Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CSmonitor.com: False positive TCP/IP blocking #2456

Closed
arky opened this issue Apr 19, 2023 · 2 comments · Fixed by ooni/probe-cli#1461
Closed

CSmonitor.com: False positive TCP/IP blocking #2456

arky opened this issue Apr 19, 2023 · 2 comments · Fixed by ooni/probe-cli#1461
Assignees
@bassosimone
Labels
2024-01-data-quality-cleanup Data quality issues addressed on 2024-01 data quality

Comments

@arky
Copy link

arky commented Apr 19, 2023

Describe the bug

False positive 'TCP/IP' blocking for CSMonitor.com website. The site is accessible in a browser.

https://explorer.ooni.io/measurement/20230419T075440Z_webconnectivity_KH_23673_n1_v7oDhPpabCyZbg2d?input=https://www.csmonitor.com/

To Reproduce

$ ./miniooni web_connectivity@v0.5 -i https://www.csmonitor.com
[ 0.000037] Current time: 2023-04-19 15:44:29 +07
[ 0.000065] miniooni home directory: $HOME/.miniooni
[ 0.000173] Looking up OONI backends; please be patient...
[ 0.839894] sessionresolver: https://cloudflare-dns.com/dns-query... ok
[ 1.454217] session: using probe services: {Address:https://api.ooni.io Type:https Front:}
[ 1.454251] Looking up your location; please be patient...
[ 1.454323] iplookup: using stun_ekiga
[ 2.215977] - country: KH
[ 2.215993] - network: COGETEL Co., Ltd (AS23673)
[ 2.215999] - resolver's IP: 74.125.190.149
[ 2.216003] - resolver's network: Google LLC (AS15169)
[ 2.216036] [1/1] running with input: https://www.csmonitor.com
[ 2.291449] [#3] lookup www.csmonitor.com using system... ok
[ 2.294731] [#1] lookup www.csmonitor.com using 8.8.4.4:53... ok
[ 2.461015] [#2] lookup www.csmonitor.com using https://dns.google/dns-query... ok
[ 2.561109] DNS whoami for 8.8.4.4:53/udp resolver: [{Address:74.125.190.149}]
[ 2.619442] DNS whoami for system resolver: [{Address:74.125.190.149}]
[ 2.619794] using resolved addrs: [{Addr:2600:9000:203f:fe00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:3600:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:6e00:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:2600:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:5e00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:e000:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:4400:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:9000:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:0:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:a000:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:a00:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:2c00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:7200:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:f000:1d:c25c:d00:93a1 Flags:1} {Addr:65.9.17.59 Flags:7} {Addr:65.9.17.12 Flags:7} {Addr:2600:9000:203f:de00:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:9e00:1d:c25c:d00:93a1 Flags:2} {Addr:65.9.17.95 Flags:7} {Addr:2600:9000:203f:e00:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:c600:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:4c00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:da00:1d:c25c:d00:93a1 Flags:4} {Addr:65.9.17.106 Flags:7} {Addr:2600:9000:203f:1a00:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:d600:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:6c00:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:dc00:1d:c25c:d00:93a1 Flags:2}]
