[SuperConker]

I run a game-server that i rent from NFO-servers (on the Source 2013 engine).


For the last 3 weeks i've had to deal with some players that are purposely crashing the server
(they admitted it to me on Steam-chat and basically told me "what you gonna do about it")

I have banned their SteamID's and their IP Addresses, but they are just creating new accounts,
and possibly using VPN to get around the IP ban.

I have collected enough proof myself to know this is done on purpose,
(and even some from the offending players them-self).


I take it they are using some kind of game exploit to do this, possibly some console commands.
Is there any way to find out what they are doing to crash the server?

And in the case of console commands, are there any SourceMod plugins that can detect,
and report what is being typed into players console, right before the crash?

Or at the very least, a plugin that can block commonly used commands that can crash servers.

[backwards]

what source game are your refering to? there's a few newer exploits that haven't been patched in many source games. The best way to find out what they are doing is to install the crash accelerator and post the results here to be reviewed. I could make a patch for your game version to resolve the issue.

https://forums.alliedmods.net/showthread.php?t=277703&

[SuperConker]

The game in question is Zombie Panic! Source
https://store.steampowered.com/app/1..._Panic_Source/




Does this look correct?

/**
* This file is used to set various options that are important to SourceMod's core.
* If this file is missing or an option in this file is missing, then the default values will be used.
*/
"Core"
{
/**
* This option determines if SourceMod logging is enabled.
*
* "on" - Logging is enabled (default)
* "off" - Logging is disabled
*/
"Logging" "on"

/**
* This option determines how SourceMod logging should be handled.
*
* "daily" - New log file is created for each day (default)
* "map" - New log file is created for each map change
* "game" - Use game's log files
*/
"LogMode" "daily"

/**
* Language that multilingual enabled plugins and extensions will use to print messages.
* Only languages listed in languages.cfg are valid.
*
* The default value is "en"
*/
"ServerLang" "en"

/**
* List of characters to use for public chat triggers. Set an empty list to disable.
*/
"PublicChatTrigger" "!"

/**
* List of characters to use for silent chat triggers. Set an empty list to disable.
*/
"SilentChatTrigger" "/"

/**
* If a say command is a silent chat trigger, and is used by an admin,
* but it does not evaluate to an actual command, it will be displayed
* publicly. This setting allows you to suppress accidental typings.
*
* The default value is "no". A value of "yes" will suppress.
*/
"SilentFailSuppress" "no"

/**
* Password setinfo key that clients must set. You must change this in order for
* passwords to work, for security reasons.
*/
"PassInfoVar" "_password"

/**
* Specifies the sound that gets played when an item is selected from a menu.
*/
"MenuItemSound" "buttons/button14.wav"

/**
* Specifies the sound that gets played when an "Exit" button is selected
* from a menu.
*/
"MenuExitSound" "buttons/combine_button7.wav"

/**
* Specifies the sound that gets played when an "Exit Back" button is selected
* from a menu. This is the special "Back" button that is intended to roll back
* to a previous menu.
*/
"MenuExitBackSound" "buttons/combine_button7.wav"

/**
* Enables or disables whether SourceMod reads a client's cl_language cvar to set
* their language for server-side phrase translation.
*
* "on" - Translate using the client's language (default)
* "off" - Translate using default server's language
*/
"AllowClLanguageVar" "On"

/**
* Enables or Disables SourceMod's automatic gamedata updating.
*
* The default value is "no". A value of "yes" will block the Auto Updater.
*/
"DisableAutoUpdate" "no"

/**
* If set to yes, a successful gamedata update will attempt to restart SourceMod.
* SourceMod is unloaded and reloaded, and the map is changed to the current map.
* Since gamedata updates occur when the server loads, impact should be minimal.
* But to be safe, this option is disabled by default.
*/
"ForceRestartAfterUpdate" "no"

/**
* URL to use for retrieving update information.
* SSL is not yet supported.
*/
"AutoUpdateURL" "http://update.sourcemod.net/update/"

/**
* Whether to show debug spew.
* Currently this will log details about the gamedata updating process.
*/
"DebugSpew" "no"

/**
* If set to yes, SourceMod will validate steamid auth strings with the Steam backend before giving out admin access.
* This can prevent malicious users from impersonating admins with stolen Steam apptickets.
* If Steam is down, admins will not be authenticated until Steam comes back up.
* This option increases the security of your server, but is still experimental.
*/
"SteamAuthstringValidation" "yes"

/**
* Enables or disables whether SourceMod blocks known or potentially malicious plugins from loading.
* It is STRONGLY advised that this is left enabled, there have been cases in the past with plugins that
* allow anyone to delete files on the server, gain full rcon control, etc.
*
* "yes" - Block malware or illegal plugins from loading (default)
* "no" - Warn about malware or illegal plugins loading
*/
"BlockBadPlugins" "yes"

