What do I look for in logs?

[AU23_Admin 14]

Just had a hacker. I immediately shut down the server and downloaded my server_console.log and scripts.log

So what do I look for? I'm with a managed host (Vilayer) so using those parsers appears to be out of the question.

Edited August 17, 2012 by AU23_Admin

[SmashT 10907]

Lots of things, feel free to PM the logs and I can take a look if you want.

[AU23_Admin 14]

Can you give me a general direction maybe? I'd prefer not to pass on logs unless it's to a credible source. I'm sure you understand.

[Wo3dy 111]

in Scripts.log:

most obvious is "createvehicle"

"binvisible" (not sure qbout the b, dont have acces to logs atm)

in Remoteexec.log:

you wont find much here, but what does get in this log 80-90% is suspicious.

Createvehicle.log:

you can find people duping,or stuff that shouldnt be in the game, but most is legit of whats in it.

youll know when something is suspicious in this file.

(i do suggest to update your files often, links in my signature, will get you there.)

[AU23_Admin 14]

Yep found about 6 people with the createvehicle command in my logs. Server is about 3-4 days old.