SRCDS Steam group


Strange Errors in console at startup after buffer overflow attack
#1
Hello!
I'm getting some strange errors in console. Most of them I noticed today after some prick was running some buffer overflow exploits on my server last night (have core dump from last night)
http://www.filefront.com/17234112/core.3954

BASIC INFO
Server OS: ESX: Running Centos 5 32bit
Processor: Dual 3.0GHz Xeon - Single Cores w/Hyperthreading. (setup to never have less than 2.4GHz available, and may use up to all available resources)
Ram: 3G Dedicated, 8G available (setup to never have less than 3G available, and may use up to all installed resources)
Game(s): Counter-Strike Source
Admin Mods: Eventscripts + Metamod (loading Mani-Admin-Plugin & Sourcemod)
Bandwidth: Unrestricted OC3. (Thats right, no kidding)

Code:
Auto detecting CPU
Using default binary: ./srcds_linux
Enabling debug mode
Server will auto-restart if there is a crash.
INFO: Located steam: /home/seakin/srcds/steam
Updating server using Steam.
Checking bootstrapper version ...
Updating Installation
Checking/Installing 'Counter-Strike Source Shared Content' version 88


Checking/Installing 'Base Source Shared Models' version 4


Checking/Installing 'Base Source Shared Sounds' version 4


Checking/Installing 'Base Source Shared Materials' version 8


Checking/Installing 'OB Linux Dedicated Server' version 57


HLDS installation up to date
CAsyncIOManager: 0 threads terminating.  0 reads, 0 writes, 0 deferrals.
CAsyncIOManager: 103 single object sleeps, 0 multi object sleeps
CAsyncIOManager: 0 single object alertable sleeps, 0 multi object alertable sleeps
Using breakpad minidump system
Using breakpad crash handler

Console initialized.
Game.dll loaded for "Counter-Strike: Source"
Setting breakpad minidump AppID = 240
Forcing breakpad minidump interfaces to load
Looking up breakpad interfaces from steamclient
Calling BreakpadMiniDumpSystemInit
Installing breakpad exception handler for appid(240)/version(4307)
[EventScripts] Initial loading of Mattie's EventScripts plugin...
[EventScripts] Loaded successfully.
maxplayers set to 25
Loaded: addons/eventscripts/corelib/interfaces/AuthorizationService/es_AuthorizationService_db.txt
Unknown command "r_decal_cullsize"
[EventScripts] Loaded est_init
[EventScripts] Loaded knife_rewards
[EventScripts] Loaded 16k
maxplayers set to 25
Network: IP 127.0.0.1, mode MP, dedicated Yes, ports 27015 SV / 27005 CL
********************************************************
Loading Mani Admin Plugin 2010 V1.2V SMM Orange, www.mani-admin-plugin.com

