| Re: A call to the Renegade Community experts [message #475951 is a reply to message #475948] |
Sat, 13 October 2012 14:30   |
 |
Ani
Messages: 399
Registered: February 2012
Location: New York City
Karma: 0
|
Commander |
|
|
| EvilWhiteDragon wrote on Sat, 13 October 2012 16:44 |
Have you monitored BW usage? does it spike during the attack? If so, (D)DOS, if not, attack on the FDS in which case you should ask Seye for help (wiresark capture of the attack in that case).
|
It's not a [D]DoS at all, in fact, when this happens it doesn't even go above a 10th of what the upload speed is capable of. What does happen is the network hovers around 7Mbps consistently (from people ingame, etc), drops down to 0 and then shoots up to like 12Mbps, goes down to 2Mbps.
The 2Mbps represents the activity in teamspeak and another game server, all which is completely unaffected when this is all happening.
Wireshark is a resource hog and crashes after an hour or so of being running..
|
|
|
|
| Re: A call to the Renegade Community experts [message #475953 is a reply to message #475864] |
Sat, 13 October 2012 14:59 |
 |
nikki6ixx
Messages: 2545
Registered: August 2007
Karma: 0
|
General (2 Stars) |
|
|
Haha, if Ethenal even had the knowledge to do whatever imaginary nerdy thing that delusional people are accusing him of, he wouldn't use it on a two-bit Renegade server.
Renegade:
| Aircraftkiller wrote on Fri, 10 January 2014 16:56 |
The only game where everyone competes to be an e-janitor.
|
|
|
|
|
|
|
|
|
|
|
|
|
| Re: A call to the Renegade Community experts [message #475972 is a reply to message #475864] |
Sun, 14 October 2012 04:20 |
 |
EvilWhiteDragon
Messages: 3751
Registered: October 2005
Location: The Netherlands
Karma: 0
|
General (3 Stars) |
|
|
| Ani wrote on Sat, 13 October 2012 23:30 |
| EvilWhiteDragon wrote on Sat, 13 October 2012 16:44 |
Have you monitored BW usage? does it spike during the attack? If so, (D)DOS, if not, attack on the FDS in which case you should ask Seye for help (wiresark capture of the attack in that case).
|
It's not a [D]DoS at all, in fact, when this happens it doesn't even go above a 10th of what the upload speed is capable of. What does happen is the network hovers around 7Mbps consistently (from people ingame, etc), drops down to 0 and then shoots up to like 12Mbps, goes down to 2Mbps.
The 2Mbps represents the activity in teamspeak and another game server, all which is completely unaffected when this is all happening.
Wireshark is a resource hog and crashes after an hour or so of being running..
|
No need to be offensive if I explain how you can solve it. But in any case, have fun solving it then.
Also, it dropping to 0 implies something wrong with network/network config.
BlackIntel admin/founder/PR dude (not a coder)
Please visit http://www.blackintel.org/
| V, V for Vendetta |
People should not be afraid of their governments.
Governments should be afraid of their people.
|
|
|
|
|
|
|
|
|
| Re: A call to the Renegade Community experts [message #475984 is a reply to message #475972] |
Sun, 14 October 2012 10:07 |
|
Ani
Messages: 399
Registered: February 2012
Location: New York City
Karma: 0
|
Commander |
|
|
| EvilWhiteDragon wrote on Sun, 14 October 2012 07:20 |
| Ani wrote on Sat, 13 October 2012 23:30 |
| EvilWhiteDragon wrote on Sat, 13 October 2012 16:44 |
Have you monitored BW usage? does it spike during the attack? If so, (D)DOS, if not, attack on the FDS in which case you should ask Seye for help (wiresark capture of the attack in that case).
|
It's not a [D]DoS at all, in fact, when this happens it doesn't even go above a 10th of what the upload speed is capable of. What does happen is the network hovers around 7Mbps consistently (from people ingame, etc), drops down to 0 and then shoots up to like 12Mbps, goes down to 2Mbps.
The 2Mbps represents the activity in teamspeak and another game server, all which is completely unaffected when this is all happening.
Wireshark is a resource hog and crashes after an hour or so of being running..
|
No need to be offensive if I explain how you can solve it. But in any case, have fun solving it then.
Also, it dropping to 0 implies something wrong with network/network config.
|
I wasn't trying to be offensive and I can't see how I was, but if I was then I apologize.
We've been using DUMeter btw, which may be buggy but it's definitely a good tool to have. Shows utilization (which is how I can tell it's not a DDoS) but doesn't specify what connections are made.
|
|
|
|
|
|
|
|
| Re: A call to the Renegade Community experts [message #475999 is a reply to message #475864] |
Sun, 14 October 2012 14:41 |
iRANian
Messages: 4308
Registered: April 2011
Karma: 0
|
General (4 Stars) |
|
|
From the description of what happens (mass disconnect of players) it seems like the same thing as what Wilo did. Considering wilo's friend is active exploiting brenbot bugs on jelly and st0rm.net is a wasteland, it wouldn't be surprising if it's him.
One thing I can't remember is whether Jelly found an actual method to stop the attacks or whether the attacks themselves stopped.
Long time and well respected Renegade community member, programmer, modder and tester.
Scripts 4.0 private beta tester since May 2011.
My Renegade server plugins releases
[Updated on: Sun, 14 October 2012 14:43] Report message to a moderator |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Search
Help
Members
Register
Login
Home
Got a friend of mine who has set snort up with some advanced features so the flooding should stop now so the server will be a lot more stable 