[ 2.619981] prioritySelector: create with [{Addr:2600:9000:203f:fe00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:3600:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:6e00:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:2600:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:5e00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:e000:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:4400:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:9000:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:0:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:a000:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:a00:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:2c00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:7200:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:f000:1d:c25c:d00:93a1 Flags:1} {Addr:65.9.17.59 Flags:7} {Addr:65.9.17.12 Flags:7} {Addr:2600:9000:203f:de00:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:9e00:1d:c25c:d00:93a1 Flags:2} {Addr:65.9.17.95 Flags:7} {Addr:2600:9000:203f:e00:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:c600:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:4c00:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:da00:1d:c25c:d00:93a1 Flags:4} {Addr:65.9.17.106 Flags:7} {Addr:2600:9000:203f:1a00:1d:c25c:d00:93a1 Flags:2} {Addr:2600:9000:203f:d600:1d:c25c:d00:93a1 Flags:4} {Addr:2600:9000:203f:6c00:1d:c25c:d00:93a1 Flags:1} {Addr:2600:9000:203f:dc00:1d:c25c:d00:93a1 Flags:2}]
[ 2.623402] [#10] GET https://www.csmonitor.com using [2600:9000:203f:4400:1d:c25c:d00:93a1]:443... network_unreachable
[ 2.624149] [#21] GET https://www.csmonitor.com using [2600:9000:203f:9e00:1d:c25c:d00:93a1]:443... network_unreachable
[ 2.624178] [#6] GET https://www.csmonitor.com using [2600:9000:203f:6e00:1d:c25c:d00:93a1]:443... network_unreachable
[ 2.624197] [#16] GET https://www.csmonitor.com using [2600:9000:203f:7200:1d:c25c:d00:93a1]:443... network_unreachable
[ 2.624233] [#4] GET https://www.csmonitor.com using [2600:9000:203f:fe00:1d:c25c:d00:93a1]:443... network_unreachable
[ 2.624233] [#12] GET https://www.csmonitor.com using [2600:9000:203f:0:1d:c25c:d00:93a1]:443... network_unreachable
[ 2.662783] prioritySelector: conn 65.9.17.106:443: granted permission: true
[ 2.673625] prioritySelector: conn 65.9.17.12:443: denied permission: timed out sending
[ 2.673641] [#19] GET https://www.csmonitor.com using 65.9.17.12:443... stop after TLS handshake
[ 2.673663] prioritySelector: conn 65.9.17.59:443: denied permission: timed out sending
[ 2.673675] [#18] GET https://www.csmonitor.com using 65.9.17.59:443... stop after TLS handshake
[ 2.677590] prioritySelector: conn 65.9.17.95:443: denied permission: timed out sending
[ 2.677604] [#22] GET https://www.csmonitor.com using 65.9.17.95:443... stop after TLS handshake
[ 2.711250] [#27] GET https://www.csmonitor.com using 65.9.17.106:443... ok
[ 2.940617] sessionresolver: https://cloudflare-dns.com/dns-query... ok
[ 3.122007] [#9] GET https://www.csmonitor.com using [2600:9000:203f:e000:1d:c25c:d00:93a1]:443... in progress
[ 3.122100] [#14] GET https://www.csmonitor.com using [2600:9000:203f:a00:1d:c25c:d00:93a1]:443... in progress
[ 3.123180] [#11] GET https://www.csmonitor.com using [2600:9000:203f:9000:1d:c25c:d00:93a1]:443... in progress
[ 3.123252] [#26] GET https://www.csmonitor.com using [2600:9000:203f:da00:1d:c25c:d00:93a1]:443... in progress
[ 3.123315] control for https://www.csmonitor.com using https://2.th.ooni.org... in progress
[ 3.123353] [#30] GET https://www.csmonitor.com using [2600:9000:203f:6c00:1d:c25c:d00:93a1]:443... in progress
[ 3.123350] [#8] GET https://www.csmonitor.com using [2600:9000:203f:5e00:1d:c25c:d00:93a1]:443... in progress
[ 3.123382] [#31] GET https://www.csmonitor.com using [2600:9000:203f:dc00:1d:c25c:d00:93a1]:443... in progress
[ 3.123392] [#24] GET https://www.csmonitor.com using [2600:9000:203f:c600:1d:c25c:d00:93a1]:443... in progress
[ 3.123432] [#25] GET https://www.csmonitor.com using [2600:9000:203f:4c00:1d:c25c:d00:93a1]:443... in progress
[ 3.123445] [#23] GET https://www.csmonitor.com using [2600:9000:203f:e00:1d:c25c:d00:93a1]:443... in progress
[ 3.123434] [#7] GET https://www.csmonitor.com using [2600:9000:203f:2600:1d:c25c:d00:93a1]:443... in progress
[ 3.124729] [#17] GET https://www.csmonitor.com using [2600:9000:203f:f000:1d:c25c:d00:93a1]:443... in progress
[ 3.124807] [#29] GET https://www.csmonitor.com using [2600:9000:203f:d600:1d:c25c:d00:93a1]:443... in progress
[ 3.124858] [#28] GET https://www.csmonitor.com using [2600:9000:203f:1a00:1d:c25c:d00:93a1]:443... in progress
[ 3.124887] [#5] GET https://www.csmonitor.com using [2600:9000:203f:3600:1d:c25c:d00:93a1]:443... in progress
[ 3.124918] [#20] GET https://www.csmonitor.com using [2600:9000:203f:de00:1d:c25c:d00:93a1]:443... in progress
[ 3.124935] [#15] GET https://www.csmonitor.com using [2600:9000:203f:2c00:1d:c25c:d00:93a1]:443... in progress
[ 3.124943] [#13] GET https://www.csmonitor.com using [2600:9000:203f:a000:1d:c25c:d00:93a1]:443... in progress
[ 3.653846] [#13] GET https://www.csmonitor.com using [2600:9000:203f:a000:1d:c25c:d00:93a1]:443... network_unreachable
[ 4.116858] control for https://www.csmonitor.com using https://2.th.ooni.org... ok
[ 4.116900] additional addrs discovered by the TH: [2600:9000:23d4:f000:1d:c25c:d00:93a1 2600:9000:23d4:1400:1d:c25c:d00:93a1 2600:9000:23d4:ce00:1d:c25c:d00:93a1 2600:9000:23d4:8200:1d:c25c:d00:93a1 2600:9000:23d4:7400:1d:c25c:d00:93a1 2600:9000:23d4:1c00:1d:c25c:d00:93a1 2600:9000:23d4:9c00:1d:c25c:d00:93a1 18.164.68.63 18.164.68.17 18.164.68.28 18.164.68.80 2600:9000:23d4:de00:1d:c25c:d00:93a1]
[ 4.539022] prioritySelector: conn 18.164.68.80:443: denied permission: timed out sending
[ 4.539106] [#42] GET https://www.csmonitor.com using 18.164.68.80:443... stop after TLS handshake
[ 4.591332] prioritySelector: conn 18.164.68.63:443: denied permission: timed out sending
[ 4.591394] [#39] GET https://www.csmonitor.com using 18.164.68.63:443... stop after TLS handshake
[ 4.593637] prioritySelector: conn 18.164.68.17:443: denied permission: timed out sending
[ 4.593721] [#40] GET https://www.csmonitor.com using 18.164.68.17:443... stop after TLS handshake
[ 4.617885] [#37] GET https://www.csmonitor.com using [2600:9000:23d4:1c00:1d:c25c:d00:93a1]:443... in progress
[ 4.617888] [#34] GET https://www.csmonitor.com using [2600:9000:23d4:ce00:1d:c25c:d00:93a1]:443... in progress
[ 4.617904] [#33] GET https://www.csmonitor.com using [2600:9000:23d4:1400:1d:c25c:d00:93a1]:443... in progress
[ 4.617913] [#35] GET https://www.csmonitor.com using [2600:9000:23d4:8200:1d:c25c:d00:93a1]:443... in progress
[ 4.617921] [#41] GET https://www.csmonitor.com using 18.164.68.28:443... in progress
[ 4.617923] [#32] GET https://www.csmonitor.com using [2600:9000:23d4:f000:1d:c25c:d00:93a1]:443... in progress
[ 4.617926] [#36] GET https://www.csmonitor.com using [2600:9000:23d4:7400:1d:c25c:d00:93a1]:443... in progress
[ 4.617934] [#38] GET https://www.csmonitor.com using [2600:9000:23d4:9c00:1d:c25c:d00:93a1]:443... in progress
[ 4.617946] [#43] GET https://www.csmonitor.com using [2600:9000:23d4:de00:1d:c25c:d00:93a1]:443... in progress
[ 4.742824] prioritySelector: conn 18.164.68.28:443: denied permission: timed out sending
[ 4.742871] [#41] GET https://www.csmonitor.com using 18.164.68.28:443... stop after TLS handshake
[ 5.125673] [#33] GET https://www.csmonitor.com using [2600:9000:23d4:1400:1d:c25c:d00:93a1]:443... network_unreachable
[ 5.668161] [#8] GET https://www.csmonitor.com using [2600:9000:203f:5e00:1d:c25c:d00:93a1]:443... network_unreachable
