New 3369 Server Crash??

[DiXie]

I had a problem last night on my LGI server. (I am not running AntiTCC). Someone came in and was botting...people called him out and tryed to kick-vote him. They were playing FaceClassic and here's the convo:

<s^3>Sky ---> look guys.. vote earl off or i'm out
<s^3>Sky ---> placed a kick vote against Earl
jitter ---> placed a kick vote against Earl
Earl ---> thats it
Earl ---> server crash for bad behavior

and voila, everyone was kicked from the server...the server didn't crash, but everyone got disconnected And yes, I have the 3369 server crash fix.

BTW, Earl was *CLNK!L3RZ*DREAM

Half of my server log was filled with these errors when this happened:

Warning: Failed to load 'UTJabber': Can't find file for package 'UTJabber'
Warning: Failed to load 'Class UTJabber.Translator': Can't find file for package 'UTJabber'
Warning: Failed to load 'AntiTCC119Beta27': Can't find file for package 'AntiTCC119Beta27'
Warning: Failed to load 'Class AntiTCC119Beta27.MutAntiTCCFinal': Can't find file for package 'AntiTCC119Beta27'
Warning: Failed to load '3SPNv257': Can't find file for package '3SPNv257'
Warning: Failed to load 'Class 3SPNv257.MiscPawn': Can't find file for package '3SPNv257'

Then after all those errors it says:

NetComeGo: Close TcpipConnection 24.46.166.184:3975 08/24/06 01:41:12 <--- Earl's IP
Warning: VotingReplicationInfo CTF-FaceClassic.VotingReplicationInfo (Function xVoting.VotingReplicationInfo.ReceiveKickVoteCount :00BC) Accessed None 'NetMode'
NetComeGo: Open myLevel 08/24/06 01:41:12 24.46.166.184:3966
NetComeGo: Close TcpipConnection 68.xxx.xxx.xx:60536 08/24/06 01:41:12
NetComeGo: Close TcpipConnection 69.xxx.xxx.xx:1285 08/24/06 01:41:12
NetComeGo: Close TcpipConnection 24.46.166.184:3966 08/24/06 01:41:12

<some other misc. logs here>

and then Log: PlayAnim: Sequence 'Idle_Character02' not found for mesh 'glumpf'

Has anyone else heard of this? I could see if this happened because I didn't have the crash fix applied...but I do sooooo. I tried searching some strings but didn't find anything. Any help would be greatly appreciated.

[Durp]

Run AntiTCC, it will catch the package

[DiXie]

Originally Posted by DiXie

Warning: Failed to load 'AntiTCC119Beta27': Can't find file for package 'AntiTCC119Beta27'
Warning: Failed to load 'Class AntiTCC119Beta27.MutAntiTCCFinal': Can't find file for package 'AntiTCC119Beta27'

I thought this was weird, Beta27

[ARsEnAl51]

Wormbo has stopped AntiTCC's coding at v1.19 Beta 26. I don't know how nor why you're getting errors related to "AntiTCC119Beta27"...

[SammySoSo]

I will warn you ahead this is a biased opinion but...CLNK!L3RZ are a bunch of noob script kiddys. *CLNK!L3RZ*Devil goes around claiming to be in [DD], and really isn't. My pesronal advice just ban any CLNK!L3RZ, you see on the spot. This is a really old exploit. Can easily be fixed with some UT2004.ini editing. Or a uscript function.

[Wormbo]

Could you send me that server log please? I'd like to analyze the crash/disconnect exploit used.

[DiXie]

Originally Posted by Wormbo

Could you send me that server log please? I'd like to analyze the crash/disconnect exploit used.

Certainly The log is rather lengthy. I'll PM it to you tonight Wormbo, thanks so much

Yes Sammy, I have had a few problems with CLNK!L3RZ in the past. Your help is appreciated. I'll wait to hear Wormbo's thoughts.

[The_IMMortal]

so , whats the decision? what was it or will there fix for it?

