[sneaK]

Hi guys, I was looking to get a little more info about the speedhack module. I have a user on my CS:GO Surf server who constantly is "suspected of using speedhack". He comes on the server and surfs normally, like everyone else, never causes a ruckus, and has a lot of time on my server.

Basically, I'm wondering if this could be a false positive, and if it is, how I could stop the logs from getting spammed with him being suspected of speed hack. No other module picks up any sort of detection from him. Any thoughts?

The log:

Spoiler

L 12/20/2015 - 13:27:41: [smac_speedhack.smx | 0.8.6.0] User (ID: STEAM_1:0:XXXXXXXX | IP: xx.xxx.xx.xx) is suspected of using speedhack.
	Map: surf_kinshi | Origin: -4815 3175 -141 | Angles: 31 24 0 | Weapon: weapon_knife | Team: 2 | Latency: 82ms
L 12/20/2015 - 13:45:49: [smac_speedhack.smx | 0.8.6.0] User (ID: STEAM_1:0:XXXXXXXX | IP: xx.xxx.xx.xx) is suspected of using speedhack.
	Map: surf_ace | Origin: 6141 -105 2048 | Angles: 10 112 0 | Weapon: weapon_knife | Team: 3 | Latency: 80ms
L 12/20/2015 - 16:22:48: [smac_speedhack.smx | 0.8.6.0] User (ID: STEAM_1:0:XXXXXXXX | IP: xx.xxx.xx.xx) is suspected of using speedhack.
	Map: surf_krow10 | Origin: -310 -43 528 | Angles: 28 -4 0 | Weapon: weapon_knife | Team: 2 | Latency: 81ms
L 12/20/2015 - 16:46:15: [smac_speedhack.smx | 0.8.6.0] User (ID: STEAM_1:0:XXXXXXXX | IP: xx.xxx.xx.xx) is suspected of using speedhack.
	Map: surf_mom | Origin: -1789 4053 349 | Angles: 17 -27 0 | Weapon: weapon_knife | Team: 2 | Latency: 80ms
L 12/20/2015 - 17:06:48: [smac_speedhack.smx | 0.8.6.0] User (ID: STEAM_1:0:XXXXXXXX | IP: xx.xxx.xx.xx) is suspected of using speedhack.
	Map: surf_mom | Origin: -1743 3986 262 | Angles: 40 -34 0 | Weapon: weapon_knife | Team: 2 | Latency: 79ms
L 12/20/2015 - 17:11:23: [smac_speedhack.smx | 0.8.6.0] User (ID: STEAM_1:0:XXXXXXXX | IP: xx.xxx.xx.xx) is suspected of using speedhack.
	Map: surf_aircontrol_ksf | Origin: 5988 5695 5390 | Angles: 32 -79 0 | Weapon: weapon_knife | Team: 2 | Latency: 87ms
L 12/20/2015 - 17:50:09: [smac_speedhack.smx | 0.8.6.0] User (ID: STEAM_1:0:XXXXXXXX | IP: xx.xxx.xx.xx) is suspected of using speedhack.
	Map: surf_hat | Origin: -2498 -2631 1189 | Angles: 23 -141 0 | Weapon: weapon_knife | Team: 2 | Latency: 80ms
L 12/20/2015 - 18:22:46: [smac_speedhack.smx | 0.8.6.0] User (ID: STEAM_1:0:XXXXXXXX | IP: xx.xxx.xx.xx) is suspected of using speedhack.
	Map: surf_forbidden_ways_ksf | Origin: -35 -10239 6336 | Angles: 13 89 0 | Weapon: weapon_knife | Team: 2 | Latency: 81ms
L 12/20/2015 - 21:41:35: [smac_speedhack.smx | 0.8.6.0] User (ID: STEAM_1:0:XXXXXXXX | IP: xx.xxx.xx.xx) is suspected of using speedhack.
	Map: surf_colours | Origin: 6 -1838 768 | Angles: 0 90 0 | Weapon: weapon_knife | Team: 3 | Latency: 81ms

[checkster]

In most cases "Speedhack" is a falsepositive thats why smac does not autoban for it, google his steam id and sourcebans and see if you get anything, Id say hes most likely not cheating.

[sneaK]

Originally Posted by checkster In most cases "Speedhack" is a falsepositive thats why smac does not autoban for it, google his steam id and sourcebans and see if you get anything, Id say hes most likely not cheating.

I agree, he has an old(er) steam account, plenty of games, a decent inventory, and a good demeanor. I don't believe he's cheating, I was just looking to see if there might be some light shed onto why such a possible false positive might be reoccurring so often, and only on this one player. Also, how I might mitigate the log spamming for this one player, without removing the module.

[checkster]

Originally Posted by blackhawk74 I agree, he has an old(er) steam account, plenty of games, a decent inventory, and a good demeanor. I don't believe he's cheating, I was just looking to see if there might be some light shed onto why such a possible false positive might be reoccurring so often, and only on this one player. Also, how I might mitigate the log spamming for this one player, without removing the module.

poor pc/slow hd? I say permban him for log spam easier than redoing smac

[allienaded]

The speedhack module actually prevents speedhacks from working and thats its main purpose. You could completely disable logging as not to be bothered by any false positive detections but still benefit from the anti-speedhack. I've included a modified smac_speedhack.sp with logging + admin notice disabled (and added copyright headers for legal reasons).

[sneaK]

Originally Posted by allienaded The speedhack module actually prevents speedhacks from working and thats its main purpose. You could completely disable logging as not to be bothered by any false positive detections but still benefit from the anti-speedhack. I've included a modified smac_speedhack.sp with logging + admin notice disabled (and added copyright headers for legal reasons).

Thank you sir Much appreciated