I would suggest tcpdump to use for your analyzes...
----- Original Message ----- From: "Pawel" <[email protected]> To: "Half-Life dedicated Linux server mailing list" <[email protected]> Sent: Sunday, January 18, 2009 7:41 PM Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE !!! Hmm are there any logs in linux? That we can find user sending high rate packets? On Sun, Jan 18, 2009 at 7:27 PM, Ronny Schedel <[email protected]>wrote: > Setup a passworded server, run the given tool pointing on this server, > analyze the traffic. It will probably the same packet each time with a > high > rate. So you can easly filter this packet coming from the same IP address > on > a high rate. It's just that easy. > > > ----- Original Message ----- > From: "Wolfie - Cybernetic" <[email protected]> > To: "'Half-Life dedicated Linux server mailing list'" > <[email protected]> > Sent: Sunday, January 18, 2009 7:17 PM > Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE !!! > > > The problem is when this happens the ddos is done on the udp css port, so > it's not easy to filter out. > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Ronny > Schedel > Sent: 18 January 2009 18:11 > To: [email protected]; Half-Life dedicated Linux server mailing list > Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE !!! > > Analyze the network traffic and setup appropriate firewall rules. It's not > that hard to prevent it. > > > ----- Original Message ----- > From: "Hüseyin Cerik" <[email protected]> > To: "Half-Life dedicated Linux server mailing list" > <[email protected]> > Sent: Sunday, January 18, 2009 6:52 PM > Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE !!! > > > think about it i am a bad person and im playin a game in a server and > because i dont obey with the rules they ban me so i suggest to use the > programs i have in my hands and crash down the servers. now our days > people are even scared to throw poeple because these types of programs > put them down if u think about the worlds most top server VIA they dont > even have a chance about this... > > we need to find a solution about what we can do for this situation > > > > JäKë T schrieb: > > Never tried it out but had this issue with my server a few times lags > like > > > a mother then everyone leaves. Need a fix for it. > > > > > > > > > > > > > >> Date: Sun, 18 Jan 2009 15:11:45 +0100 > >> From: [email protected] > >> To: [email protected] > >> Subject: Re: [hlds_linux] Counterstrike Source DDos Attack !!! NO JOKE > >> !!! > >> > >> I tried it on my servers. It is working. Players felt huge spikes and > >> after > >> 5 minutes from 20/20 players it had 0/20 :> > >> > >> On Sun, Jan 18, 2009 at 1:29 PM, Marcel <[email protected]> > wrote: > >> > >> > >>> It's actually DoS, not DDoS... > >>> > >>> Somebody tried that file? > >>> > >>> > >>> - Marcel > >>> > >>> _______________________________________________ > >>> To unsubscribe, edit your list preferences, or view the list archives, > >>> please visit: > >>> http://list.valvesoftware.com/mailman/listinfo/hlds_linux > >>> > >>> > >> _______________________________________________ > >> To unsubscribe, edit your list preferences, or view the list archives, > >> please visit: > >> http://list.valvesoftware.com/mailman/listinfo/hlds_linux > >> > > > > _________________________________________________________________ > > Keep in touch and up to date with friends and family. Make the > > connection > > now. > > http://www.microsoft.com/windows/windowslive/ > > _______________________________________________ > > To unsubscribe, edit your list preferences, or view the list archives, > > please visit: > > http://list.valvesoftware.com/mailman/listinfo/hlds_linux > > > > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux > > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux > > > _______________________________________________ > To unsubscribe, edit your list preferences, or view the list archives, > please visit: > http://list.valvesoftware.com/mailman/listinfo/hlds_linux > _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux _______________________________________________ To unsubscribe, edit your list preferences, or view the list archives, please visit: http://list.valvesoftware.com/mailman/listinfo/hlds_linux
