DDoS / High Ping / Timeout question

Found a bug in KAC? Post it here.
Post Reply
TnTSCS
Posts: 1
Joined: Sat Sep 18, 2010 6:58 pm

DDoS / High Ping / Timeout question

Post by TnTSCS »

Hello all.

An abusive player who was mic spamming our server last night stated in chat that he was "crash the server"

Anyways, immediately upon taking admin action on him (banning him) at 2300 12/15/10, the server appeared to be DDoS'd. This went on till about 0630 12/16/10.

The server showed as Timeout and restarting the server immediately showed ping between 600-2500. While I was working on the server, trying to figure out what was causing this issue, I had not yet been made privy to this players threats and possible actions.

I thought that a plugin must be causing the issue, maybe KAC or SM updating and stuck in a loop of sorts. Anyways, I sm plugins unload kigen-ac-pub and immediately the server's ping returned to normal. sm plugins load kigen-ac-pub and everything was still fine.

Is there a way this player could have executed a script/command specific to KAC that would cause KAC to freak out and throw the ping so high and timeout the server and appear like a DDoS?

I can provide the players SteamID in a prvmsg if needed. There is nothing in the KAC logs regarding this player :(

Kigen
Site Admin
Posts: 1496
Joined: Sat Jun 07, 2008 11:08 am
Location: Right behind you....
Contact:

Re: DDoS / High Ping / Timeout question

Post by Kigen »

No, there is no known issue with KAC that would create this loop.

Its highly likely that the person use a query spammer. This spammer sends query packets to your server at a fast rate and from falsified IPs.
Image

User avatar
nightrider
Community Moderator
Posts: 878
Joined: Thu Oct 08, 2009 2:38 am
Location: under a rock

Re: DDoS / High Ping / Timeout question

Post by nightrider »

You might want to install this extension
Query Cache 1.7
Protect the server from A2S_INFO DoS attacks.
Every 5 seconds, the data in the A2S_INFO is refreshed to reflect the current values.
located here
http://forums.alliedmods.net/showpost.p ... stcount=34
originally posted in this thread here
http://forums.alliedmods.net/showthread.php?t=134373

matrixmark
Posts: 11
Joined: Thu Sep 16, 2010 1:16 am

Re: DDoS / High Ping / Timeout question

Post by matrixmark »

nightrider wrote:You might want to install this extension
Query Cache 1.7
Protect the server from A2S_INFO DoS attacks.
Every 5 seconds, the data in the A2S_INFO is refreshed to reflect the current values.
located here
http://forums.alliedmods.net/showpost.p ... stcount=34
originally posted in this thread here
http://forums.alliedmods.net/showthread.php?t=134373
That looks good but is there a linux version?

User avatar
nightrider
Community Moderator
Posts: 878
Joined: Thu Oct 08, 2009 2:38 am
Location: under a rock

Re: DDoS / High Ping / Timeout question

Post by nightrider »

matrixmark wrote:That looks good but is there a linux version?
Query Cache 1.7 - Linux & Windows
http://code.google.com/p/querycache/downloads/list

matrixmark
Posts: 11
Joined: Thu Sep 16, 2010 1:16 am

Re: DDoS / High Ping / Timeout question

Post by matrixmark »

Thanks Nightrider :):)

User avatar
nightrider
Community Moderator
Posts: 878
Joined: Thu Oct 08, 2009 2:38 am
Location: under a rock

Re: DDoS / High Ping / Timeout question

Post by nightrider »

My pleasure ... ;)

Post Reply