So there's some guy on the server who has been somehow causing lag which leads to the CPU to fill up and the server to crash. He would say things like "Lag in 3, 2, 1" I thought this kind of stuff was not possible. And he came back after an IP ban so he obviously knows how to evade those unfortunately. Again sorry for the probably dumb question, I just don't know how to deal with things like this yet.
i dont think it is a dumb question this is actually interesting can you give me more things that you know what he does OR just things like errors occurring on console OR anything that you think may be related to this incident anything you suspected counts since i have no information i can only go blind guessing classic DOS/DDOS attack Not much you can do other then ddos mitigation cmd spamming exploiting some command that make the server uses a lot of server memory thus creating some sort of "dos" attack advised to use a full command logger (log the /login too(you never know what caused it) if there's any, you may obfuscate their password if you wished) and refer to it when they caused the lag and see if there any commands getting spammed
How do I get the full command log? The server.log doesn't show all commands. And after I caught the first account and banned it, they are now doing it with burner accounts I think.
ouch, that just mean it will be a hectic to sort things out you will need a command logger plugin for that matter
Code: 11:03:52 <IamR0B> /say ~ 11:03:49 <IamR0B> /say ~ 11:03:47 <Lizzy> /say OMG 11:03:45 <> Player puppie_lover13 disconnected (unknown) 11:03:45 <> Player Lizzy connected 11:03:45 <CONSOLE> /list 11:03:43 <Lizzy> /say ~ These are the only somewhat strange looking command log stuff but it might be normal. (The ~ is what I mean) EDIT: Now the server is still doing this but when theres only 2 people on so it seems like a person isn't directly doing it anymore... Ill keep seeing what happens. It is very strange because I know someone was causing it for sure earlier when they were literally doing a countdown for it but now it seems to be happening on it's own.
Make sure that the player is actively trying to lag the server. That will give you the results you need to fix the issue.
I havent found anything on any of the logs suggesting that people are still actively doing it but I know they were for sure earlier. But the server keeps crashing still almost all the time and this never happens. I have no clue at this point...
i am actually thinking of that, but it may just cause more lag by constantly writing every player movement and so on
The server keeps sending and receiving packets while the connection is active so my guesses are that they are causing a problem in the connection. The client won't do damage to the server if they are not changing anything.
On a side note, is there any way to actually effectively ban someone? Because that would be very helpful in a situation like this. People can easily evade IP bans and last time I checked there's no way to device ban.
Ban by CID and tell them they have been IP banned, then do it the other way around, really effective! xD
I found something possibly suspicious in the console. One of the accounts I know for sure was doing this had a ton of "moved wrongly" messages right before the server lagged out. Code: 2017-03-11 [02:53:01] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:01] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:03] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:04] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:05] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:07] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:07] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:08] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:08] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:08] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:08] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:08] [Server thread/INFO]: kingolinier has left the game 2017-03-11 [02:53:08] [Server thread/INFO]: kingolinier[/77.178.72.161:19135] logged out due to Kicked by admin. Reason: Login timer expired! 2017-03-11 [02:53:09] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:09] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:10] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:11] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:13] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:14] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:15] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:15] [Server thread/WARNING]: edo moved wrongly! 2017-03-11 [02:53:19] [Server thread/INFO]: [User] _Sigrun_ > I'm stopping very quick right now 2017-03-11 [02:53:21] [Server thread/INFO]: [User] edo > laggggg Could this be relevant as to why/how he did it?
Actually, it can be caused by other factors too. Too many explosion calls. (Example: PrimedTNT) Too many entity/item spawns. Aggressive chunk loading (excessive teleportation calls). Aggressive block placing/breaking (such as in world editors). Plugin exploits.