[ 7.141800] [#35] GET https://www.csmonitor.com using [2600:9000:23d4:8200:1d:c25c:d00:93a1]:443... network_unreachable
[ 9.734204] [#29] GET https://www.csmonitor.com using [2600:9000:203f:d600:1d:c25c:d00:93a1]:443... network_unreachable
[ 9.734258] [#31] GET https://www.csmonitor.com using [2600:9000:203f:dc00:1d:c25c:d00:93a1]:443... network_unreachable
[ 9.734261] [#25] GET https://www.csmonitor.com using [2600:9000:203f:4c00:1d:c25c:d00:93a1]:443... network_unreachable
[ 12.623289] [#11] GET https://www.csmonitor.com using [2600:9000:203f:9000:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 12.623344] [#23] GET https://www.csmonitor.com using [2600:9000:203f:e00:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 12.623451] [#9] GET https://www.csmonitor.com using [2600:9000:203f:e000:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 12.623473] [#14] GET https://www.csmonitor.com using [2600:9000:203f:a00:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 12.623454] [#7] GET https://www.csmonitor.com using [2600:9000:203f:2600:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 12.623511] [#24] GET https://www.csmonitor.com using [2600:9000:203f:c600:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 12.623565] [#30] GET https://www.csmonitor.com using [2600:9000:203f:6c00:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 12.623590] [#5] GET https://www.csmonitor.com using [2600:9000:203f:3600:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 12.623635] [#26] GET https://www.csmonitor.com using [2600:9000:203f:da00:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 12.623637] [#20] GET https://www.csmonitor.com using [2600:9000:203f:de00:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 12.623708] [#28] GET https://www.csmonitor.com using [2600:9000:203f:1a00:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 12.623748] [#17] GET https://www.csmonitor.com using [2600:9000:203f:f000:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 12.623772] [#15] GET https://www.csmonitor.com using [2600:9000:203f:2c00:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 14.118538] [#43] GET https://www.csmonitor.com using [2600:9000:23d4:de00:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 14.118575] [#37] GET https://www.csmonitor.com using [2600:9000:23d4:1c00:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 14.118671] [#36] GET https://www.csmonitor.com using [2600:9000:23d4:7400:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 14.118736] [#32] GET https://www.csmonitor.com using [2600:9000:23d4:f000:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 14.118745] [#34] GET https://www.csmonitor.com using [2600:9000:23d4:ce00:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 14.118749] [#38] GET https://www.csmonitor.com using [2600:9000:23d4:9c00:1d:c25c:d00:93a1]:443... generic_timeout_error
[ 14.119108] DNS: address 65.9.17.106: not resolved by TH
[ 14.119125] DNS: address 2600:9000:203f:2c00:1d:c25c:d00:93a1: not resolved by TH
[ 14.119135] DNS: address 2600:9000:203f:da00:1d:c25c:d00:93a1: not resolved by TH
[ 14.119144] DNS: address 2600:9000:203f:e000:1d:c25c:d00:93a1: not resolved by TH
[ 14.119157] DNS: address 2600:9000:203f:9e00:1d:c25c:d00:93a1: not resolved by TH
[ 14.119172] DNS: address 65.9.17.12: not resolved by TH
[ 14.119187] DNS: address 2600:9000:203f:6c00:1d:c25c:d00:93a1: not resolved by TH
[ 14.119199] DNS: address 2600:9000:203f:de00:1d:c25c:d00:93a1: not resolved by TH
[ 14.119210] DNS: address 2600:9000:203f:c600:1d:c25c:d00:93a1: not resolved by TH
[ 14.119221] DNS: address 2600:9000:203f:9000:1d:c25c:d00:93a1: not resolved by TH
[ 14.119232] DNS: address 65.9.17.59: not resolved by TH
