[Killa[DGZ]]

So, i just went to check on my server a few moments ago and i was completely blown away by the fact it had crashed?

i found this in the crashlog.. i don't have any idea what it means and i've never seen it before or even a crash for that matter.. ever!


SA-MP Server: 0.3e-R2



Exception At Address: 0x0047FF0B Module: (Unknown)



Registers:

EAX: 0x00000000 EBX: 0x00000000 ECX: 0x0000FFFF EDX: 0x00000016

ESI: 0x43D1D760 EDI: 0x00000000 EBP: 0xFFFFFFFF ESP: 0x0018EF04

EFLAGS: 0x00010246



Stack:

+0000: 0x0018F328 0x43D1D760 0x02959C58 0x7A0EED71

+0010: 0x00000000 0x0018F064 0x004A5341 0x00000001

+0020: 0x00480011 0x00000009 0x00466929 0x02959C58

+0030: 0x7A0E7AB2 0x0018F7E4 0x7A0EED71 0x0000000C

+0040: 0x43D1D760 0x00000000 0x00000003 0x00000000

+0050: 0x00000080 0x00000491 0x00000000 0xF40012E6

+0060: 0x0000000C 0x00000000 0x66F118B8 0x00000000

+0070: 0x00000000 0x00000000 0x00234494 0x00000000

+0080: 0x002343E0 0x00000003 0x00000000 0x43D1D6C8

+0090: 0x43D1D760 0x0018EFD4 0x0000000C 0x00000000

+00A0: 0x01000000 0x00000000 0x00000060 0x0101F0BC

+00B0: 0x0018EEEC 0x00000000 0x0018F02C 0x773871D5

+00C0: 0x04D02358 0xFFFFFFFE 0x7734389A 0x77343492

+00D0: 0x00000000 0x43D1D6F0 0x43D1D6F0 0x02959C58

+00E0: 0x00000000 0x43D1D6E8 0x0018F000 0x76B714DD

+00F0: 0x00230000 0x00000000 0x43D1D6F0 0x0018F03C

+0100: 0x00493271 0x00230000 0x00000000 0x00493276

+0110: 0x02959C58 0x0018F0BC 0x00000000 0x43D1D728

+0120: 0x0018F014 0x02959C58 0x0018F070 0x00497668

+0130: 0x004B22D0 0xFFFFFFFF 0x00493276 0x0048E524



--------------------------



Loaded Modules:

-FailedCreate-


modules wtf?.. could this be some kind of exploit?

Nevermind.. i'm pretty sure it was this idiot, i don't care about much releasing his ip either.. he's probably changed it by now anyway :P

Just check the timestamps and playerid on this shit..

http://uppit.com/mluyyu92qfos/fucktard.txt

in pawno you can see its 8880+ lines.. the server stalled for a bit there.. but its around 8880 connects in 60 seconds.

Strange thing is my server will only allow 5 people from the same ip at any one time.. anymore than that is a ban, it just didn't happen.

Today this problem has become even worse, they really must be developing this shit an my server just can't be online for long without an attack and when that occurs the samp-server.exe just crashes and closes as can be expected. I really did try to come about a fix for this most of today.. but I've found it hard given the fact that all these bots are connecting on the exact same id (2) with the same ip just a different name.. this time it was well over 9000 connections from what i see as less than 60 seconds

the log of this incident, including the idiot's ip address.. i must add that I wasn't very impressed with his name either, how rude.

http://uppit.com/78wxd1o3fjcw/fucktard_returns.txt

Would anyone have any idea on how to detect this?..

Just an update, it seems according to the logs that OnPlayerDisconnect never gets called for any of those names?

for example, in 1000ms or one second alone we have,

Code:

[07:07:12] [join] Trollname_DTCM has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DaEf has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_D72m has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DENP has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_D4eU has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_D6FU has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DcMo has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_Db80 has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DwvR has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DK2X has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DsVP has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DWC1 has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DzAB has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DMh2 has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_Dmfu has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DaNO has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DDVe has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DJVF has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_Dqiw has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_D60o has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DljR has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DX54 has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DadE has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_Dswv has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DUSs has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DN6H has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DPFH has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_Dnju has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_Dp7h has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DRyt has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_D00e has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DDFI has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DWIZ has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_Dk4d has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DpVR has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DcbQ has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DqL7 has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DULz has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DnAV has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DTp6 has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DG4s has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DPVZ has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DWCp has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_D5pd has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_Doyx has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DIBX has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_Dvam has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DiKI has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DlKF has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DQHU has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DNQr has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_Dawk has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DFim has joined the server (2:xxx.xxx.xxx.xxx)
[07:07:12] [join] Trollname_DQYv has joined the server (2:xxx.xxx.xxx.xxx)

but none leave? because there is no,

[part] Trollname_DTCM has left the server (2:1)

an so on..

If thats right, would a simple variable stating that the playerid is already consumed work?
such as something like "gPlayerSlotUsed[playerid] = false;" under OnPlayerDisconnect and "true" under OnPlayerConnect an if its already 'true' when another attempts to connect on that playerid.. ban/rangeban?

Obviously they can specify the slot(s) to be used, but still no idea how all those names pile in on one single slot, I didn't think that was ever possible.

So, I'll try my theory an see what happens, the good thing is that nobody can be banned by accident if I'm wrong :P

[dugi]

See this thread: https://sampforum.blast.hk/showthread.php?tid=320614

[Killa[DGZ]]

Thank you dugi, i honestly did use the search function mate to try and find something, just never searched for "flood control" silly me lol :P

Thanks again