[L4D2] Null Commands - Page 2

larrybrains · 01-29-2024 , 17:20 Re: [L4D2] Null Commands

I have a player that consistently gets a lot of "is suspected in using invalid user commands" over multiple dates, but almost always 0 dropped packets. The player in question isn't an exceptionally skilled player by any means and other players do occasionally get the same "invalid user commands" detections, but not nearly as much as this one. I feel like these are false positives, but let me know what you think.

PHP Code:


			
L 12/30/2023 - 02:00:51: [l4d2_user_commands.smx] Player D*******Y<41><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 12/30/2023 - 02:02:17: [l4d2_user_commands.smx] Player D*******Y<41><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 12/30/2023 - 02:42:51: [l4d2_user_commands.smx] Player D*******Y<66><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 12/30/2023 - 02:43:32: [l4d2_user_commands.smx] Player D*******Y<66><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 12/30/2023 - 03:26:04: [l4d2_user_commands.smx] Player D*******Y<66><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/04/2024 - 19:54:41: [l4d2_user_commands.smx] Player D*******Y<6><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/04/2024 - 20:03:06: [l4d2_user_commands.smx] Player D*******Y<6><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/04/2024 - 20:38:00: [l4d2_user_commands.smx] Player D*******Y<6><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/04/2024 - 23:34:33: [l4d2_user_commands.smx] Player D*******Y<65><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 93)

L 01/04/2024 - 23:34:38: [l4d2_user_commands.smx] Player D*******Y<65><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/04/2024 - 23:35:34: [l4d2_user_commands.smx] Player D*******Y<65><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/05/2024 - 00:38:26: [l4d2_user_commands.smx] Player D*******Y<118><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/05/2024 - 00:59:36: [l4d2_user_commands.smx] Player D*******Y<118><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/05/2024 - 00:59:49: [l4d2_user_commands.smx] Player D*******Y<118><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/05/2024 - 01:10:07: [l4d2_user_commands.smx] Player D*******Y<118><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/05/2024 - 01:13:11: [l4d2_user_commands.smx] Player D*******Y<118><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/05/2024 - 01:13:25: [l4d2_user_commands.smx] Player D*******Y<118><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/05/2024 - 01:31:02: [l4d2_user_commands.smx] Player D*******Y<118><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/08/2024 - 02:44:31: [l4d2_user_commands.smx] Player D*******Y<139><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/11/2024 - 03:42:53: [l4d2_user_commands.smx] Player D*******Y<267><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/15/2024 - 23:17:14: [l4d2_user_commands.smx] Player D*******Y<7><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/15/2024 - 23:32:20: [l4d2_user_commands.smx] Player D*******Y<7><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/16/2024 - 01:27:45: [l4d2_user_commands.smx] Player D*******Y<80><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/26/2024 - 21:40:48: [l4d2_user_commands.smx] Player D*******Y<3<69><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/26/2024 - 21:45:03: [l4d2_user_commands.smx] Player D*******Y<3<69><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/26/2024 - 21:45:33: [l4d2_user_commands.smx] Player D*******Y<3<69><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/26/2024 - 21:55:19: [l4d2_user_commands.smx] Player D*******Y<3<69><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/26/2024 - 21:56:29: [l4d2_user_commands.smx] Player D*******Y<3<69><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/26/2024 - 22:22:05: [l4d2_user_commands.smx] Player D*******Y<3<69><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/26/2024 - 22:24:25: [l4d2_user_commands.smx] Player D*******Y<3<69><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/26/2024 - 22:26:47: [l4d2_user_commands.smx] Player D*******Y<3<69><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/26/2024 - 22:28:03: [l4d2_user_commands.smx] Player D*******Y<3<69><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/26/2024 - 22:33:16: [l4d2_user_commands.smx] Player D*******Y<3<69><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/26/2024 - 22:35:38: [l4d2_user_commands.smx] Player D*******Y<3<69><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/26/2024 - 22:36:53: [l4d2_user_commands.smx] Player D*******Y<3<69><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/27/2024 - 00:37:58: [l4d2_user_commands.smx] Player D*******Y<3<135><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/27/2024 - 00:39:16: [l4d2_user_commands.smx] Player D*******Y<3<135><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/27/2024 - 01:23:22: [l4d2_user_commands.smx] Player D*******Y<3<220><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/27/2024 - 01:31:33: [l4d2_user_commands.smx] Player D*******Y<3<246><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/27/2024 - 01:32:08: [l4d2_user_commands.smx] Player D*******Y<3<246><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/27/2024 - 01:36:39: [l4d2_user_commands.smx] Player D*******Y<3<246><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/27/2024 - 01:43:02: [l4d2_user_commands.smx] Player D*******Y<3<246><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