Interface IPlayerInfoManager @ 0x432642c
Interface IVEngineServer @ 0xc4ef2c
Interface IGameEventManager2 @ 0xc217c0
Interface IFileSystem @ 0x396b00
Interface IServerPluginHelpers @ 0xc4a560
Interface INetworkStringTableContainer @ 0xc2b400
Interface IEngineTrace @ 0xc215c0
Interface IUniformRandomStream @ 0xc2df28
Interface IServerGameEnts @ 0x4318508
Interface IEffects @ 0x42ff81c
Interface IEngineSound @ 0xc21548
Interface ICvar @ 0x13c160
Interface IServerGameDLL @ 0x43182c8
Interface IVoiceServer @ 0xc4f71c
********************************************************
Attempting to load [./cfg/mani_admin_plugin/language/language.cfg]
Language to be used [english]
Searching for game type [Counter-Strike: Source]
Found gametypes for Counter-Strike: Source
Linux game binary @ ./cstrike/bin/server.so
Linux engine binary @ ./bin/engine.so
[0x4266768] found for [te]
var_address = 0x4266768
Game Type [Counter-Strike: Source]
Message name Geiger index 0
Message name Train index 1
Message name HudText index 2
Message name SayText index 3
Message name SayText2 index 4
Message name TextMsg index 5
Message name HudMsg index 6
Message name ResetHUD index 7
Message name GameTitle index 8
Message name ItemPickup index 9
Message name ShowMenu index 10
Message name Shake index 11
Message name Fade index 12
Message name VGUIMenu index 13
Message name Rumble index 14
Message name CloseCaption index 15
Message name SendAudio index 16
Message name RawAudio index 17
Message name VoiceMask index 18
Message name RequestState index 19
Message name BarTime index 20
Message name Damage index 21
Message name RadioText index 22
Message name HintText index 23
Message name KeyHintText index 24
Message name ReloadEffect index 25
Message name PlayerAnimEvent index 26
Message name AmmoDenied index 27
Message name UpdateRadar index 28
Message name KillCam index 29
Message name MarkAchievement index 30
Message name SPHapWeapEvent index 31
Message name HapDmg index 32
Message name HapPunch index 33
Message name HapSetDrag index 34
Message name HapSetConst index 35
Message name HapMeleeContact index 36
Message name PlayerStatsUpdate_DEPRECATED index 37
Message name AchievementEvent index 38
Message name MatchEndConditions index 39
Message name MatchStatsUpdate index 40
[0x9b4ea6] found for [_ZN11CBaseServer13ConnectClientER8netadr_siiiPKcS3_S3_i]
[0xa7377e] found for [_Z14NET_SendPacketP11INetChanneliRK8netadr_sPKhiP8bf_writeb]
Sigscan info
CBaseServer::ConnectClient [0x9b4ea6]
NET_SendPacket [0xa7377e]
[0x3b4e34e] found for [_ZN9CCSPlayer12RoundRespawnEv]
[0x3e53b42] found for [_Z11UTIL_RemoveP11CBaseEntity]
[0x423e598] found for [g_pEntityList]
[0x3bae16c] found for [_ZN17CGlobalEntityList21FindEntityByClassnameEP11CBaseEntityPKc]
[0x3b5bf92] found for [_ZN9CCSPlayer10SwitchTeamEi]
[0x3b59424] found for [_ZN9CCSPlayer17SetModelFromClassEv]
[0x3789240] found for [_ZN20CBaseCombatCharacter22SwitchToNextBestWeaponEP17CBaseCombatWeapon]
[0x3907f10] found for [_Z27GetFileWeaponInfoFromHandlet]
[0x3789544] found for [_ZNK20CBaseCombatCharacter19Weapon_OwnsThisTypeEPKci]
Sigscan info
A [0x3b4e34e]
B [0x3e53b42]
C [0x42fffc0]
D1 [0xe80cec83]
E [0x3bae16c]
F [0x3b5bf92]
G [0x3b59424]
H [0x3907f10]
L [0x3789544]
Time for read = [0.016987]
Time for load into structure = [0.022525]
Time for read = [0.000254]
Calculate Stats total time [0.000139]
Steam ID Player Stats memory usage 0.268314MB with 771 records
Name Player Stats memory usage 0.000000MB with 0 records
Plugin load file already exists ... bypassing autocreate
[EventScripts] Map Loading Mattie's EventScripts plugin...
[EventScripts] Loaded successfully.
********************************************************
************* Mani Admin Plugin Level Init *************
********************************************************
Attempting to load [./cfg/mani_admin_plugin/language/language.cfg]
Language to be used [english]
Time for read = [0.000183]
Calculate Stats total time [0.000120]
Steam ID Player Stats memory usage 0.268314MB with 771 records
Name Player Stats memory usage 0.000000MB with 0 records
Stats Loaded in 0.0380 seconds
Steam ID Player Settings memory usage 0.296120MB with 1049 records
Name Player Settings memory usage 0.000000MB with 0 records
Player Lists Loaded in 0.0442 seconds
********************************************************
Mani Admin Plugin Level Init Time = 1.213 seconds
********************************************************
L 08/25/2010 - 07:45:22: -------- Mapchange to de_dust2 --------
L 08/25/2010 - 07:45:23: [GEOIP] GeoIP database info: GEO-106FREE 20091001 Build 1 Copyright (c) 2009 MaxMind Inc All Rights Reserved
ConVarRef room_type doesn't point to an existing ConVar
Executing dedicated server config file
Possible team classname [cs_team_manager]
Team index [0] Name [Unassigned]
Possible team classname [cs_team_manager]
Team index [1] Name [Spectator]
Possible team classname [cs_team_manager]
Team index [2] Name [TERRORIST]
Possible team classname [cs_team_manager]
Team index [3] Name [CT]
Found [4] team manager entities
Searching for game type [Counter-Strike: Source]
Found gametypes for Counter-Strike: Source
Linux game binary @ ./cstrike/bin/server.so
Linux engine binary @ ./bin/engine.so
[S_API FAIL] SteamAPI_Init() failed; unable to update local steamclient.dll. Continuing with current version anyway.
Installing breakpad exception handler for appid(srcds_linux)/version(1.0)
baseuser.cpp (431) : Assertion Failed: couldn't find entrypoint 'GetBaseUserDir'
/home/VALVE/rackadmin/buildslave/steam_rel_client_linux/build/src/clientdll/baseuser.cpp 431 Assertion Failed: couldn't find entrypoint 'GetBaseUserDir'
Looking up breakpad interfaces from steamclient
Calling BreakpadMiniDumpSystemInit
Installing breakpad exception handler for appid(srcds_linux)/version(1.0)
.
[EventScripts Version Check] Server is up-to-date.
Server logging enabled.
Server logging data to file logs/L0825016.log
L 08/25/2010 - 07:45:25: Log file started (file "logs/L0825016.log") (game "/home/seakin/srcds/orangebox/cstrike") (version "4307")
L 08/25/2010 - 07:45:25: [weapon_restrict.smx] "Console<0><Console><Console>" restricted awp to 0
L 08/25/2010 - 07:45:25: [weapon_restrict.smx] "Console<0><Console><Console>" restricted g3sg1 to 0
L 08/25/2010 - 07:45:25: [weapon_restrict.smx] "Console<0><Console><Console>" restricted sg550 to 0
******     Executing mani_server.cfg      ******
Time for read = [0.000256]
Calculate Stats total time [0.000092]
Steam ID Player Stats memory usage 0.268314MB with 771 records
Name Player Stats memory usage 0.000000MB with 0 records
Time for read = [0.000151]
Calculate Stats total time [0.000075]
Steam ID Player Stats memory usage 0.268166MB with 771 records
Name Player Stats memory usage 0.000000MB with 0 records
Unknown command "mani_team_join_force_auto"
Unknown command "mani_team_join_keep_same_team"
DeadAllTalk mode on
******     Executing mani_quake_sounds.cfg      ******
****** Finished executing mani_server.cfg ******
Unknown command "sm_chat_mode"
Adminoverride in place for g3sg1
Adminoverride in place for g3sg1
Adminoverride in place for sg550
Adminoverride in place for sg550
L 08/25/2010 - 07:45:26: World triggered "Round_Start"
Connection to Steam servers successful.
   VAC secure mode is activated.

