DDoS / High Ping / Timeout question

Found a bug in KAC? Post it here.
Post Reply
TnTSCS
Posts: 1
Joined: Sat Sep 18, 2010 6:58 pm

DDoS / High Ping / Timeout question

Post by TnTSCS » Thu Dec 16, 2010 9:21 am

Hello all.

An abusive player who was mic spamming our server last night stated in chat that he was "crash the server"

Anyways, immediately upon taking admin action on him (banning him) at 2300 12/15/10, the server appeared to be DDoS'd. This went on till about 0630 12/16/10.

The server showed as Timeout and restarting the server immediately showed ping between 600-2500. While I was working on the server, trying to figure out what was causing this issue, I had not yet been made privy to this players threats and possible actions.

I thought that a plugin must be causing the issue, maybe KAC or SM updating and stuck in a loop of sorts. Anyways, I sm plugins unload kigen-ac-pub and immediately the server's ping returned to normal. sm plugins load kigen-ac-pub and everything was still fine.

Is there a way this player could have executed a script/command specific to KAC that would cause KAC to freak out and throw the ping so high and timeout the server and appear like a DDoS?

I can provide the players SteamID in a prvmsg if needed. There is nothing in the KAC logs regarding this player :(

User avatar
Kigen
Site Admin
Posts: 1495
Joined: Sat Jun 07, 2008 11:08 am
Location: Right behind you....
Contact:

Re: DDoS / High Ping / Timeout question

Post by Kigen » Thu Dec 16, 2010 10:42 am

No, there is no known issue with KAC that would create this loop.

Its highly likely that the person use a query spammer. This spammer sends query packets to your server at a fast rate and from falsified IPs.
Image

User avatar
nightrider
Community Moderator
Posts: 878
Joined: Thu Oct 08, 2009 2:38 am
Location: under a rock

Re: DDoS / High Ping / Timeout question

Post by nightrider » Thu Dec 16, 2010 5:21 pm

You might want to install this extension
Query Cache 1.7
Protect the server from A2S_INFO DoS attacks.
Every 5 seconds, the data in the A2S_INFO is refreshed to reflect the current values.
located here
http://forums.alliedmods.net/showpost.p ... stcount=34
originally posted in this thread here
http://forums.alliedmods.net/showthread.php?t=134373

matrixmark
Posts: 11
Joined: Thu Sep 16, 2010 1:16 am

Re: DDoS / High Ping / Timeout question

Post by matrixmark » Fri Dec 17, 2010 4:23 am

nightrider wrote:You might want to install this extension
Query Cache 1.7
Protect the server from A2S_INFO DoS attacks.
Every 5 seconds, the data in the A2S_INFO is refreshed to reflect the current values.
located here
http://forums.alliedmods.net/showpost.p ... stcount=34
originally posted in this thread here
http://forums.alliedmods.net/showthread.php?t=134373
That looks good but is there a linux version?

User avatar
nightrider
Community Moderator
Posts: 878
Joined: Thu Oct 08, 2009 2:38 am
Location: under a rock

Re: DDoS / High Ping / Timeout question

Post by nightrider » Fri Dec 17, 2010 9:28 am

matrixmark wrote:That looks good but is there a linux version?
Query Cache 1.7 - Linux & Windows
http://code.google.com/p/querycache/downloads/list

matrixmark
Posts: 11
Joined: Thu Sep 16, 2010 1:16 am

Re: DDoS / High Ping / Timeout question

Post by matrixmark » Tue Dec 21, 2010 4:23 am

Thanks Nightrider :):)

User avatar
nightrider
Community Moderator
Posts: 878
Joined: Thu Oct 08, 2009 2:38 am
Location: under a rock

Re: DDoS / High Ping / Timeout question

Post by nightrider » Tue Dec 21, 2010 4:50 pm

My pleasure ... ;)

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest