Thursday, April 18, 2013

Game server get network overloaded and laging in gameplay

Game server get network overloaded and laging in gameplay Game server get network overloaded and laging in gameplay
Hey everybody;


I just registrated in this forum so i am new and i have to say sorry for my bad english at advance. so there is my problem:


me and my friend are hosting a game server witch have been attacked since few weeks ago, and still so, players are complaining about so much lags because our server connection is getting so bad, we think because of connection overload, we dont know if its ddos attack or something else. we have heared about "snort" and seems like its enought to block that attack, we insttalled snort on linux debian squeeze (OS on our root) with command "apt-get install -y snort", snort seems to be runings (process list) but it's not blocking the attack.


so my questions are:

how do we proceed to configure snort to block the attack ?

is there another way or program (free one GNU) to protect our server ?


here is two lines token from "iftop" screen witch have showed so much lines ( the attacker is using many random ports )


46.4.35.8:23000 => 95.154.17.170 0b 0b 0b <= 56.1Mb 56.1Mb 56.1Mb

46.4.35.8 => 46.36.35.164 0b 0b 0b <= 58.6Mb 55.3Mb 48.4Mb


as you can see the game data should use some Kbytes not Mbytes as well as you can see two attackers IPs


and there are lines token from "iptraf" program log file (ip_traffic-1.log)


Line 88380: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50241 to Debian-60-squeeze-32-minimal:23000

Line 88381: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50241 to Debian-60-squeeze-32-minimal:23000

Line 88382: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50230 to Debian-60-squeeze-32-minimal:23000

Line 88383: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50230 to Debian-60-squeeze-32-minimal:23000

Line 88384: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50230 to Debian-60-squeeze-32-minimal:23000

Line 88385: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50236 to Debian-60-squeeze-32-minimal:23000

Line 88386: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50226 to Debian-60-squeeze-32-minimal:23000

Line 88387: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50226 to Debian-60-squeeze-32-minimal:23000

Line 88388: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50226 to Debian-60-squeeze-32-minimal:23000

Line 88389: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50226 to Debian-60-squeeze-32-minimal:23000

Line 88390: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50226 to Debian-60-squeeze-32-minimal:23000

Line 88391: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50226 to Debian-60-squeeze-32-minimal:23000

Line 88392: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50233 to Debian-60-squeeze-32-minimal:23000

Line 88393: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50233 to Debian-60-squeeze-32-minimal:23000

Line 88394: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50233 to Debian-60-squeeze-32-minimal:23000

Line 88395: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50237 to Debian-60-squeeze-32-minimal:23000

Line 88396: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50237 to Debian-60-squeeze-32-minimal:23000

Line 88397: Wed Apr 10 19:10:02 2013; UDP; eth0; 60 bytes; source MAC address 2c6bf58a811a; from 95.154.17.170:50237 to Debian-60-squeeze-32-minimal:23000



Any help will be apreciated, thanks a lot in advance.

Go to Source Game server get network overloaded and laging in gameplay -

No comments:

Post a Comment

Powered By | Dimitar Ivanov Via IT Logistic Center Ltd