[ 14.119269] DNS: address 2600:9000:203f:f000:1d:c25c:d00:93a1: not resolved by TH
[ 14.119279] DNS: address 2600:9000:203f:e00:1d:c25c:d00:93a1: not resolved by TH
[ 14.119288] DNS: address 2600:9000:203f:a00:1d:c25c:d00:93a1: not resolved by TH
[ 14.119296] DNS: address 2600:9000:203f:6e00:1d:c25c:d00:93a1: not resolved by TH
[ 14.119305] DNS: address 2600:9000:203f:4c00:1d:c25c:d00:93a1: not resolved by TH
[ 14.119314] DNS: address 2600:9000:203f:3600:1d:c25c:d00:93a1: not resolved by TH
[ 14.119325] DNS: address 2600:9000:203f:4400:1d:c25c:d00:93a1: not resolved by TH
[ 14.119347] DNS: address 2600:9000:203f:dc00:1d:c25c:d00:93a1: not resolved by TH
[ 14.119361] DNS: address 2600:9000:203f:d600:1d:c25c:d00:93a1: not resolved by TH
[ 14.119372] DNS: address 2600:9000:203f:5e00:1d:c25c:d00:93a1: not resolved by TH
[ 14.119383] DNS: address 2600:9000:203f:a000:1d:c25c:d00:93a1: not resolved by TH
[ 14.119392] DNS: address 2600:9000:203f:1a00:1d:c25c:d00:93a1: not resolved by TH
[ 14.119400] DNS: address 2600:9000:203f:fe00:1d:c25c:d00:93a1: not resolved by TH
[ 14.119418] DNS: address 2600:9000:203f:7200:1d:c25c:d00:93a1: not resolved by TH
[ 14.119436] DNS: address 65.9.17.95: not resolved by TH
[ 14.119449] DNS: address 2600:9000:203f:0:1d:c25c:d00:93a1: not resolved by TH
[ 14.119460] DNS: address 2600:9000:203f:2600:1d:c25c:d00:93a1: not resolved by TH
[ 14.119559] DNS: address 2600:9000:203f:de00:1d:c25c:d00:93a1: cannot confirm using TLS handshake
[ 14.119573] DNS: address 2600:9000:203f:e00:1d:c25c:d00:93a1: cannot confirm using TLS handshake
[ 14.119588] DNS: address 2600:9000:203f:c600:1d:c25c:d00:93a1: cannot confirm using TLS handshake
[ 14.119616] DNS: address 2600:9000:203f:2600:1d:c25c:d00:93a1: cannot confirm using TLS handshake
[ 14.119629] DNS: address 2600:9000:203f:e000:1d:c25c:d00:93a1: cannot confirm using TLS handshake
[ 14.119640] DNS: address 2600:9000:203f:9000:1d:c25c:d00:93a1: cannot confirm using TLS handshake
[ 14.119652] DNS: address 2600:9000:203f:f000:1d:c25c:d00:93a1: cannot confirm using TLS handshake
[ 14.119664] DNS: address 2600:9000:203f:1a00:1d:c25c:d00:93a1: cannot confirm using TLS handshake
[ 14.119682] DNS: address 2600:9000:203f:6c00:1d:c25c:d00:93a1: cannot confirm using TLS handshake
[ 14.119699] DNS: address 2600:9000:203f:a00:1d:c25c:d00:93a1: cannot confirm using TLS handshake
[ 14.119715] DNS: address 2600:9000:203f:da00:1d:c25c:d00:93a1: cannot confirm using TLS handshake
[ 14.119727] DNS: address 2600:9000:203f:3600:1d:c25c:d00:93a1: cannot confirm using TLS handshake
[ 14.119741] DNS: address 2600:9000:203f:2c00:1d:c25c:d00:93a1: cannot confirm using TLS handshake
[ 14.120316] DNS: addr 2600:9000:23d4:1400:1d:c25c:d00:93a1 has AS16509
[ 14.120334] DNS: addr 2600:9000:23d4:ce00:1d:c25c:d00:93a1 has AS16509
[ 14.120344] DNS: addr 2600:9000:203f:de00:1d:c25c:d00:93a1 has AS16509
[ 14.120354] DNS: addr 2600:9000:203f:da00:1d:c25c:d00:93a1 has AS16509
[ 14.120367] DNS: addr 2600:9000:203f:3600:1d:c25c:d00:93a1 has AS16509
[ 14.120376] DNS: addr 18.164.68.28 has AS16509
[ 14.120388] DNS: addr 2600:9000:23d4:de00:1d:c25c:d00:93a1 has AS16509
[ 14.120399] DNS: addr 2600:9000:23d4:1c00:1d:c25c:d00:93a1 has AS16509
[ 14.120410] DNS: addr 2600:9000:23d4:9c00:1d:c25c:d00:93a1 has AS16509
[ 14.120421] DNS: addr 2600:9000:203f:2600:1d:c25c:d00:93a1 has AS16509
[ 14.120433] DNS: addr 2600:9000:203f:9000:1d:c25c:d00:93a1 has AS16509
[ 14.120444] DNS: addr 2600:9000:203f:6c00:1d:c25c:d00:93a1 has AS16509
[ 14.120455] DNS: addr 18.164.68.63 has AS16509
[ 14.120467] DNS: addr 2600:9000:23d4:f000:1d:c25c:d00:93a1 has AS16509
[ 14.120480] DNS: addr 2600:9000:23d4:8200:1d:c25c:d00:93a1 has AS16509
