Re: [hlds] Looking for solution regarding CS:S server crashing exploit / tool

2009-06-26 Thread Chad Austin
Check your bandwidth usage.
If the bandwidth usage spikes to some crazy value, its just a DDOS 
attack and theres not much you can do.
Try to get the guy to crash your server when you are watching and record 
the packets with Wireshark. It can't be too hard to coax him into 
attacking you.
It woldn't be too hard with the packet capture to see what he is doing.

Hans Vos wrote:
> Hi,
>
>   
>> Yea, this video is just a fake to get people to buy it (posted on a site
>> somewhere im guessing).
>> You get exactly the same effect by typing;
>>
>> rcon_address xxx.xxx.xxx.xxx:
>>
>> and then just spamming
>>
>> rcon whatever
>>
>> After a few tries, the server will just stop accepting packets from your
>> connection (including ping packets) and make it appear that the server is
>> offline.
>> 
>
> Ok, this very well might be fake, but the fact remains that there is 
> some way to actually crash the game server. There is topic currently on 
> our community forum with complaints from a lot of regulars that somebody 
> is disrupting wars, and that he can do this whenever he likes. They 
> blocked this person on Friends to prevent the abuser to see in which 
> game server they are playing.
>
>   


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] Looking for solution regarding CS:S server crashing exploit / tool

2009-06-26 Thread Hans Vos
Hi,

> Yea, this video is just a fake to get people to buy it (posted on a site
> somewhere im guessing).
> You get exactly the same effect by typing;
> 
> rcon_address xxx.xxx.xxx.xxx:
> 
> and then just spamming
> 
> rcon whatever
> 
> After a few tries, the server will just stop accepting packets from your
> connection (including ping packets) and make it appear that the server is
> offline.

Ok, this very well might be fake, but the fact remains that there is 
some way to actually crash the game server. There is topic currently on 
our community forum with complaints from a lot of regulars that somebody 
is disrupting wars, and that he can do this whenever he likes. They 
blocked this person on Friends to prevent the abuser to see in which 
game server they are playing.

-- 
Kind regards,

Hans

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] Looking for solution regarding CS:S server crashing exploit / tool

2009-06-26 Thread Olly
Yea, this video is just a fake to get people to buy it (posted on a site
somewhere im guessing).
You get exactly the same effect by typing;

rcon_address xxx.xxx.xxx.xxx:

and then just spamming

rcon whatever


After a few tries, the server will just stop accepting packets from your
connection (including ping packets) and make it appear that the server is
offline.

2009/6/26 bl4nk 

> It looks like it might just be the failed rcon attempts or something.
> The program just seems to generate a cfg file that you execute via
> console, so that's about all I can think of.
>
> Hans Vos wrote:
> > Hello,
> >
> > I just found this video on YouTube which shows how to crash a
> > Counter-Strike: Source game server using some kind of tool. I work as
> > voltunteer for a large e-sports organization in The Netherlands
> > (Gamelux.nl) and we are having trouble with people using this during
> > official matches. Does anybody have more information and possibly a fix
> > for this?
> >
> >  From what I've gathered so far that it is some kind of overflow script
> > which send a abnormal amount of connections to the game port. I have
> > confirmed there is a plugin which counts the amount of connections and
> > then blocks the IP. But I cannot convince this person to share this
> > plugin with me unfortunately.
> >
> > Nothing is shown in the server logs. Just a abrupt end of the log during
> > normal operation. No information to trace the user of the exploit.
> >
> > http://www.youtube.com/watch?v=Nj5zWNNuBdo&fmt=22
> >
> >
>
>
> ___
> To unsubscribe, edit your list preferences, or view the list archives,
> please visit:
> http://list.valvesoftware.com/mailman/listinfo/hlds
>



-- 
Sent from Olly's SEGA Game Gear
___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


Re: [hlds] Looking for solution regarding CS:S server crashing exploit / tool

2009-06-26 Thread bl4nk
It looks like it might just be the failed rcon attempts or something. 
The program just seems to generate a cfg file that you execute via 
console, so that's about all I can think of.

Hans Vos wrote:
> Hello,
>
> I just found this video on YouTube which shows how to crash a 
> Counter-Strike: Source game server using some kind of tool. I work as 
> voltunteer for a large e-sports organization in The Netherlands 
> (Gamelux.nl) and we are having trouble with people using this during 
> official matches. Does anybody have more information and possibly a fix 
> for this?
>
>  From what I've gathered so far that it is some kind of overflow script 
> which send a abnormal amount of connections to the game port. I have 
> confirmed there is a plugin which counts the amount of connections and 
> then blocks the IP. But I cannot convince this person to share this 
> plugin with me unfortunately.
>
> Nothing is shown in the server logs. Just a abrupt end of the log during 
> normal operation. No information to trace the user of the exploit.
>
> http://www.youtube.com/watch?v=Nj5zWNNuBdo&fmt=22
>
>   


___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds


[hlds] Looking for solution regarding CS:S server crashing exploit / tool

2009-06-26 Thread Hans Vos
Hello,

I just found this video on YouTube which shows how to crash a 
Counter-Strike: Source game server using some kind of tool. I work as 
voltunteer for a large e-sports organization in The Netherlands 
(Gamelux.nl) and we are having trouble with people using this during 
official matches. Does anybody have more information and possibly a fix 
for this?

 From what I've gathered so far that it is some kind of overflow script 
which send a abnormal amount of connections to the game port. I have 
confirmed there is a plugin which counts the amount of connections and 
then blocks the IP. But I cannot convince this person to share this 
plugin with me unfortunately.

Nothing is shown in the server logs. Just a abrupt end of the log during 
normal operation. No information to trace the user of the exploit.

http://www.youtube.com/watch?v=Nj5zWNNuBdo&fmt=22

-- 
Kind regards,

Hans

___
To unsubscribe, edit your list preferences, or view the list archives, please 
visit:
http://list.valvesoftware.com/mailman/listinfo/hlds