Jump to content

Archived

This topic is now archived and is closed to further replies.

Guest dan05delaney

Backdoor, IP change

Recommended Posts

dan05delaney    193

As an self confessed "IT Geek" can someone explain what happened and why this worked for so many people... my tired, stressed mind can't work it out this early on a Sunday

Share this post


Link to post
Share on other sites
tilt    28

See mistyped one of their IPs in their DNS so all traffic was going through one server. Adding the other IP to the HOSTS file took you straight to the other, empty server.

Share this post


Link to post
Share on other sites
eFestivals    6

As an self confessed "IT Geek" can someone explain what happened and why this worked for so many people... my tired, stressed mind can't work it out this early on a Sunday

See Tickets messed up the DNS entries for glastonbury.seetickets.com (the dns entry is what directs a URL entry to an IP address) - and the result was that all requests were going to one server when they should have gone to two servers.

By editing the hosts file it forced the request to go to the unused server - which was why it worked so easily for everyone that tried (cos only those who edited the hosts file were hitting that server).

Mid-sale, See Tickets sorted out their dns entries so that it no longer gave an advantage (and probably gave a disadvantage cos more people would have been hitting that server).

Share this post


Link to post
Share on other sites
al_coholic    29

From what I have seen and read.....

It looks like when the site was published it had a typo in the IP address of one of the servers. 192 instead of 194, so all hits were only being directed to 1 server instead of 2. By changing your host file to point directly at the correct IP address I think we were hitting a server that was hardly being used and so we were getting straight in.

Seetickets fixed this around 10am by updating their DNS to the correct IP address after this it was harder to get in because the load was being spread.

Share this post


Link to post
Share on other sites
acidpod23    65

I've got to get on this case next year..i didn't use it, but luckily my friend got through 2 mins before it sold out! Next time, i will listen to you here! :)

Share this post


Link to post
Share on other sites
darkskiez    0

What infuriates me so much is that it only costs a couple of quid to spin up some Amazon/Rackspace Cloud Servers, you could have 100s of servers online rather than two, for just an hour and process everyones requests seamlessly. (it costs around 15p / hour / server)

Share this post


Link to post
Share on other sites
grhm    4

Luckily I got my tickets the old fashioned way, lots of refreshing pages, but I completely missed this DNS workaround. For next time - how was it discovered, and was there a separate thread for it that i missed while refreshing all those tabs?

Share this post


Link to post
Share on other sites
darkskiez    0

I noticed it pretty quickly when i got a webserver on my work intranet coming up instead of the purchase page, so i did a lookup and spotted they had used a private address 192.168 instead of the NTL range 194.168 the other server was on.

Share this post


Link to post
Share on other sites
bazza    10

If I was into conspiracy theories, I might think that this was on purpose to allow dedicated glasto goers who frequent the efests boards a way of getting tickets...................

Share this post


Link to post
Share on other sites
jenw    3

Happily managed to get tickets without using this. Followed all the instructions including changing to 'run as administrator' but it still wouldn't let me save the changes. Nevermind, worked in the end biggrin.png

Share this post


Link to post
Share on other sites
Aragorn    60

I noticed it pretty quickly when i got a webserver on my work intranet coming up instead of the purchase page, so i did a lookup and spotted they had used a private address 192.168 instead of the NTL range 194.168 the other server was on.

Share this post


Link to post
Share on other sites
scarletmist    22

Just wondered though -- is it better/worse to sell out in an hour, rather than 3 or 4? Personally I'd rather that they spread it out over a few hours, so that the weak and timid would give up early.

[Got mine about 10 minutes before it closed]

Share this post


Link to post
Share on other sites

  • Recently Browsing   0 members

    No registered users viewing this page.



×