Cheat Identifying

[pvt_ammo@hotmail.com 164]

I would like to ask members of the community who have knowledge of running servers how they Identify cheats within log files? Are there any particular things that a host can definitively ban a player for if seen within a script log.

I read from different sources that the following line you should ban for and others saying it should not.

11.07.2012 11:35:32: NAME (IP) GUID - #13 icopter" || _v iskindof "plane")
then
{
_v setVehicleInit "[this] spawn BIS_Effects_AirDestruction";

Or

11.07.2012 14:24:28: NAME (IP) GUID - #34 raddWeaponcode = compile PreprocessFile (BIS_PathMPscriptCommands + 'addWeapon.sqf') 

Would also like some insight into how some of you deal with cheats in your servers. Are there certain things you do that aids in capturing them?

Any help would be greatly appreciated. I'm sure others in the community just starting out hosting a DayZ server would also like some information.

Thanks.

[Guest]

Hey Ammo,

The problem is that this whole game is based on scripts; addWeapon.sqf could be a malicious script a hacker executed to spawn himself in some items, but it could also be a legit script run by the game when a player picks up a gun from the ground.

These scripts seem legit IMO though.

[walkerbait421 19]

After spending at least a dozen hours trying to learn the log format/scripts/etc, I have decided there is just not enough information out there in order to fight hackers with definitive evidence for ban. This is something that really needs attention. I.e. a provided whitelist or blacklist of things to search for as well as an official script detection file. The one thing you can do (which we may do soon on our server) is enable nametags and go and video your hacker encounters for evidence and ban them (very time consuming and not very practical).

[pvt_ammo@hotmail.com 164]

Thanks for your feedback. I totally understand the issues with the current system, it's utterly flawed due to the nature of the ArmA engine. As Rocket put it, "ArmA is a very trusting engine."

I made this thread in the hope that perhaps some admins have a few tricks up their sleeves to try and monitor what's happening and some insight into the script logs which I'm pretty unfamiliar with. No hope for us at the minute it seems. =[

I thought it would be a nice addition if they added a spectate mode for admins so they can follow and record players with a hud that displays a timestamp/date, GUID of the player being followed and the admins GUID and perhaps player IPs. It isn't full proof but it gives us admins some extra tools to combat this issue.

Thanks again for your info. Anyone else that would like to add anymore info or suggestions to this would be greatly appreciated.

[{sas}stalker 108]

We had one earlier that had "godmode" in it, that was pretty simple to catch :P

[jskibo 143]

Make sure you have Tonics latest ban and script files loaded to start with.

[pvt_ammo@hotmail.com 164]

Make sure you have Tonics latest ban and script files loaded to start with.

I thought these files are auto updated after each server reboot anyway?

[isoterik 7]

Make sure you have Tonics latest ban and script files loaded to start with.

i have extended that file i found somewhere else where it was not named it was from him with plenty more stuff: http://dayzmod.com/forum/index.php?/topic/27728-battleeye-script-detection/