Timb 15 Posted November 23, 2012 So tonight on my server, things were going good until the server started filling up. Once the server reaches ~30+ players, it usually gets hit with a scripter of some form. According to players at the time, he was using a DMR with unlimited ammo and was invulnerable. I immediately dropped the server and started combing through logs. *( I'm still new at log combing, so I'm not well versed in what to look for. )*Anywho, after looking through publicvariable.log, I noticed this at the time of the "hacker" going to town.23.11.2012 16:51:48: Steve (IP) GUID - Value Restriction #21 "remExField" = [<NULL-object>,<NULL-object>,"playmove","ZombieStandingAttack4"]This line (with different ZombieStandingAttack #'s) was logged over 190 times.Then in setvariable.log at roughly the same time of the zombie standing attacks:23.11.2012 16:51:44: Steve (IP) GUID - #0 "hit_hands" = 0.841952 56:5 Survivor2_DZ23.11.2012 16:51:44: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:51:45: Steve (IP) GUID - #0 "zombiespawn" = 0.89781 1:-195380530323.11.2012 16:51:45: Steve (IP) GUID - #15 "zombiespawn" = 0.89781 1:-195380530323.11.2012 16:51:45: Steve (IP) GUID - #0 "hit_hands" = 1.07175 56:5 Survivor2_DZ23.11.2012 16:51:45: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:51:47: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:51:47: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:51:47: Steve (IP) GUID - #0 "hit_hands" = 1.48079 56:5 Survivor2_DZ23.11.2012 16:51:47: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:51:48: Steve (IP) GUID - #0 "hit_legs" = 0.469271 56:5 Survivor2_DZ23.11.2012 16:51:48: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:51:49: Steve (IP) GUID - #0 "hit_hands" = 1.59095 56:5 Survivor2_DZ23.11.2012 16:51:49: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:51:49: Steve (IP) GUID - #0 "hit_hands" = 1.88037 56:5 Survivor2_DZ23.11.2012 16:51:49: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:51:50: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:51:50: Steve (IP) GUID - #0 "hit_hands" = 2.03295 56:5 Survivor2_DZ23.11.2012 16:51:50: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:51:50: Steve (IP) GUID - #0 "hit_hands" = 2.09772 56:5 Survivor2_DZ23.11.2012 16:51:52: Steve (IP) GUID - #0 "hit_hands" = 2.51599 56:5 Survivor2_DZ23.11.2012 16:51:52: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:51:52: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:51:53: Steve (IP) GUID - #0 "usec_bloodqty" = 8110.8 56:5 Survivor2_DZ23.11.2012 16:51:53: Steve (IP) GUID - #0 "hit_hands" = 2.68649 56:5 Survivor2_DZ23.11.2012 16:51:53: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:51:53: Steve (IP) GUID - #0 "hit_hands" = 2.82256 56:5 Survivor2_DZ23.11.2012 16:51:53: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:52:02: Steve (IP) GUID - #0 "hit_hands" = 3.65202 56:5 Survivor2_DZ23.11.2012 16:52:02: Steve (IP) GUID - #0 "hit_hands" = 3.751 56:5 Survivor2_DZ23.11.2012 16:52:03: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:52:03: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:52:03: Steve (IP) GUID - #0 "usec_inpain" = true 56:5 Survivor2_DZ23.11.2012 16:52:03: Steve (IP) GUID - #0 "pilot" = true 56:5 Survivor2_DZ23.11.2012 16:52:03: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZ23.11.2012 16:52:03: Steve (IP) GUID - #0 "unconscioustime" = 50 56:5 Survivor2_DZ23.11.2012 16:52:03: Steve (IP) GUID - #0 "norrn_unconscious" = true 56:5 Survivor2_DZ23.11.2012 16:52:03: Steve (IP) GUID - #0 "hit_legs" = 0.942492 56:5 Survivor2_DZ23.11.2012 16:52:03: Steve (IP) GUID - #0 "medforceupdate" = true 56:5 Survivor2_DZetc etc etcAs I said, I'm still trying to wrap my brain around deciphering legitimate log entries and illegitimate log entries. So if I'm completely off base here, I apologize. Share this post Link to post Share on other sites
MissBehave 37 Posted November 23, 2012 These filters for logging are helpful if you don't have them yet. http://code.google.com/p/dayz-community-banlist/source/browse/#git%2FfiltersI am in the same boat with the learning curve and struggle to figure out logs. I think you might be able to check the setdamage.log for #1 as an indicator. Usually if a guy is really being a doosh you will find thousands of spammy entries in some logs with oddities from the same player in other logs. The community ban list is pretty helpful for me. I apologize I don't have a concrete answer. Share this post Link to post Share on other sites
Timb 15 Posted November 24, 2012 These filters for logging are helpful if you don't have them yet. http://code.google.c...se/#git/filtersI am in the same boat with the learning curve and struggle to figure out logs. I think you might be able to check the setdamage.log for #1 as an indicator. Usually if a guy is really being a doosh you will find thousands of spammy entries in some logs with oddities from the same player in other logs. The community ban list is pretty helpful for me. I apologize I don't have a concrete answer.I am using those filters. ;)I literally just rented the server this week, so I'm essentially infantile in knowledge. I've been trying to research as much as I can, it's just a lot of random forum posts to sift through that have no replies or replies not relevant to what I'm looking for, etc.Even with those filters, I have some issues causing problems with legitimate players. For example, if a player equips camo clothing/ghillie, they get kicked for Script Restriction #45. I found a few threads on it, one with a potential fix... which failed. I also assume a lot of these kids who come in scripting are using a BattlEye bypass, so they don't show up in logs anyway? Share this post Link to post Share on other sites