How to detect cheater with logs ?

[Khattr 4]

Hello all,

I have a cheater on a server I'm admin on.

He(she) make some forbidden vehicule to spawn .

I'm trying to figure out who is it ... but I've lots of holes in the arma2 rpt files.

On the script.log files , i've found something I don't understand :

21.07.2012 19:53:03: PLAYER_NAME_HERE (PLAYER_IP_PORT_HERE) PLAYER_HASH_HERE - #36 raddWeapon = 'addWeapon'
21.07.2012 19:53:03: PLAYER_NAME_HERE (PLAYER_IP_PORT_HERE) PLAYER_HASH_HERE - #36 raddWeaponcode = compile PreprocessFile (BIS_PathMPscriptCommands + 'addWeapon.sqf')
21.07.2012 19:53:03: PLAYER_NAME_HERE (PLAYER_IP_PORT_HERE) PLAYER_HASH_HERE - #36 raddWeaponCargo = 'addWeaponCargo'
21.07.2012 19:53:03: PLAYER_NAME_HERE (PLAYER_IP_PORT_HERE) PLAYER_HASH_HERE - #36 raddWeaponCargocode = compile PreprocessFile (BIS_PathMPscriptCommands + 'addWeaponCargo.sqf')
21.07.2012 19:53:04: PLAYER_NAME_HERE (PLAYER_IP_PORT_HERE) PLAYER_HASH_HERE - #30 rcreateMarkerLocal = 'createMarkerLocal'
21.07.2012 19:53:04: PLAYER_NAME_HERE (PLAYER_IP_PORT_HERE) PLAYER_HASH_HERE - #30 rcreateMarkerLocalcode = compile PreprocessFile (BIS_PathMPscriptCommands + 'createMarkerLocal.sqf')
21.07.2012 19:53:04: PLAYER_NAME_HERE (PLAYER_IP_PORT_HERE) PLAYER_HASH_HERE - #31 rsetMarkerPosLocal = 'setMarkerPosLocal'
21.07.2012 19:53:04: PLAYER_NAME_HERE (PLAYER_IP_PORT_HERE) PLAYER_HASH_HERE - #31 rsetMarkerPosLocalcode = compile PreprocessFile (BIS_PathMPscriptCommands + 'setMarkerPosLocal.sqf')

I can't find anywhere else in the log thing like that...

Of course I've anon the guy name, ip and so on in case I'm wrong and this is legit.

Could someone explain me what is that ?

Thanks

[isoterik 7]

thats nothing you have to care about it. that get logged since one of the last updates of BE and occured when one player connected / respawned

[Khattr 4]

thats nothing you have to care about it. that get logged since one of the last updates of BE and occured when one player connected / respawned

Oh, thanks for the advice ....

Do you know what I should look for ?

Thanks

[jskibo 143]

_{The stupid ones will still run scripts like "ammo.sqf" or "Crayte.sqf" and will be easy to find.}

_{The smart ones are using a BE bypass so you'll have nothing in your logs to look for anyway.....}

[Khattr 4]

_{The stupid ones will still run scripts like "ammo.sqf" or "Crayte.sqf" and will be easy to find.}

_{The smart ones are using a BE bypass so you'll have nothing in your logs to look for anyway.....}

So I hope I've an idiot on my server :-) ...

Thanks for you reply

[jskibo 143]

Wish I had a better answer for you, but its getting harder and harder to catch the idiots...

[Khattr 4]

And for example,

the hackr seem to have spawn a attack heli on the server,

is it possible to track coordinates of that vehicule and to try to associate its with one player coordinate ?

I'm a fully newbie ... so i don't know where to start ...

[isoterik 7]

Oh, thanks for the advice ....

Do you know what I should look for ?

Thanks

you have to search by your own for common scripts, but as jskibo has said smart ones use a bypass and you will see nothing. but with the new feature of BE you can modified the scripts.txt that only CERTAIN things will occure in the logs, and such things like you have posted will not be logged. im currently working on the scripts.txt i had uploaded here and make it ready to get working with the new feature.

Edited July 24, 2012 by Isoterik