Everything is up to date as far as I know.
I have copied the lines in the console that concern me (in general, as with pre-ob cs:s, some may be irrelevant)

Unknown command "r_decal_cullsize"

ConVarRef room_type doesn't point to an existing ConVar

[S_API FAIL] SteamAPI_Init() failed; unable to update local steamclient.dll. Continuing with current version anyway.
Installing breakpad exception handler for appid(srcds_linux)/version(1.0)
baseuser.cpp (431) : Assertion Failed: couldn't find entrypoint 'GetBaseUserDir'
/home/VALVE/rackadmin/buildslave/steam_rel_client_linux/build/src/clientdll/baseuser.cpp 431 Assertion Failed: couldn't find entrypoint 'GetBaseUserDir'

Unknown command "mani_team_join_force_auto"
Unknown command "mani_team_join_keep_same_team"
Reply
#2
just ignore those kind of messages. they are pretty normal. only
Code:
Unknown command "mani_team_join_force_auto"
Unknown command "mani_team_join_keep_same_team"
mean that you have some not-existing commands in your config. just remove them (though they don't hurt if you keep them).
http://www.fpsmeter.org
http://wiki.fragaholics.de/index.php/EN:Linux_Optimization_Guide (Linux Kernel HOWTO!)
Do not ask technical questions via PM!
Reply
#3
Cool thanks. That is what I suspected.

How do I diagnose random server crashes? i.e. I KNOW I received a buffer overflow attack the other night, and I have the core dump, but what do I do with it to figure out what caused it? Is this something the layman can do?
More looking to be pointed in the right direction than have it done for me. Please tell me what to research.

Thanks
Reply


Forum Jump:


Users browsing this thread: 2 Guest(s)