Got an eyetest warning for a player on my server today. Is this a valid detection or a false positive and what kind of cheat would this be?
Game: L4D2
SMAC Version: 0.8.6.0
smac_eyetest_compat = 0
Code:
L 09/12/2018 - 13:58:12: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of tampering with an old movement command (buttons). CmdNum: 1433524 | [0:8]
Map: c1m3_mall | Origin: 6610 -1431 24 | Angles: 20 140 0 | Weapon: weapon_spitter_claw | Team: 3 | Latency: 62ms
L 09/12/2018 - 13:58:49: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of reusing old movement commands. CmdNum: 4504 PrevCmdNum: 1433524 | [5686:5687:5693]
Map: c1m3_mall | Origin: 6782 -1401 24 | Angles: -0 -46 0 | Weapon: weapon_sniper_military | Team: 2 | Latency: 60ms
L 09/12/2018 - 13:59:19: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of tampering with an old movement command (buttons). CmdNum: 1433524 | [524800:524288]
Map: c1m3_mall | Origin: 6876 -1429 24 | Angles: 1 -71 0 | Weapon: weapon_shotgun_spas | Team: 2 | Latency: 60ms
L 09/12/2018 - 13:59:50: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of tampering with an old movement command (buttons). CmdNum: 1433524 | [524808:524296]
Map: c1m3_mall | Origin: 6705 -1392 24 | Angles: 2 -25 0 | Weapon: weapon_shotgun_spas | Team: 2 | Latency: 61ms
L 09/12/2018 - 14:00:34: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of reusing old movement commands. CmdNum: 15016 PrevCmdNum: 1433524 | [16198:16199:16206]
Map: c1m3_mall | Origin: 6828 -1411 24 | Angles: 5 -55 0 | Weapon: weapon_sniper_military | Team: 2 | Latency: 62ms
L 09/12/2018 - 14:01:04: [smac_eyetest.smx | 0.8.6.0] XXXX (ID: XXXX_X:X:XXXXXXXXX | IP: XX.XXX.XX.XX) is suspected of tampering with an old movement command (buttons). CmdNum: 1433524 | [0:1024]
Map: c1m3_mall | Origin: 6979 -1462 24 | Angles: 1 -133 0 | Weapon: weapon_sniper_military | Team: 2 | Latency: 62ms
More Info:
The player has played on the server for a long time, but I only recently (about a week ago) installed the eye smac_eyetest.smx module on the server. I have seen the suspect play on the server a few times since the module was installed and it didn't give any warnings until today.
I changed the smac_eyetest_compat setting to 1 after the warnings came up as the server does run a fair number of plugins.
Should I wait to see if it catches it again after the compatibility was set or is this likely a legit detection?
Thanks in advance!