Server crashes.....

  • Please make sure you are familiar with the forum rules. You can find them here: https://forums.tripwireinteractive.com/index.php?threads/forum-rules.2334636/

lVlal2ll3ol2o

FNG / Fresh Meat
Mar 28, 2012
91
1
0
Is Tripwire looking into this yet? We've been getting those crashes a lot lately and it can be any ports. I can't seem to find out which IP was doing this so I can block them.
 

RonaldLee

FNG / Fresh Meat
Apr 27, 2012
181
1
0
Florida
www.1upclan.info
Lol.... Anyway I did a little more observations and the exploit crashes the server twice with one hit... so it crashes once then it crashes it a second time.
and my server just got hit again.
My server crashed twice today again so far. This is really getting out of hand. This game has sold over a million copies, which certainly has generated enough revenue to warrant somebody sitting down to code a solution in a matter of a few hours. Come on. I would be happy to pay for the coding myself if I had the source.
 

dangercake

Member
Sep 10, 2010
287
19
18
Carrollton, Texas
My server crashed twice today again so far. This is really getting out of hand. This game has sold over a million copies, which certainly has generated enough revenue to warrant somebody sitting down to code a solution in a matter of a few hours. Come on. I would be happy to pay for the coding myself if I had the source.

yeah Twi could just always update the build version and be done with this, or they can just patch the IpDrv.u or IpServer.u

BTW this tool can crash the server twice for servers that use restart scripts
 
Last edited:

deckardblade

Member
Jan 16, 2011
179
7
18
Chicago, US
Gave it another shot for the heck of it, still can't get it to crash any of my servers.

Although I don't have a Windows server to test so maybe it does work on those.
Spoiler!
 

dangercake

Member
Sep 10, 2010
287
19
18
Carrollton, Texas
Gave it another shot for the heck of it, still can't get it to crash any of my servers.

Although I don't have a Windows server to test so maybe it does work on those.
Spoiler!

have you tried setting that local ip to the public ip of the network your running off? and the target port must be the 7717 UDP/IP (GameSpy Query Port) or whatever your gamespy port is set to
 
Last edited:

deckardblade

Member
Jan 16, 2011
179
7
18
Chicago, US
My servers are crashing several times per day. The problem is real and needs to be addressed. Wonderful to hear your servers have not crashed.

Address what problem? Have any of you even tested crashing your own servers? Or are you going off of the readme/source of that metasploit exploit that simply says it's possible?

Skillz's servers aren't being crashed either.

How are you proving that an exploit, let alone this one is the one that's crashing your server? Because an IP joins and then your server crashes?

You've traced the network communication back to those IPs and determined that they did send a specific UDP packet that crashed your servers?

I see lots of assumptions but nothing concrete, yes your servers are crashing and that's not good. If you can't replicate a problem then how do you know that's the problem?

If I were hosting a server on a Windows desktop over a residential connection (even FIOS) I'd expect some stability problems.
 

dangercake

Member
Sep 10, 2010
287
19
18
Carrollton, Texas
Address what problem? Have any of you even tested crashing your own servers? Or are you going off of the readme/source of that metasploit exploit that simply says it's possible?

Skillz's servers aren't being crashed either.

How are you proving that an exploit, let alone this one is the one that's crashing your server? Because an IP joins and then your server crashes?

You've traced the network communication back to those IPs and determined that they did send a specific UDP packet that crashed your servers?

I see lots of assumptions but nothing concrete, yes your servers are crashing and that's not good. If you can't replicate a problem then how do you know that's the problem?

If I were hosting a server on a Windows desktop over a residential connection (even FIOS) I'd expect some stability problems.

lol ask the guy from IGC having the same problems as me and no i cannot trace the ips since they all use proxies. We'll just see.
 
Last edited:

RonaldLee

FNG / Fresh Meat
Apr 27, 2012
181
1
0
Florida
www.1upclan.info
Address what problem? Have any of you even tested crashing your own servers? Or are you going off of the readme/source of that metasploit exploit that simply says it's possible?

Skillz's servers aren't being crashed either.

How are you proving that an exploit, let alone this one is the one that's crashing your server? Because an IP joins and then your server crashes?

You've traced the network communication back to those IPs and determined that they did send a specific UDP packet that crashed your servers?

I see lots of assumptions but nothing concrete, yes your servers are crashing and that's not good. If you can't replicate a problem then how do you know that's the problem?

If I were hosting a server on a Windows desktop over a residential connection (even FIOS) I'd expect some stability problems.

I am running GSP servers.
My problem is that sometimes --that means 2 to 5 times per day-- when the map changes (stock or custom) the server crashes. I do not think it is a ram related issue. There must be something causing a buffer overflow or something.

I have successfully run urt and ioquake3 servers for 4 years. At one point I was successfully running 22 gameservers and was actively involved in several modding projects. I have a dedi box as well for my main urt servers and so I have some experience in dealing with administration. I don't need someone to "hold my hand" to run a server. If this were urt or ioquake3 I would just have a solution coded because I have the server binary source (anyone can get that of course). Here, my hands are tied because I have no access to source.

One thing I have not tried is removing voting and just having the server automatically change maps with a mapcycle. That could be the problem because the crash occurs after a vote that leads to the map change. As for crash logs, I have so many that it is ridiculous.
 

dangercake

Member
Sep 10, 2010
287
19
18
Carrollton, Texas
I am running GSP servers.
My problem is that sometimes --that means 2 to 5 times per day-- when the map changes (stock or custom) the server crashes. I do not think it is a ram related issue. There must be something causing a buffer overflow or something.

I have successfully run urt and ioquake3 servers for 4 years. At one point I was successfully running 22 gameservers and was actively involved in several modding projects. I have a dedi box as well for my main urt servers and so I have some experience in dealing with administration. I don't need someone to "hold my hand" to run a server. If this were urt or ioquake3 I would just have a solution coded because I have the server binary source (anyone can get that of course). Here, my hands are tied because I have no access to source.

One thing I have not tried is removing voting and just having the server automatically change maps with a mapcycle. That could be the problem because the crash occurs after a vote that leads to the map change. As for crash logs, I have so many that it is ridiculous.

well that doesn't seem like an ip is crashing you, re verify your server files and see if any of the core files are failing.
 

deckardblade

Member
Jan 16, 2011
179
7
18
Chicago, US
lol ask the guy from IGC having the same problems as me and no i cannot trace the ips since they all use proxies. We'll just see.

I didn't mean trace the IP back to the host. I should have been more specific.

You'll need to use something like wire shark to record your incoming packets to a log file and then see what kind of packets those IPs are sending to your server (it doesn't matter where they're coming from, you're testing to see if the packet/s they're sending are what's actually crashing your server).

Or you could download the program and manually test out crashing your server with it. If you can successfully crash your server with that software then you would at least have a good idea of what was being used to crash your server. If it doesn't work to crash your server though, then either something else is being used or something else altogether is crashing it.

You may want to be going through your event viewer to see if something else is happening in the background on your system that could be crashing it as well.