure": false,
                    "success": true
                }
            },
            {
                "ip": "31.13.86.37",
                "port": 443,
                "status": {
                    "failure": false,
                    "success": true
                }
            },
            {
                "ip": "31.13.86.4",
                "port": 443,
                "status": {
                    "failure": false,
                    "success": true
                }
            },
            {
                "ip": "31.13.86.4",
                "port": 443,
                "status": {
                    "failure": false,
                    "success": true
                }
            },
            {
                "ip": "31.13.86.2",
                "port": 443,
                "status": {
                    "failure": false,
                    "success": true
                }
            },
            {
                "ip": "31.13.86.37",
                "port": 443,
                "status": {
                    "failure": false,
                    "success": true
                }
            }
        ]
    },
    "test_name": "facebook_messenger",
    "test_runtime": 0.43950486183166504,
    "test_start_time": "2016-11-25 12:52:05",
    "test_version": "0.4.0"
}