[DiXie]

I should have clarified better in my first post; the server didn't actually crash but all players were kicked, most likely from the massive amounts of logs written, as Wormbo confirmed with me.

[The_IMMortal]

Originally Posted by DiXie

I should have clarified better in my first post; the server didn't actually crash but all players were kicked, most likely from the massive amounts of logs written, as Wormbo confirmed with me.

its also a problem . i mean , what was it about? a scurity hole? a bug? will there be a fix?

[Piglet]

Yes - there's a fix for it. This isn't being widely used so I'm told it may get rolled into the next patch

[Piglet]

Oops - Sorry. Move on please folks. Nothing to see here......

[HuntrCker]

Originally Posted by Piglet

Yes - there's a fix for it. This isn't being widely used so I'm told it may get rolled into the next patch

I've seen the same log spamming entries on the CATALYST.UT2004.CTF.Demo Server in recent weeks/months (see below for sample). Could you point me to the right direction for obtaining the fix (if avaiable for demo servers), or is it not publically available?

Log spam Sample, IPWhois=Proxy in China

Originally Posted by Sample CTF Demo Log Excerpt

ScriptLog: New Player ¼þŧ÷¤¼ id=32af618f3ba1ef8264f8deefed08553c
Warning: xPlayer CTF-BridgeOfFate.xPlayer (Function Engine.PlayerController.ServerChatRestriction:0191 ) Accessed None 'PRI'
Warning: Failed to load 'UTJabber': Can't find file for package 'UTJabber'
Warning: Failed to load 'Class UTJabber.Translator': Can't find file for package 'UTJabber'
Warning: Failed to load 'AntiTCC119Beta27': Can't find file for package 'AntiTCC119Beta27'
Warning: Failed to load 'Class AntiTCC119Beta27.MutAntiTCCFinal': Can't find file for package 'AntiTCC119Beta27'
Warning: Failed to load '3SPNv257': Can't find file for package '3SPNv257'
Warning: Failed to load 'Class 3SPNv257.MiscPawn': Can't find file for package '3SPNv257'
Warning: Failed to load 'UTJabber': Can't find file for package 'UTJabber'
Warning: Failed to load 'Class UTJabber.Translator': Can't find file for package 'UTJabber'
Warning: Failed to load 'AntiTCC119Beta27': Can't find file for package 'AntiTCC119Beta27'
NetComeGo: Close TcpipConnection 61.175.192.117:2174 09/18/06 13:19:52

[Piglet]

Originally Posted by HuntrCker

(if avaiable for demo servers)

Demo servers are completely unprotected.

[[ACE]Miniman]

And it won't be fixed either since epic doesn't give a damn about the players who are trying out the game and who MIGHT even buy it later on ...

[Shambler]

In UT2004.ini find Suppress= and at the bottom of the list add:
Suppress=Warning

Not tested of course but should fix the problem.

[fuegerstef]

Originally Posted by [ACE]Miniman

And it won't be fixed either since epic doesn't give a damn about the players who are trying out the game and who MIGHT even buy it later on ...

I started a thread on that very issue on the UT2k7 forums (I asked if Demoservers for UT2k7 will have protection to get new gamers into a (at least to some degree) cheatfree the game, no flaming in the thread).

Result:
It got deleted.

[valisdnb]

It definitely needs to be solved. I think it's time to mount a campaign against this exploit. There's already been 2 other servers that have shut down thanks to PASTO/Dream and there's daily attacks on Huntr's servers (not just the ctf).

[HuntrCker]

Originally Posted by Shambler

In UT2004.ini find Suppress= and at the bottom of the list add:
Suppress=Warning

Not tested of course but should fix the problem.

Tested. Suppresses the log spam, but does nothing for crashing the server.

[Shambler]

Oh yea...I forgot that the demo servers crashing was unrelated to log spam. (log spam was an issue in retail tho, because after the crash was fixed...the logspam was still there until 3355/3369)

Short of trying to bytehack the serverside .u files (I'm not sure if they get checked serverside tho) I'm not sure what you can do.