Jump to content

Check us out:

Photo
* * * * * 1 votes

Bunker 1 lag issues (18/10/2013)

recent server lag october 18 2013

  • Please log in to reply
93 replies to this topic

#41
peyote

peyote
  • Gender:Male
  • Location:Basel
  • Server:Bunker #2
Click to view battle stats

Well so it does not look like I can fix this lag,

 

This is a info I get from the firewall,

You can see there 21G got dropped as first from that rule - dropping everything which comes from port 19.

While et got only 35M

 

#iptables -L -n -v
Chain INPUT (policy DROP 2431K packets, 138M bytes)
 pkts bytes target     prot opt in     out     source               destination
8067K   21G DROP       udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp spt:19

    3   160 DROP       tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spt:19

 538K   35M ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0           udp dpt:27960

 

 

So basically interserver will have to fix this hole. As I got also packet loss from a device which comes before b1 - probably a router. Sudd3n will be soon informed.. so fingers crossed.


  • *CapTn* likes this

#42
Ace

Ace

    Becoming a Part of the Forum

  • Bunker Members
  • 307 posts
Click to view battle stats

Nice detective work Pey.  I admit that I can only just understand what you're saying.  I know what the words mean, but not the sentences, lol.



#43
leaDpoisAn

leaDpoisAn

    Sticking Around

  • Bunker Admins
  • 827 posts
  • Gender:Male
  • Location:Jersey
  • Server:Bunker #1
Click to view battle stats

Now that Peyote has Root access he removed the block and we now can see B1 on TrackBase Again!

And Now, when the lag issue occurs, he will have access and the tools to track it down and hopefully put and end to this!

 

 

 

Jec

 

That is a hidden gem from all this.



#44
kael

kael

    Becoming a Part of the Forum

  • Bunker Members
  • 270 posts
  • Gender:Male
  • Server:Bunker #1
Click to view battle stats

Pey: Is that the full output for iptables rules? Looks a little too closed to me, for example not allowing common services needed such as dns tcp/udp or ssh for that matter.

 

Anyone gotten with the bandwidth provider to help block? Would expect them to have resources to follow this up. Higher up the ladder they get blocked, the better.

 



#45
peyote

peyote
  • Gender:Male
  • Location:Basel
  • Server:Bunker #2
Click to view battle stats

No its only the relevant part, the rest is not really interesting ^^

open to world are actually only 3 ports.. ssh and icmp for ping, and ET :)



#46
Bill

Bill

    Postin Ain't Easy

  • Bunker Admins
  • 540 posts
  • Gender:Male
  • Server:Bunker #1
Click to view battle stats

So basically interserver will have to fix this hole.

 

Just mentioning - the lag returned again tonight.



#47
kael

kael

    Becoming a Part of the Forum

  • Bunker Members
  • 270 posts
  • Gender:Male
  • Server:Bunker #1
Click to view battle stats

Yep, ping times up, blah blah.

 

Anyone gotten with the provider for the server? They should be able to help, have stronger tools to check traffic and what not.

 

3 v 3 and lag says it all.



#48
ontheqt

ontheqt

    Postin Ain't Easy

  • Bunker Members
  • 584 posts
  • Xfire:shrikester
  • Gender:Male
  • Location:California
  • Server:Bunker #1
Click to view battle stats

If I read correctly, the server is being attacked.  I hope we aren't going to let the attacker win.

 

No one on B1 tonight so far.  :(



#49
neurosis

neurosis

    Will Become Famous Soon Enough

  • Bunker Members
  • 1,776 posts
  • Gender:Male
  • Location:Seattle, wa
  • Server:Bunker #1
Click to view battle stats

I dont know if its coincidence, but B1 has been pretty slow all week.  :(  

 

It really has been difficult to play on the server with the lag.



#50
kael

kael

    Becoming a Part of the Forum

  • Bunker Members
  • 270 posts
  • Gender:Male
  • Server:Bunker #1
Click to view battle stats

Guilty, I've been OFarting lately.

 

 

Seriously, offering help, I'm a linux CLI grey beard. Going after problems and fixing is my professional skill.

 

Will provide my ssh pub key on demand.



#51
neurosis

neurosis

    Will Become Famous Soon Enough

  • Bunker Members
  • 1,776 posts
  • Gender:Male
  • Location:Seattle, wa
  • Server:Bunker #1
Click to view battle stats

Well someone should do something.  ;)   The server was fine until about 3:30 pacific time. Then the attack started again once people started to join.



#52
neurosis

neurosis

    Will Become Famous Soon Enough

  • Bunker Members
  • 1,776 posts
  • Gender:Male
  • Location:Seattle, wa
  • Server:Bunker #1
Click to view battle stats

We should put up a banner to play on IOW until this is resolved.  Friday night in the thick of B1 populated game play the server is unplayable.  

 

I would say b2 or b4 but they arent west coast friendly.  (i love b2).



#53
peyote

peyote
  • Gender:Male
  • Location:Basel
  • Server:Bunker #2
Click to view battle stats

Guilty, I've been OFarting lately.
 
 
Seriously, offering help, I'm a linux CLI grey beard. Going after problems and fixing is my professional skill.
 
Will provide my ssh pub key on demand.

I don't think there is anything we can do. Sudd3n has been informed now a few days ago, so at least he knows.
We had have to contact interserver, but that is something only the owner can do usually.

Dunno maybe I am wrong.. but 21 GB on port 19 vs 35MB on port 27960. For me this is a obvious ddos attack. Especially since in the last monthes DDOS on port 19 chargen was in the news.
A correct done DDOS attack you cannot stop with simple IPTables on the target machine.

#54
neurosis

neurosis

    Will Become Famous Soon Enough

  • Bunker Members
  • 1,776 posts
  • Gender:Male
  • Location:Seattle, wa
  • Server:Bunker #1
Click to view battle stats

It is obviously a ddos attack.  its killing the server. who ever is doing it waits until the server starts to populate.


  • *CapTn* likes this

#55
Jecoliah

Jecoliah

    I Come Here Often

  • Bunker Admins
  • 3,297 posts
  • Gender:Male
  • Location:Texas
  • Server:Bunker #1
Click to view battle stats

Please have Patients guys, we are waiting on Sudd3n to see what he can do to close the port.

Everybody is Frustrated but all we can do right now is wait.

 

We will let you guys know something as soon as we know.

Hopefully it wont be long.

 

 

 

Jec


  • Bean and *CapTn* like this

#56
kael

kael

    Becoming a Part of the Forum

  • Bunker Members
  • 270 posts
  • Gender:Male
  • Server:Bunker #1
Click to view battle stats

A correct done DDOS attack you cannot stop with simple IPTables on the target machine.

 

 

Understand, I'm surprised the vendor would fail here, not noticed the traffic and already taken action.


  • Red and *CapTn* like this

#57
djbo

djbo
  • Gender:Male
  • Location:Belgium
  • Server:Bunker #2
Click to view battle stats
Sudden has been working on the beast practically all day today and also mailed our ISP for action. Hope we'll see the results.
  • Red and neurosis like this

#58
Snoid

Snoid
  • Gender:Male
  • Location:Beloit, Wisconsin
  • Server:Bunker #1
Click to view battle stats

Tonight, Nov. 11th, B1 was lag free and a lot of fun.  Thanks to all who are working on the lag issue!!!


  • Red likes this

#59
Jecoliah

Jecoliah

    I Come Here Often

  • Bunker Admins
  • 3,297 posts
  • Gender:Male
  • Location:Texas
  • Server:Bunker #1
Click to view battle stats

Yes looked good tonight but no word yet on if it is fixed, server may have not been under attack...

zqmq.jpg

 

 

 

Jec


  • neurosis likes this

#60
djbo

djbo
  • Gender:Male
  • Location:Belgium
  • Server:Bunker #2
Click to view battle stats

Tonight, Nov. 11th, B1 was lag free and a lot of fun.  Thanks to all who are working on the lag issue!!!

 

Let's hope it's done and ISP has teken actions. I know Sud did alot of work this weekend and has as a precaution shut down some services on the beast, made some other modifications and also contacted the ISP. So let's see how it evolves. Please do keep us informed in this topic of any lag issues. For now I'm assuming the attacks have been stopped.







Also tagged with one or more of these keywords: recent, server, lag, october, 18, 2013