Page 1 of 1

Eye Angles Ban?

Posted: Wed Dec 02, 2009 12:32 am
by Siezmik
I went ahead and setup KAC on our L4D2 server earlier today, and tonight while playing I got banned from our own server with an "eye angles" infraction.

This is on a modded server (various cvar tweaks and mods), and the client on my machine is bone stock with the exception of the following HUD mod - http://forums.steampowered.com/forums/s ... ?t=1047996

Any idea what could cause this? Surely this is a bug.

Here is the ban from the KAC log:
L 12/02/2009 - 06:16:53: *OMC* Siezmik © (ID: STEAM_1:0:4025867 | IP: xxx.xxx.xxx.xxx) was banned for cheating with their eye angles. Eye Angles: 91.542434 332.245819 0.000000

On a side note, this is the first time I've seen KAC in action. We never did catch anyone on our L4D server, so I never got to see a log created or the plugin kick/ban anyone.

Re: Eye Angles Ban?

Posted: Wed Dec 02, 2009 11:21 am
by nightrider
As of Kigen's post Sat Nov 28 - KAC hasn't been tested with L4D2.
See Kigen's post here.
viewtopic.php?p=1341#p1341


Here is the list of convar settings that you might try adjusting on or off.

1. kac_version - Version of KAC (not changable)
2. kac_cvars_enable - If the CVar detection engine is enabled or not.
3. kac_cmds_enable - If the Command protection engine is enabled or not.
4. kac_cmds_spam - Amount of commands in a second before the player gets kicked. (Set to 0 to disable)

5. kac_eyes_enable - If the Eye Test detection routine is enabled or not.
6. kac_eyes_antiwall - Enable/Disable antiwall. By default it is disabled. (Only works for CS:S.)
7. kac_eyes_antiwall_wait - Process only every x tick. Delays Antiwall processing every x tick. Default is 0 (meaning processing every tick).


Specifically regarding the KAC eye test detection:

About the Eye Test engine

This one is the new detection routine. You aren't likely to see a whole lot from it but what it does is test for impossible eye angles coming from clients. By default a client will never send eye angles past 90 and -90 degrees on the X or Z axis. Cheats however disable this behavior for a multitude of cheat features. This part of the plugin now enables KAC to test for these. This part of the plugin now also hosts the Anti-Wallhack. The Anti-Wallhack works off of testing if another player is about to be visible to the player, if not it doesn't send the other players' position to the player. So thus wallhacks have nothing to use.

Re: Eye Angles Ban?

Posted: Wed Dec 02, 2009 3:51 pm
by Siezmik
Well, it's not crashing the server as seems to be happening with some others, so I guess that's a good thing. I'll go ahead and disable the kac_eyes_enable for the time being.

I'll let you guys know if anything else goes wonky.

Thanks for the help!

Re: Eye Angles Ban?

Posted: Wed Dec 02, 2009 3:54 pm
by nightrider
You are welcome.

Re: Eye Angles Ban?

Posted: Thu Jan 21, 2010 11:03 am
by Twilight
About the Eye Test engine

This one is the new detection routine. You aren't likely to see a whole lot from it but what it does is test for impossible eye angles coming from clients. By default a client will never send eye angles past 90 and -90 degrees on the X or Z axis. Cheats however disable this behavior for a multitude of cheat features.
So, specifically, what cheat features and why do they using such angles? And could this be visible to spectators? 'cause we recently got 2 bans with "KAC: Eye Angles Violation" reason.

Code: Select all

L 01/17/2010 - 16:03:59: Arckas (ID: STEAM_0:0:18685734 | IP: 90.47.166.194) was banned for cheating with their eye angles.  Eye Angles: -157.346801 183.960571 0.000000
L 01/18/2010 - 17:22:16: CaStrRo (ID: STEAM_0:0:29338646 | IP: 93.111.4.126) was banned for cheating with their eye angles.  Eye Angles: -135.885620 75.080566 0.000000
I watched both demo-recordings from our sourcetv and haven't seen anything unusual, no speed/wallhacks, no antirecoil/spread, no aim/spinbot. Both guys just played for a while, then picked up M3 shotgun, teamattacked and get banned all of a sudden.

Code: Select all

L 01/17/2010 - 16:03:59: "Arckas<447><STEAM_0:0:18685734><CT>" attacked "[GT] BuG<420><STEAM_0:1:28523174><CT>" with "m3" (damage "5") (damage_armor "0") (health "92") (armor "98") (hitgroup "left leg")
L 01/17/2010 - 16:03:59: "Arckas<447><STEAM_0:0:18685734><CT>" attacked "[GT] BuG<420><STEAM_0:1:28523174><CT>" with "m3" (damage "14") (damage_armor "7") (health "78") (armor "90") (hitgroup "head")
L 01/17/2010 - 16:03:59: "Arckas<447><STEAM_0:0:18685734><CT>" attacked "[GT] BuG<420><STEAM_0:1:28523174><CT>" with "m3" (damage "3") (damage_armor "1") (health "75") (armor "88") (hitgroup "chest")
L 01/17/2010 - 16:03:59: "Arckas<447><STEAM_0:0:18685734><CT>" attacked "[GT] BuG<420><STEAM_0:1:28523174><CT>" with "m3" (damage "3") (damage_armor "1") (health "72") (armor "86") (hitgroup "left arm")
L 01/17/2010 - 16:03:59: "Arckas<447><STEAM_0:0:18685734><CT>" attacked "[GT] BuG<420><STEAM_0:1:28523174><CT>" with "m3" (damage "3") (damage_armor "1") (health "69") (armor "84") (hitgroup "left arm")
L 01/17/2010 - 16:03:59: "Arckas<447><STEAM_0:0:18685734><CT>" attacked "[GT] BuG<420><STEAM_0:1:28523174><CT>" with "m3" (damage "3") (damage_armor "1") (health "66") (armor "82") (hitgroup "chest")
L 01/17/2010 - 16:03:59: "Arckas<447><STEAM_0:0:18685734><CT>" attacked "[GT] BuG<420><STEAM_0:1:28523174><CT>" with "m3" (damage "3") (damage_armor "1") (health "63") (armor "80") (hitgroup "chest")
L 01/17/2010 - 16:03:59: "Arckas<447><STEAM_0:0:18685734><CT>" disconnected (reason "Vous avez ete banne de ce serveur, allez sur http://our_host/bans pour plus d'informations")

Code: Select all

L 01/18/2010 - 17:22:15: "Fraer[ok]<718><STEAM_0:0:429155705><CT>" attacked "CaStrRo<745><STEAM_0:0:29338646><CT>" with "scout" (damage "26") (damage_armor "0") (health "74") (armor "0") (hitgroup "chest")
L 01/18/2010 - 17:22:16: "CaStrRo<745><STEAM_0:0:29338646><CT>" attacked "Fraer[ok]<718><STEAM_0:0:429155705><CT>" with "m3" (damage "7") (damage_armor "0") (health "92") (armor "0") (hitgroup "chest")
L 01/18/2010 - 17:22:16: "CaStrRo<745><STEAM_0:0:29338646><CT>" attacked "Fraer[ok]<718><STEAM_0:0:429155705><CT>" with "m3" (damage "7") (damage_armor "0") (health "85") (armor "0") (hitgroup "chest")
L 01/18/2010 - 17:22:16: "CaStrRo<745><STEAM_0:0:29338646><CT>" attacked "Fraer[ok]<718><STEAM_0:0:429155705><CT>" with "m3" (damage "30") (damage_armor "0") (health "55") (armor "0") (hitgroup "head")
L 01/18/2010 - 17:22:16: "CaStrRo<745><STEAM_0:0:29338646><CT>" attacked "Fraer[ok]<718><STEAM_0:0:429155705><CT>" with "m3" (damage "7") (damage_armor "0") (health "48") (armor "0") (hitgroup "left arm")
L 01/18/2010 - 17:22:16: "CaStrRo<745><STEAM_0:0:29338646><CT>" attacked "Fraer[ok]<718><STEAM_0:0:429155705><CT>" with "m3" (damage "30") (damage_armor "0") (health "18") (armor "0") (hitgroup "head")
L 01/18/2010 - 17:22:16: "CaStrRo<745><STEAM_0:0:29338646><CT>" attacked "Fraer[ok]<718><STEAM_0:0:429155705><CT>" with "m3" (damage "7") (damage_armor "0") (health "11") (armor "0") (hitgroup "chest")
L 01/18/2010 - 17:22:16: "CaStrRo<745><STEAM_0:0:29338646><CT>" attacked "Fraer[ok]<718><STEAM_0:0:429155705><CT>" with "m3" (damage "7") (damage_armor "0") (health "4") (armor "0") (hitgroup "left arm")
L 01/18/2010 - 17:22:16: "CaStrRo<745><STEAM_0:0:29338646><CT>" disconnected (reason "Sie wurden von diesem Server gebannt, weitere Informationen auf http://our_host/bans")
Could this be due to false positive detecion or other reason?
(game - CS:S)

Re: Eye Angles Ban?

Posted: Mon Jan 25, 2010 3:55 am
by Kigen
I've been unsuccessful in getting any false bans for Eye Angles on Counter-Strike: Source.

As far as Left 4 Dead, I do not recommend running Eye Angles on Left 4 Dead.

Re: Eye Angles Ban?

