On Tue, Apr 04, 2017 at 09:47:23PM -0300, Kurt Kraut wrote: > But one of my collegues quickly realized the incoming MAC ADDRESS was the > actual Facebook router we have a peering at a internet exchange. So indeed > the traffic came from their network.
If you've got a bilateral peering session with Facebook, presumably you have some sort of technical contact there that you can reach out to and ask "WTF?". That would seem to be a good first step. - Matt