Advertisement
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

UDP Attacks going on, RakLib exploit? Server stucks.

Comments in 'Forum Discussion' started by thebigsmileXD, Mar 13, 2016.

  1. thebigsmileXD
    Offline

    thebigsmileXD Banned

    Joined:
    May 19, 2015
    Posts:
    845
    Plugins:
    1
    Minecraft User:
    XenialDan
    [16:00:35] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
    [16:00:35] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
    [16:00:35] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
    [16:00:35] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
    [16:00:35] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
    [16:00:35] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)
    [16:03:22] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
    [16:03:22] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
    [16:03:22] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
    [16:03:22] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
    [16:03:22] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
    [16:03:22] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)
    [16:06:08] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
    [16:06:08] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
    [16:06:08] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
    [16:06:08] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
    [16:06:08] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
    [16:06:08] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)
    [16:08:56] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
    [16:08:56] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
    [16:08:56] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
    [16:08:56] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
    [16:08:56] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
    [16:08:56] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)
    [16:11:48] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
    [16:11:48] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
    [16:11:48] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
    [16:11:48] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
    [16:11:48] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
    [16:11:48] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)
    [16:14:27] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
    [16:14:27] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
    [16:14:27] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
    [16:14:27] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
    [16:14:27] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
    [16:14:27] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)
    [16:17:09] [RakLibServer thread/DEBUG]: [RakLib Thread #4808] An E_WARNING error happened: "socket_recvfrom(): unable to recvfrom [10054]: Eine vorhandene Verbindung wurde vom R" in "/src/raklib/server/UDPServerSocket" at line 39
    [16:17:09] [RakLibServer thread/DEBUG]: #0 /src/raklib/server/SessionManager(144): raklib\server\UDPServerSocket->readPacket(NULL , NULL , NULL )
    [16:17:09] [RakLibServer thread/DEBUG]: #1 /src/raklib/server/SessionManager(91): raklib\server\SessionManager->receivePacket()
    [16:17:09] [RakLibServer thread/DEBUG]: #2 /src/raklib/server/SessionManager(82): raklib\server\SessionManager->tickProcessor()
    [16:17:09] [RakLibServer thread/DEBUG]: #3 /src/raklib/server/SessionManager(70): raklib\server\SessionManager->run()
    [16:17:09] [RakLibServer thread/DEBUG]: #4 /src/raklib/server/RakLibServer(221): raklib\server\SessionManager->__construct(raklib\server\RakLibServer object, raklib\server\UDPServerSocket object)
    All these (null) Request packets are currently letting many servers getting stuck.
    There are several attacks on different types of servers.

    I think thats all to say. Having the same type of attack?
    Or you know a solution? Let me know.
  2. PEMapModder
    Offline

    PEMapModder Notable Member Plugin Developer

    Joined:
    Oct 9, 2013
    Posts:
    7,294
    Plugins:
    11
    Minecraft User:
    PEMapModder
    Maybe you should first change the system language to English, or we won't understand the error messages.
    SOFe and PocketKiller like this.
  3. thebigsmileXD
    Offline

    thebigsmileXD Banned

    Joined:
    May 19, 2015
    Posts:
    845
    Plugins:
    1
    Minecraft User:
    XenialDan
    Won't.

    Just this little part is not in english. "Eine vorhandene Verbindung wurde vom R"
    (also this is cut off. "Eine vorhandene Verbindung wurde vom Remotehost geschlossen")
    "An existing connection was forcibly closed by the remote host"
    Cause: NULL packets!
    PEMapModder likes this.
  4. Jazzwhistle
    Offline

    Jazzwhistle Notable Member

    Joined:
    Dec 27, 2014
    Posts:
    364
    Minecraft User:
    Awzaw
    Hi, I'm seeing a variation of this thanks to disgruntled players using a technique I won't share here. They can effectively close any server whenever they like. I'm on a dedicated Netherbox server with DDOS mitigation, CentOS7, firewalld, latest PM, PHP 7.0.3 etc. I've contacted Netherbox who say they have activated advanced filtering for my IP, but that doesn't seem to have changed anything. Is there anything else I can do? Since it's not true DDOS I'm thinking I could use fail2ban for this, but I can't find any log file that contains records of the attacks.

    Thanks

    nload.png
    Last edited by a moderator: Jun 7, 2016
    thebigsmileXD likes this.
  5. thebigsmileXD
    Offline

    thebigsmileXD Banned

    Joined:
    May 19, 2015
    Posts:
    845
    Plugins:
    1
    Minecraft User:
    XenialDan
    Isnt fail2ban so that "root" can not be removed from the system?
  6. Jazzwhistle
    Offline

    Jazzwhistle Notable Member

    Joined:
    Dec 27, 2014
    Posts:
    364
    Minecraft User:
    Awzaw
    Fail2ban monitors log files for regex matches, then adds rules to IPTABLES to drop all requests from IP addresses according to the config.
    thebigsmileXD likes this.
  7. Extreme_Heat
    Offline

    Extreme_Heat Active Member

    Joined:
    Apr 19, 2016
    Posts:
    76
    Minecraft User:
    Extreme_Heat
    Should be fixed in raklib now by Humerus, update the submodule.
  8. Jazzwhistle
    Offline

    Jazzwhistle Notable Member

    Joined:
    Dec 27, 2014
    Posts:
    364
    Minecraft User:
    Awzaw
    Intyre graciously sent me the patch to test before it was updated, it does indeed fix the error on console, but unfortunately it doesn't reduce the impact of the attack, so I've taken it up with Netherbox.
    Legoboy0215 likes this.
  9. thebigsmileXD
    Offline

    thebigsmileXD Banned

    Joined:
    May 19, 2015
    Posts:
    845
    Plugins:
    1
    Minecraft User:
    XenialDan
    I actually dont think it worked, but ClearSky PHP7 doesnt seem to freeze anyways.

Share This Page

Advertisement