Recall, when I registered sentechsucks.co.za and their legal firms sent me some nasty letters?
Shaun Dewberry, out of principle, at that time registered suckmywireless.co.za and fucksentech.co.za. I’ll show some solidarity and support Dewberry this time around.
He’s been served with a “takedown” notice, and given six hours to remove his “defamatory” content in the NetDynamics and Online Radio statistics lies saga.
Dear NetDynamics: Screw you. Serve me with a takedown too please. I’ve mirrored Shaun’s opinion piece at https://rodent.za.net/files/dewberry/ , including your takedown notice, and I will continue doing so in various places on the Internet until such time as you get your shit in order. A technical rebuttal is much more effective than legal threats.
Some NetDynamics network facts:
- The main portion of their “CDN” is hosted with PlusServer AG, a brand of the German company Intergenia
- This portion of the “CDN” is a single /27 netblock (85.25.164.32) wide for a total of 32 hosts.
- Their other cdn hosts are scattered around the 188.138.0.0/17 subnet.
- All transit is by Intergenia’s AS8972, a well connected European AS.
I thus support Shaun’s argument that it is unlikely that they’re serving out to 100k+ users, just from the size of their CDN infrastructure.
In fact, some Netflow stats from two medium sized networks (that I cannot name) show that traffic from AS8972, is <300kbps across both networks and has been for a long time. This traffic does not match with the claims made, from a pure back-of-napkin calculation, but hey, stats are always dodgy right ?
The only point that they could contend in Shaun’s assessment of their CDN is that they “anycast” their CDN IP addresses which would make it bigger than what it looks like. Some BGP lookups and traceroutes on local public route servers show this not to be the case. And whilst it’s possible to anycast a single IP address, the typical practice is to anycast a /24 since that is the smallest size that will be generally accepted by a BGP peer, so it’s unlikely in any event.
The bottom line is that Websites and online publications have created associations that force it’s members to use standardised measures such as Nielsens to verify readership, so that there is a verifiable baseline for online content impressions, and to verify reader uniqueness.
These organisations have not yet caught up with Internet Radio, and thus, failing a standardised measure for online listenership measurements, they’ll have to rely on the old school mechanisms that regular stations such as 702 and others use to measure listeners. The SAARF, which measures commercial and community radio listeners seems to be an option.
Ballz and 2Oceans don’t seem to feature there at all.
The only thing Netdynamics could possibly claim is that 100k+ unique IP’s have accessed their servers, and that would probably include portscans, and considering the dynamic nature of IP allocations amongst consumers. I would estimate that 10-20% of 100k IP’s are unique individuals (from experience). That would put NetDynamics served unique customers at around 10k+ unique, which seems more plausible.
The bottom line is that if a Streaming CDN is reporting listener numbers, and if a Radio station is claiming listener numbers then the basic assumption HAS to be “lies, lies, and more fucking lies” because it is in their own self-interest to inflate numbers.
Best argument so far I’ve seen. Thx.
AS20860, which seems to host their Erlyvideo RTMP flash video server traffic is also sub 400kbps average traffic from some of my digging. Still doesn’t add up.
2oceans RTMP server: 78.129.202.37
Ballz RTMP server: 217.147.83.54
[…] There are a few blogs that picked up on the developing story. Some badly written and some providing more punch. Here is Roelf Diedericks's response to NetD's attack in defense of Dewberry. Awesome. -HERE- […]
The RTMP flash video server has only been deployed in the past week or so, as far as I am aware.
An attempt to cover up/build a CDN all of a sudden?
This does indeed seem to be the case. Webservers tend to serve out a file’s last modification date, but maybe these muppets didn’t think about that.
Both flash player pages that are typically framed by both stations, indicate last modification on Tuesday, 26 June.
The Internet Archive shows that 2Ov’s pages previously pointed to
188.138.56.4 which is one of the original Shoutcast based servers in the ND “CDN” that you analyzed. Those pages used a different kind of Flash Player that uses ShoutCast.
http://ballz.ndstream.net/flashplayer.htm is the old player page (that still exists) for Ballz and uses 85.25.164.33, and thus, in the case of Ballz it’s easy to see there that it still uses the Shoutcast stream, but that the page was recently bait-and-switched, as can be seen from the modification dates of both http://ballz.ndstream.net/flashplayer2.htm and http://ballz.ndstream.net/
Bottom Line:
It would indeed appear that ND “recently” (this week) introduced the Flash Media Server bits in order to give credence to their prior Flash Media Claims, and attempt to discredit Shaun’s original research.
There’s a conference next week at Wits on this very stuff. Your input is needed I reckon. Franz Kruger +27 11 717 4083
Netflow stats from 3 very large ISPs in Ireland show exactly 1 packet/s worth of traffic coming from AS8972 in the last day. So wherever those 15000 International listeners are, they’re not here…
Was waiting for some more stats. Thanks for adding Daffy 😉
[…] Other technical experts have also come out in Dewberry’s defence. […]
* The most likely assumption is that the Shoucast servers are being replaced by backend infrastructure that do not public report active and peak listener stats.
* If their Shoucast servers only handled 9% of traffic with the rest being served by Flash (as claimed) then simply looking at the PEAK users stats for Ballz (±830) that would still mean the other 91% is below 10k users.
Quote from MyBroadband: ‘NetDynamix spokesperson Hanz Stricker said “percentage wise, it is reasonable to assume that 90.2% of our traffic is tunnelled to the Flash Media Server. Whereas 9% is tunnelled to a node on our Shoutcast network.”’