L 01/27/2024 - 01:44:31: [l4d2_user_commands.smx] Player D*******Y<3<246><STEAM_1:1:4*******3><> is suspected in using invalid user commands (dropped packets 0)

BHaType · 01-29-2024 , 20:12 Re: [L4D2] Null Commands

Quote:

Originally Posted by larrybrains

I have a player that consistently gets a lot of "is suspected in using invalid user commands" over multiple dates, but almost always 0 dropped packets. The player in question isn't an exceptionally skilled player by any means and other players do occasionally get the same "invalid user commands" detections, but not nearly as much as this one. I feel like these are false positives, but let me know what you think.[/PHP]

Thanks for report I found an error in plugin. I think those are false positive but who knows try new version.
In new version you can see exact reason why player has been reported and decide if it was false positive or not

Updated

PHP Code:


			
- Fixed wrong structure offset
- Added more detailed reports

larrybrains · 01-30-2024 , 17:10 Re: [L4D2] Null Commands

Quote:

Originally Posted by BHaType

Thanks for report I found an error in plugin. I think those are false positive but who knows try new version.
In new version you can see exact reason why player has been reported and decide if it was false positive or not

Updated

PHP Code:


			
- Fixed wrong structure offset

- Added more detailed reports

Thanks, will try this out!

Spirit_12 · 01-30-2024 , 18:10 Re: [L4D2] Null Commands

You may want to add SMAC as a requirement.

larrybrains · 02-01-2024 , 17:41 Re: [L4D2] Null Commands

Quote:

Originally Posted by BHaType

In new version you can see exact reason why player has been reported and decide if it was false positive or not

I have been running the new version for a few days and the same player had some more detections yesterday:

PHP Code:


			
L 01/31/2024 - 00:05:13: [l4d2_user_commands.smx] Player D*******Y <3<14><STEAM_1:1:4*******3><> is suspected in using invalid user commands (reason: Tickbase out of bounds (min: 129224, tick: 128849, max: 129724), dropped packets 0)

L 01/31/2024 - 00:35:13: [l4d2_user_commands.smx] Player D*******Y <3<11><STEAM_1:1:4*******3><> is suspected in using invalid user commands (reason: Tickbase out of bounds (min: 78134, tick: 76966, max: 78634), dropped packets 0)

L 01/31/2024 - 00:54:23: [l4d2_user_commands.smx] Player D*******Y <3<26><STEAM_1:1:4*******3><> is suspected in using invalid user commands (reason: Tickbase out of bounds (min: 69257, tick: 69186, max: 69757), dropped packets 0)

What does "Tickbase out of bounds" mean?

BHaType · 02-01-2024 , 19:47 Re: [L4D2] Null Commands

Quote:

Originally Posted by Spirit_12

You may want to add SMAC as a requirement.

Thanks for report

Quote:

Originally Posted by larrybrains

What does "Tickbase out of bounds" mean?

Every client has it's own tick counter called tickbase.
Tickbase is always kept in sync with server's tick within some 'approximate' range.

Client tickbase can get out sync by next reaons:

Server is lagging or has plugins that affects commands execution pipeline
Client lost connection to server and then restored connection later
Client is cheating

Quote:

Originally Posted by larrybrains

PHP Code:


			
L 01/31/2024 - 00:05:13: [l4d2_user_commands.smx] Player D*******Y <3<14><STEAM_1:1:4*******3><> is suspected in using invalid user commands (reason: Tickbase out of bounds (min: 129224, tick: 128849, max: 129724), dropped packets 0)
L 01/31/2024 - 00:35:13: [l4d2_user_commands.smx] Player D*******Y <3<11><STEAM_1:1:4*******3><> is suspected in using invalid user commands (reason: Tickbase out of bounds (min: 78134, tick: 76966, max: 78634), dropped packets 0)
L 01/31/2024 - 00:54:23: [l4d2_user_commands.smx] Player D*******Y <3<26><STEAM_1:1:4*******3><> is suspected in using invalid user commands (reason: Tickbase out of bounds (min: 69257, tick: 69186, max: 69757), dropped packets 0)

Let's do simple analyse of every log and calculate tickbase difference to see how far into future or past he got relatively to server's clock.

log: 129224 - 128849 = 375
log: 78134 - 76966 = 1,168
log: 69257 - 69186= 71

Those are insanely big values (even 71 tick gap is big value).
By second log we can see that he got into past by ~39 seconds if your server has default tickrate (tickbase difference * server tickrate).

We can get to conclusions:

Your server lagged for ~39 seconds but then every player on the server would have been reported.
The client lost connection to server for ~39 seconds xD
The client is cheating

if your server didn't lag and the client also didn't lost connection then I can conclude he's cheating.