new attacks

Post Reply
moodiscreet
Posts: 2
Joined: Mon Aug 01, 2011 10:53 pm

new attacks

Post by moodiscreet »

hello everyone, we have recently been hit by this kind of attacks, we still dont know how they happen but both our servers are hit usually in the same time (they are on different computers).

if you ry to connect server report that its full but in BFRM it report -- of 64 as the number of players - it stuck and stop/start is required.

Also GameTracker cant read server data during that...

Error message is


4.4.2012 00:29:07 : Couldn't connect to server console! An existing connection was forcibly closed by the remote host. (10054)

6.4.2012 11:04:20 Couldn't connect to server console! An existing connection was forcibly closed by the remote host. (10054)

6.4.2012 18:31:46 : Couldn't connect to server console! An existing connection was forcibly closed by the remote host. (10054)

6.4.2012 20:13:30 Couldn't connect to server console! An existing connection was forcibly closed by the remote host. (10054)

8.4.2012 20:13:32 Couldn't connect to server console! An existing connection was forcibly closed by the remote host. (10054)

9.4.2012 19:13:25 : Couldn't connect to server console! An existing connection was forcibly closed by the remote host. (10054)

11.4.2012 18:31:37 : Couldn't connect to server console! An existing connection was forcibly closed by the remote host. (10054)

22.4.2012 16:58:15 : Couldn't connect to server console! An existing connection was forcibly closed by the remote host. (10054)


As you can see we had small pause (10 days) but attacks re back...

Any help with this, is anyone familiar with this ? We run BF 1.6 at windows 2003 (Bihnet BF servers)

thnx !
tuia
Posts: 129
Joined: Tue Sep 06, 2011 12:36 pm
Location: Lisbon, Portugal

Re: new attacks

Post by tuia »

Some advice, when the server freezes, attach a debugger, like OllyDbg, to the server executable, and get the EIP (Instruction pointer) register value and the other register values, too. Analyzing the stack frames is also important. If the server crashes, try to enable crash dumps, so you can debug later.
Post Reply