Posted: Mon Feb 15, 2010 3:51 pm
by Twilight
Nah, i'm still not sure that all "Eye Angles" bans are fair. I've got another guy banned (again on office) for teamattack with shotgun (but this time automatic xm1014)

Code: Select all

L 02/15/2010 - 18:49:26: "TIGER<472><STEAM_0:0:115...><TERRORIST>" attacked "MARIO CZ<467><STEAM_0:1:251...><TERRORIST>" with "xm1014" (damage "5") (damage_armor "0") (health "39") (armor "87") (hitgroup "left leg")
L 02/15/2010 - 18:49:26: "TIGER<472><STEAM_0:0:115...><TERRORIST>" attacked "MARIO CZ<467><STEAM_0:1:251...><TERRORIST>" with "xm1014" (damage "5") (damage_armor "0") (health "34") (armor "87") (hitgroup "left leg")
L 02/15/2010 - 18:49:26: "TIGER<472><STEAM_0:0:115...><TERRORIST>" attacked "MARIO CZ<467><STEAM_0:1:251...><TERRORIST>" with "xm1014" (damage "5") (damage_armor "0") (health "29") (armor "87") (hitgroup "right leg")
L 02/15/2010 - 18:49:26: "TIGER<472><STEAM_0:0:115...><TERRORIST>" attacked "MARIO CZ<467><STEAM_0:1:251...><TERRORIST>" with "xm1014" (damage "5") (damage_armor "0") (health "24") (armor "87") (hitgroup "left leg")
L 02/15/2010 - 18:49:26: "TIGER<472><STEAM_0:0:115...><TERRORIST>" attacked "MARIO CZ<467><STEAM_0:1:251...><TERRORIST>" with "xm1014" (damage "5") (damage_armor "0") (health "19") (armor "87") (hitgroup "right leg")
L 02/15/2010 - 18:49:26: "TIGER<472><STEAM_0:0:115...><TERRORIST>" attacked "MARIO CZ<467><STEAM_0:1:251...><TERRORIST>" with "xm1014" (damage "5") (damage_armor "0") (health "14") (armor "87") (hitgroup "right leg")
L 02/15/2010 - 18:49:26: "TIGER<472><STEAM_0:0:115...><TERRORIST>" disconnected (reason "Вы были забанены на этом сервере, для получения информации посетите: http://our_site/bans")

L 02/15/2010 - 18:49:26: TIGER (ID: STEAM_0:0:115... | IP: 178.93.x.x) was banned for cheating with their eye angles.  Eye Angles: -125.608520 85.578002 0.000000

Sure, when someone joins team (spawn), and then right after or after few seconds got banned with x-angle 180 it is obvious that he had his cheat enabled.

Code: Select all

L 02/09/2010 - 17:15:55: "[gr]screamв„ў<448><STEAM_ID_PENDING><>" connected, address "85.73.x.x:25717"
L 02/09/2010 - 17:15:55: "[gr]screamв„ў<448><STEAM_0:0:893...><>" STEAM USERID validated
L 02/09/2010 - 17:15:59: "[gr]screamв„ў<448><STEAM_0:0:893...><>" entered the game
L 02/09/2010 - 17:16:07: "[gr]screamв„ў<448><STEAM_0:0:893...><Unassigned>" joined team "CT"
L 02/09/2010 - 17:16:07: "[gr]scream™<448><STEAM_0:0:893...><CT>" disconnected (reason "Вы были забанены на этом сервере, для получения информации посетите: http://our_site/bans")

L 02/09/2010 - 17:16:07: [gr]screamв„ў (ID: STEAM_0:0:893... | IP: 85.73.x.x) was banned for cheating with their eye angles.  Eye Angles: 180.000000 104.512939 0.000000

But when someone plays normally for 20 minutes, and then in the middle of the round, during gunplay, fast but smoothly moves his crosshair down (looked like mouse sensor had been confused) - it looks very unlogical for me to turn on cheat all of a sudden.

Code: Select all

L 01/31/2010 - 20:18:42: ßy $/v\Ǿķ€ (™) (ID: STEAM_0:0:631... | IP: 93.127.x.x) was banned for cheating with their eye angles.  Eye Angles: 95.037231 6.487426 0.000000
Or the same thing, with crosshair smoothly moves down like because of mouse sensor have been confused, on empty server after bomb placement.

Code: Select all

L 02/08/2010 - 19:40:58: "Krale<282><STEAM_ID_PENDING><>" connected, address "93.86.x.x:10065"
L 02/08/2010 - 19:40:59: "Krale<282><STEAM_0:0:204...><>" STEAM USERID validated
L 02/08/2010 - 19:41:05: "Krale<282><STEAM_0:0:204...><>" entered the game
L 02/08/2010 - 19:41:10: "Krale<282><STEAM_0:0:204...><Unassigned>" joined team "TERRORIST"
L 02/08/2010 - 19:41:12: "Krale<282><STEAM_0:0:204...><TERRORIST>" triggered "Got_The_Bomb"
L 02/08/2010 - 19:42:15: "Krale<282><STEAM_0:0:204...><TERRORIST>" triggered "Planted_The_Bomb"
L 02/08/2010 - 19:42:18: "Krale<282><STEAM_0:0:204...><TERRORIST>" disconnected (reason "You have been banned by this server, check http://our_site/bans for more info")

L 02/08/2010 - 19:42:18: Krale (ID: STEAM_0:0:204... | IP: 93.86.x.x) was banned for cheating with their eye angles.  Eye Angles: 90.208740 296.575927 0.000000

Maybe some possibility exists, that wrong angles could be registered without cheats? If you can't reproduce an issue, it's not necessarily means that issue doesn't exist at all. But i realize, that you can't fix if you don't know what's broken. Also i'd like to know, what happens when angles' values have been corrupted during network transfer or due to software issues?