What version of ES and ESTools are you using? What actual ES scripts do you run there?
(ES stuff is all I can help with) There are a few older bugs that might have caused the crash: ns about the refusal to start back up though! (are you sure the srcds_run batch script is dead too and that a ghost server is not hogging the IP/Port) Tom -------------------------------------------------- From: "Tom Leighton" <[EMAIL PROTECTED]> Sent: Friday, July 11, 2008 10:39 PM To: "Half-Life dedicated Win32 server mailing list" <[email protected]> Subject: Re: [hlds] Possible CS:S server exploit? > Have you tried removing all Eventscripts? It seems that it loads one and > then starts to shutdown. > > Ryan wrote: >> The percentage thing is totally normal, I have not completed an update >> in the last year or so that ended at an actual 100%. >> >> On Fri, Jul 11, 2008 at 3:55 PM, Matt D <[EMAIL PROTECTED]> wrote: >> >>> I run a CSS surfing server (on windows server 2003) with mani admin (via >>> sourceMM) and eventscripts (and the es_tools addon) along with many >>> custom >>> eventscripts. Last night my server mysteriously crashed and would not >>> start >>> back up. I spoke with one of the players who was in my server at the >>> time, >>> and someone allegedly said they were going to crash it; shortly after >>> the >>> server went down. It now refuses to start back up, and the final console >>> lines in this screen shot are what it says before crashing and then >>> attempting to restart via my keepalive batch script: >>> >>> http://img388.imageshack.us/img388/364/46784441qg3.jpg >>> >>> I know these errors have been seen before (via google searches), but >>> what >>> really intrigues me is what followed. Thinking I may have a bad memory >>> stick >>> I copied the entire srcds directory to another computer hoping it might >>> work, but the exact same thing happens. Then just for kicks I decide to >>> try >>> running the hldsupdatetool, first of all it turns out I was not running >>> the >>> most recent version of the srcds, so it attempts to update it (I'm >>> thinking >>> that may have been part of the problem). It begins to update, but what I >>> find odd is that the percentages are above 100%, quite far past 100% in >>> some >>> cases; I cannot remember the exact numbers here but it was quite large. >>> Now >>> I am very perplexed as to what the problem might be, so I decided to run >>> the >>> updater again, but this time specify the -verify_all flag. I caught the >>> percentages this time, and it starts verifying at 0.00% and stays there >>> for >>> a while, then abruptly jumps to 154300.00% and then finishes at >>> 348441500.00%, after completion reporting my hlds installation is up to >>> date. It would appear that something has been seriously compromised >>> and/or >>> corrupted within my srcds installation somewhere, but I am not sure >>> exactly >>> what. >>> >>> What leads me to believe that this was an intentional act of malice is >>> that >>> my server was running just fine for weeks prior to this incident, then >>> last >>> night without me changing anything, my server is totally broken. I am >>> currently in the process of starting with a fresh install and porting >>> all my >>> settings over to the new installation (as well as updating a few of the >>> plugins which I now know were outdated versions, perhaps this will help >>> in >>> the future too) hoping to fix things. >>> >>> I am really just wondering though if anyone has heard of anything like >>> this >>> before, or is aware of any known exploits or vulnerabilities which >>> exist/may >>> have existed in older versions of the srcds. I am trying my fresh >>> install on >>> version 95 which I believe is the most recent version. >>> _______________________________________________ >>> To unsubscribe, edit your list preferences, or view the list archives, >>> please visit: >>> http://list.valvesoftware.com/mailman/listinfo/hlds >>> >>> >> >> _______________________________________________ >> To unsubscribe, edit your list preferences, or view the list archives, >> please visit: >> http://list.valvesoftware.com/mailman/listinfo/hlds >> >> > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds

