MyBB Internal: One or more warnings occurred. Please contact your administrator for assistance.
srcds DOS attack?
SRCDS Steam group

SRCDS.com Forums › Source Dedicated Server › SRCDS - Linux v
srcds DOS attack?

Thread Modes
srcds DOS attack?
jheiv Offline
Junior Member
*
Posts: 22
Threads: 5
Joined: Sep 2009
Reputation: 0
#1
10-06-2009, 05:26 AM (This post was last modified: 10-06-2009, 05:38 AM by jheiv.)
I started logging the packet queue to my server after the 300th segfault (with a one minute cronjob logging netstat -tulpan):

All seems well...
Mon Oct 5 18:42:01 UTC 2009:
udp 1572 0 0.0.0.0:27015 4826/srcds_i686
Mon Oct 5 18:43:01 UTC 2009
udp 1880 0 0.0.0.0:27015 4826/srcds_i686

...until a minute later...
Mon Oct 5 18:44:01 UTC 2009
udp 106372 0 0.0.0.0:27015 4826/srcds_i686
Mon Oct 5 18:45:01 UTC 2009
udp 111548 0 0.0.0.0:27015 4826/srcds_i686
Mon Oct 5 18:46:01 UTC 2009
udp 111340 0 0.0.0.0:27015 4826/srcds_i686

Minutes later the server crashes.

The Recv-Q column jumped from 1880 (prior to that it sits between 2000 and 0) to more than 100k!

Does this seem right? I guess what I'm saying is, could this just be a normal side effect of a crashing server or could this be the cause of a crashing server?

Any ideas of how to look into this further?

Thanks for your time.

More of the report without timestamps:
udp 0 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 111572 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 111012 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 111464 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 109244 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 111016 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 110464 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 110804 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 110984 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 111536 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 111568 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 111504 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 110952 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 110740 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 111536 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 111504 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 111016 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 0 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 0 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 0 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 0 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 0 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 0 616 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 0 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 988 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 0 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 648 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 308 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 0 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 1296 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 1880 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 1232 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 616 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 308 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 340 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 0 3144 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 1572 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 1880 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 106372 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 111548 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 111340 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 680 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 1296 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 1264 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 1540 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 1668 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
udp 3824 0 0.0.0.0:27015 0.0.0.0:* 4826/srcds_i686
* SERVER CRASHED *
Find
Reply


Messages In This Thread
srcds DOS attack? - jheiv - 10-06-2009, 05:26 AM
RE: srcds DOS attack? - Arjen - 10-06-2009, 05:39 AM
RE: srcds DOS attack? - mumbles - 10-06-2009, 07:51 AM
RE: srcds DOS attack? - jheiv - 10-06-2009, 12:07 PM
RE: srcds DOS attack? - css - 10-06-2009, 05:41 PM
RE: srcds DOS attack? - jheiv - 10-06-2009, 07:11 PM
RE: srcds DOS attack? - BehaartesEtwas - 10-06-2009, 07:29 PM
RE: srcds DOS attack? - css - 10-06-2009, 07:38 PM
RE: srcds DOS attack? - jheiv - 10-07-2009, 03:15 AM
RE: srcds DOS attack? - css - 10-07-2009, 07:09 AM
RE: srcds DOS attack? - lhffan - 10-07-2009, 04:54 PM
RE: srcds DOS attack? - BehaartesEtwas - 10-07-2009, 08:28 PM
RE: srcds DOS attack? - css - 10-08-2009, 01:00 AM
RE: srcds DOS attack? - jheiv - 10-07-2009, 08:45 PM
RE: srcds DOS attack? - jheiv - 10-08-2009, 04:04 PM
RE: srcds DOS attack? - lhffan - 10-08-2009, 11:16 PM
RE: srcds DOS attack? - css - 10-08-2009, 06:48 PM
RE: srcds DOS attack? - css - 10-09-2009, 01:00 AM
RE: srcds DOS attack? - jheiv - 10-13-2009, 03:47 PM
RE: srcds DOS attack? - css - 10-13-2009, 04:21 PM
RE: srcds DOS attack? - lhffan - 10-13-2009, 11:35 PM
RE: srcds DOS attack? - jheiv - 10-13-2009, 11:47 PM
RE: srcds DOS attack? - lhffan - 10-14-2009, 01:54 AM
RE: srcds DOS attack? - lhffan - 10-14-2009, 02:58 AM
RE: srcds DOS attack? - jheiv - 10-14-2009, 09:16 AM
RE: srcds DOS attack? - ClanWoof - 10-14-2009, 08:05 AM
RE: srcds DOS attack? - lhffan - 10-27-2009, 05:10 PM
RE: srcds DOS attack? - css - 10-27-2009, 05:41 PM
RE: srcds DOS attack? - lhffan - 10-27-2009, 06:17 PM
RE: srcds DOS attack? - c400 - 11-03-2009, 04:06 AM
RE: srcds DOS attack? - css - 11-03-2009, 07:16 AM
RE: srcds DOS attack? - c400 - 11-03-2009, 09:54 AM
RE: srcds DOS attack? - css - 11-03-2009, 06:24 PM
RE: srcds DOS attack? - c400 - 11-03-2009, 11:13 PM
RE: srcds DOS attack? - css - 11-04-2009, 02:53 AM
RE: srcds DOS attack? - c400 - 11-04-2009, 06:01 AM
RE: srcds DOS attack? - css - 11-04-2009, 06:08 AM
RE: srcds DOS attack? - c400 - 11-04-2009, 08:47 AM
RE: srcds DOS attack? - lhffan - 11-04-2009, 07:44 PM
RE: srcds DOS attack? - Terrorkarotte - 11-05-2009, 06:34 PM
RE: srcds DOS attack? - css - 11-05-2009, 09:47 PM
RE: srcds DOS attack? - tittn - 11-29-2009, 02:14 AM
RE: srcds DOS attack? - lhffan - 11-29-2009, 09:06 AM
RE: srcds DOS attack? - lhffan - 12-29-2009, 06:16 AM
RE: srcds DOS attack? - css - 12-29-2009, 05:38 PM
RE: srcds DOS attack? - lhffan - 12-30-2009, 12:55 AM
RE: srcds DOS attack? - css - 12-30-2009, 07:58 AM
RE: srcds DOS attack? - lhffan - 12-30-2009, 11:32 AM
RE: srcds DOS attack? - css - 12-31-2009, 08:51 AM
RE: srcds DOS attack? - lhffan - 01-02-2010, 03:42 AM
RE: srcds DOS attack? - Peter_Pan123 - 02-23-2010, 03:26 PM
RE: srcds DOS attack? - css - 02-23-2010, 08:07 PM
RE: srcds DOS attack? - Peter_Pan123 - 02-23-2010, 08:16 PM
RE: srcds DOS attack? - Peter_Pan123 - 02-24-2010, 01:00 AM
RE: srcds DOS attack? - css - 02-24-2010, 03:14 AM
RE: srcds DOS attack? - c400 - 08-04-2010, 07:28 PM
RE: srcds DOS attack? - jheiv - 08-04-2010, 08:10 PM
RE: srcds DOS attack? - Devilfish - 09-17-2010, 05:31 PM
RE: srcds DOS attack? - c400 - 11-26-2010, 10:27 AM

Forum Jump:


Users browsing this thread: 1 Guest(s)