[ 14.120491] DNS: addr 2600:9000:203f:c600:1d:c25c:d00:93a1 has AS16509
[ 14.120502] DNS: addr 2600:9000:203f:e000:1d:c25c:d00:93a1 has AS16509
[ 14.120513] DNS: addr 2600:9000:203f:a00:1d:c25c:d00:93a1 has AS16509
[ 14.120524] DNS: addr 18.164.68.80 has AS16509
[ 14.120536] DNS: addr 18.164.68.17 has AS16509
[ 14.120547] DNS: addr 2600:9000:23d4:7400:1d:c25c:d00:93a1 has AS16509
[ 14.120559] DNS: addr 2600:9000:203f:e00:1d:c25c:d00:93a1 has AS16509
[ 14.120571] DNS: addr 2600:9000:203f:f000:1d:c25c:d00:93a1 has AS16509
[ 14.120582] DNS: addr 2600:9000:203f:1a00:1d:c25c:d00:93a1 has AS16509
[ 14.120593] DNS: addr 2600:9000:203f:2c00:1d:c25c:d00:93a1 has AS16509
[ 14.120610] DNSConsistency: consistent
[ 14.120639] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:203f:9000:1d:c25c:d00:93a1]:443 (see #11)
[ 14.120655] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:203f:e00:1d:c25c:d00:93a1]:443 (see #23)
[ 14.120670] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:203f:2600:1d:c25c:d00:93a1]:443 (see #7)
[ 14.120683] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:203f:e000:1d:c25c:d00:93a1]:443 (see #9)
[ 14.120703] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:203f:a00:1d:c25c:d00:93a1]:443 (see #14)
[ 14.120715] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:203f:c600:1d:c25c:d00:93a1]:443 (see #24)
[ 14.120730] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:203f:6c00:1d:c25c:d00:93a1]:443 (see #30)
[ 14.120745] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:203f:3600:1d:c25c:d00:93a1]:443 (see #5)
[ 14.120761] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:203f:de00:1d:c25c:d00:93a1]:443 (see #20)
[ 14.120775] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:203f:da00:1d:c25c:d00:93a1]:443 (see #26)
[ 14.120789] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:203f:1a00:1d:c25c:d00:93a1]:443 (see #28)
[ 14.120803] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:203f:f000:1d:c25c:d00:93a1]:443 (see #17)
[ 14.120822] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:203f:2c00:1d:c25c:d00:93a1]:443 (see #15)
[ 14.120837] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:23d4:de00:1d:c25c:d00:93a1]:443 (see #43)
[ 14.120854] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:23d4:1c00:1d:c25c:d00:93a1]:443 (see #37)
[ 14.120869] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:23d4:7400:1d:c25c:d00:93a1]:443 (see #36)
[ 14.120883] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:23d4:f000:1d:c25c:d00:93a1]:443 (see #32)
[ 14.120898] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:23d4:ce00:1d:c25c:d00:93a1]:443 (see #34)
[ 14.120920] TCP/IP: unexpected failure generic_timeout_error for [2600:9000:23d4:9c00:1d:c25c:d00:93a1]:443 (see #38)
[ 14.120925] HTTP: HTTPS && no error => #27 is successful
[ 14.120929] ANOMALY: flags=34, accessible=false, blocking=tcp_ip
[ 14.130941] submitting measurement to OONI collector; please be patient...
[ 14.358062] New reportID: 20230419T084444Z_webconnectivity_KH_23673_n1_olvdUtwTuTjZNVPo
[ 15.507386] saving measurement to disk
[ 15.514407] experiment: recv 0.00 byte, sent 0.00 byte
[ 15.514634] sessionresolver: [{"URL":"https://cloudflare-dns.com/dns-query","Score":1},{"URL":"http3://cloudflare-dns.com/dns-query","Score":0.99900001},{"URL":"http3://mozilla.cloudflare-dns.com/dns-query","Score":0.99900001},{"URL":"system:///","Score":0},{"URL":"https://mozilla.cloudflare-dns.com/dns-query","Score":0},{"URL":"http3://dns.google/dns-query","Score":0},{"URL":"https://dns.quad9.net/dns-query","Score":0},{"URL":"https://dns.google/dns-query","Score":0}]
[ 15.514696] whole session: recv 15.56 kbyte, sent 332.12 kbyte

Expected behavior

A clear and concise description of what you expected to happen.

Screenshots

If applicable, add screenshots to help explain your problem.

System information (if applicable):

  • Device: [e.g., iPhone6]
  • OS: [e.g., iOS8.1]
  • OONI Probe version: [e.g., 3.11.0]

Additional context

Add any other context about the problem here.
@arky
Copy link
Author

arky commented Apr 19, 2023

This is caused by IPv6 configuration issue where the IPv6 address is present on the local lan but not connected to the internet as ISP doesn't support it.

Disabling IPV6 managed to resolve this false positive.

A good use for having user configuration IPv6 configuration option as suggested in #2324

bassosimone added a commit to ooni/probe-cli that referenced this issue Jan 23, 2024
@bassosimone
chore(minipipeline): add test case for probe#2456
c121154 
This commit adds a test case that replicates the issue described
by ooni/probe#2456 and shows that we are
now able to correctly deal with that.

See also https://explorer.ooni.org/m/20240123143658.130691_IT_webconnectivity_03662f69246c637f.

Closes ooni/probe#2456.
@bassosimone bassosimone mentioned this issue Jan 23, 2024
Merged
bassosimone added a commit to ooni/probe-cli that referenced this issue Jan 23, 2024
@bassosimone
chore(minipipeline): add test case for ooni/probe#2456 (#1461)
319643d 
This commit adds a test case that replicates the issue described by
ooni/probe#2456 and shows that we are now able
to correctly deal with that. Check the `analysis.json` and
`analysis_classic.json` file and see that there are no unexplained or
unexpected TCP connect failures. This happen because now we filter for
IPv6-related failures.

See also
https://explorer.ooni.org/m/20240123143658.130691_IT_webconnectivity_03662f69246c637f.

Closes ooni/probe#2456.
@arky
Copy link
Author

arky commented Jan 23, 2024

Thanks @bassosimone

@bassosimone bassosimone added the 2024-01-data-quality-cleanup Data quality issues addressed on 2024-01 label Jan 26, 2024
Murphy-OrangeMud pushed a commit to Murphy-OrangeMud/probe-cli that referenced this issue Feb 13, 2024
@bassosimone @Murphy-OrangeMud
chore(minipipeline): add test case for ooni/probe#2456 (ooni#1461)
940d6ae 
This commit adds a test case that replicates the issue described by
ooni/probe#2456 and shows that we are now able
to correctly deal with that. Check the `analysis.json` and
`analysis_classic.json` file and see that there are no unexplained or
unexpected TCP connect failures. This happen because now we filter for
IPv6-related failures.

See also
https://explorer.ooni.org/m/20240123143658.130691_IT_webconnectivity_03662f69246c637f.

Closes ooni/probe#2456.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@bassosimone bassosimone

Labels
2024-01-data-quality-cleanup Data quality issues addressed on 2024-01 data quality
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

chore(minipipeline): add test case for ooni/probe#2456 ooni/probe-cli
2 participants
@bassosimone @arky