/**
* If a plugin takes too long to execute, hanging or freezing the game server in the process,
* SourceMod will attempt to terminate that plugin after the specified timeout length has
* passed. You can disable this feature by setting the value to "0".
*/
"SlowScriptTimeout" "8"

/**
* Per "http://blog.counter-strike.net/index.php/server_guidelines/", certain plugin
* functionality will trigger all of the game server owner's Game Server Login Tokens
* (GSLTs) to get banned when executed on a Counter-Strike: Global Offensive game server.
*
* Enabling this option will block plugins from using functionality that is known to cause this.
* This option only has any effect on CS:GO. Note that this does NOT guarantee that you cannot
* receive a ban.
*
* Disable this option at your own risk.
*/
"FollowCSGOServerGuidelines" "yes"

/**
* SteamID64 (Community ID) that will have ownership of uploaded crash reports.
* You can share your crash reports with additional users from the website.
*
* If unset, your crash reports will be uploaded anonymously and you will not be
* able to see all of the information.
*/
"MinidumpAccount" "765611979XXXXXXXX"

/**
* Controls which binaries will be eligible to be processed for symbols and uploaded.
* Only modules loaded by the server at the time of the crash can be considered.
*
* 0 = Disabled: No binaries will be processed or uploaded.
* 1 = System Only: Only binaries outside of the game directory (where the srcds binary is).
* 2 = System + Game: Loaded modules outside of the addons/ directory.
* 3 = System + Game + Addons: All loaded modules.
*/
"MinidumpSymbolUpload" "3"

/**
* Controls whether Accelerator can upload complete module binaries when explicitly requested
* by the processing server. This also respects the value of the MinidumpSymbolUpload setting.
*/
"MinidumpBinaryUpload" "yes"

/**
* Controls whether Accelerator does local processing of crash reports before upload.
* This should only be changed if local processing causes issues such as crashes,
* the processing server may reject crash reports that have not been presubmitted.
*/
"MinidumpPresubmit" "yes"

/**
* URL to upload crash dumps to. Should not be changed.
*/
"MinidumpUrl" "http://crash.limetech.org/submit"

/**
* URL to upload processed symbols to. Should not be changed.
*/
"MinidumpSymbolUrl" "http://crash.limetech.org/symbols/submit"

/**
* URL to upload binaries to. Should not be changed.
*/
"MinidumpBinaryUrl" "http://crash.limetech.org/binary/submit"
}

[backwards]

That games is going to have a lot of exploits unpatched. Yeah looks fine, going to have to wait for them to crash the server again now

[SuperConker]

Alright thank you so much for that, the plugin is working now.


You can ignore the two error-logs that just showed up,
as they happened from a broken map.

[SuperConker]

This is really odd. Server crashed just now, but no errors were created.

The map from earlier did create error-reports (which confirms the plugin is working).

Not really sure what is going on.


Edit: Another server-crash just happened, with no errors showing up on Throttle.

[backwards]

Did you just check the website or did you check the log file in the directory "sourcemod/logs/accelerator.log"? this log file would have the crash id's if the steam account id was setup wrong in the config file.

[SuperConker]

Yes, i checked the webpage, and also the accelerator.log,
and it did not log the last two crashes for some reason.

It did log the two first crashes however, but they were caused by me
(when i first installed the plugin, to see if it worked).

[backwards]

Then the only other reason it wouldn't create the crash dump is if the process was in such a bad state during the crash that it was unable to operate enough to dump the memory to disk. I'll send you a file in pm's that may help with your original request

[Bacardi]

I have no clue.

You could try log all commands what server regognize.
...addons/sourcemod/logs/

Spoiler

PHP Code:

char path[PLATFORM_MAX_PATH];

public void OnPluginStart()
{
    if(GetFeatureStatus(FeatureType_Capability, FEATURECAP_COMMANDLISTENER) != FeatureStatus_Available)
        SetFailState("SourceMod COMMAND LISTENER is not available");


    AddCommandListener(listen, "");

    FormatTime(path, sizeof(path), "%F %H-%M");
    BuildPath(Path_SM, path, sizeof(path), "logs/%s.txt", path);
}

public Action listen(int client, const char[] command, int argc)
{
    char buffer[MAX_NAME_LENGTH];
    GetCmdArgString(buffer, sizeof(buffer));

    LogToFileEx(path, "[%i] [%s] [%s]", client, command, buffer);


    return Plugin_Continue;
}

public Action OnClientCommandKeyValues(int client, KeyValues kv)
{
    char kvpath[PLATFORM_MAX_PATH];
    FormatTime(kvpath, sizeof(kvpath), "%F %H-%M");
    BuildPath(Path_SM, kvpath, sizeof(kvpath), "logs/kv.%s.txt", kvpath);
    
    kv.ExportToFile(kvpath);
    
    return Plugin_Continue;
} 


Also you could log console output in file.

sm_cvar con_timestamp 1
sm_cvar con_logfile "console.log"

But don't leave these two option on server too long.
These could create lot of logs and Giga Byte size txt files.