Anticheat messages in log files

Sidious · Post by **Sidious** » Sun May 28, 2006 7:57 am

how proof are those logs nowadays for example this ones what does that mean is there something or not

21:19.27 etpro IAC: 2 [^1'^pV^1,^ps^90^pu^9l^1!^7] [7C1E5CF595329959C1CDBC57D7AFEFCE4725922A] [win32]
21:19.27 etpro IAC: 7ls3L3ZelE3IcJUMn+JBv8lESqgwIs5wl-6hB5eM5sR2bdYJ0UxZaHAhx-ZlPDVSNuajKvvhDtRe+p8M-KW91FUbPAyJ4P8lrz2+ZHda7G8iSLX-jpXMGIjTD13rZp1PrvpQtbV2Y9MKxqjV2qR5-AKZI-Vzgu3MnDK7kmiH8cVVB0c
21:20.06 etpro IAC: 4 [^>reeflex ^wMANU^7] [E0A583F10020D96F53E7747670CBBE84906F3F86] [win32]
21:20.06 etpro IAC: 4O+2I+6xw5gQfySvq1OS7i-Bv-LEao6yvjxpvZ1dM8wrIbKne6CxspG9Ro9ERcv+MVjQjLcViBvcaSYZlCVT3Au3IDzKer-bpqPdeUmc9vwdIguMlCox9itJkm1Kkhk5kmruMhjaWi3mKitgRd10+Srth+LzClwEUqsh
21:20.14 etpro IAC: 7 [^>reeflex ^7swzz^7] [BA891BBEFC7C6706BF19374C0D2AC1E34BBED872] [win32]
21:20.14 etpro IAC: KqQJP0R5b-fn5UVEfm54RRdB3ZW8sxHMeGQwVJkP2yIfwoMSNSmR8vhU6Psvzs-Ac2ikFxwtmDTzQ8dxnRPntiEO95G+Ct40BRoySbJy5fD9rfKvuZhjp8VfBBd3UwbBBvN+K08EK55X2OvwOO6fopvy3EWSrehyZA
21:20.42 etpro IAC: 9 [^>reeflex ^wromeo^7] [0CB07343BC60DF8D67CE0A638E1C33C29D930E5E] [win32]
21:20.42 etpro IAC: 7a+hAfebMDOaXuB1fsYjeoMv0zwiAITDmvel9d5Wa62Vm79-Ma9kcaWENnQe1WOgLHlN9CZHPNNe+p5rkXlsFhqozsgibQeG0k4B1hKtTEey5xd9WNd2g9BpU0P29eeS7lqYbPyZFqxgkXkUwb-cZVMOae4uzOTFyVzZuQ
21:20.47 etpro IAC: 10 [^>reeflex ^7stiff^7] [57BA04E1806CA9410B89D4E34EA3F86AA518C242] [win32]
21:20.47 etpro IAC: FcsrCBnTg-kDCSm2w7deTndyx6sZEK2RcbBLuBhMTN02qs1dtm75671VqujWDiq1np46DE+YzbqBC-drJd8AAHgGAPBmG4ENhRdRIhkPZ-cUphTbbdSke-ywE3Ri69iDpk0nPkW95uXlGZaF9HGE1UkkDfSICl8hZozp+Q
21:21.21 etpro IAC: 9 [^>reeflex ^wromeo^7] [0CB07343BC60DF8D67CE0A638E1C33C29D930E5E] [win32]
21:21.21 etpro IAC: bcxcPx-41x9Qv8XpXhe3BxuWdCkGWJhQ7c0zX41uo6pAxr4TRKW1w7wChI5a1JpmIWI9CLf1euYd2xC62AW897xTIu9vMp8c+pEsMexfcLNeMjZiK1XdpwUGeLZR-nxWB-HnR8tFV9kA8N6MjmIiKTShLHeaVnhgoeDMLA

The Birdman · Post by **The Birdman** » Sun May 28, 2006 11:10 am

Read this post http://bani.anime.net/banimod/forums/vi ... php?t=3333

Doing a little search of the forums about cheaters would have thrown this post up for you.

Sidious · Post by **Sidious** » Sun May 28, 2006 12:20 pm

i did but i asked what it says nowadays nor is that any of that examples listet there.

because some of that player listet in that logs had strange grafiks like rivatuner r_picmip 15 what equals a wallhack .. so the question again is that a proof way to find shortdicked players or could it also be harmless stuff

The Birdman · Post by **The Birdman** » Sun May 28, 2006 2:49 pm

If someone has their r_picmip set to 15 and your server is allowing it then you can't call him a cheater.

If you don't wish players to set such cvars to these limits then it's up to you to control it with the use of either PB or ETPro's commands ie:

command r_picmip in 0 3

With this in your config no one will be allowed have r_picmip outside of these values, if they are ETPro will if >3 lower it to 3.

Sidious · Post by **Sidious** » Sun May 28, 2006 3:43 pm

the in game picmip is 1 like normal with rivatuner and stuff like that u can set the lodbias adjustment of ur gfx hardware.. no cvar check helps there but thx for comment anyway

for example lodbias of ur gfx = 0 /r_picmip ingame 1 looks normal
but lodbias of ur gfx = 15/ r_picmip 1 ingame is same as r_picmip 15 ingame the difference.. cvar check don't block it

i mean lodbias and picmip is not same it just looks like that than
no textures no trees no nothing

Deus · Post by **Deus** » Sun May 28, 2006 9:45 pm

The Birdman wrote: ETPro's commands ie:

command r_picmip in 0 3

With this in your config no one will be allowed have r_picmip outside of these values, if they are ETPro will if >3 lower it to 3.

actually its either sv_cvar r_picmip IN 0 3 for a .cfg file or command "sv_cvar r_picmip IN 0 3" for a .config file.

ReyalP · Post by **ReyalP** » Sun May 28, 2006 10:15 pm

Those messages have nothing to do with riva tuner

Rivatuner doesn't change picmip, it just has a similar effect. picmip is hardcoded to not go over 3, so enforcing a limit of 3 is fairly pointless.

As to the IAC messages, obviously, they aren't conclusive or etpro would have kicked them, but they are suspect.

ouroboro · Post by **ouroboro** » Sun May 28, 2006 11:46 pm

Please don't post the names and ETPro GUIDs of people. Just post the ETPro IAC hash.

=FF=im2good4u · Post by **=FF=im2good4u** » Mon May 29, 2006 12:27 am

but still how reliable is IAC nowdays since it hasnt been updated in months.

but ofcousre the hack that where already detected should still be detected

deej · Post by **deej** » Mon May 29, 2006 7:07 am

If you read a bit on known cheater forums you'll see IAC is still hard to get by but once the coder managed to break it, new releases are very easily bypassed.

Deus · Post by **Deus** » Mon May 29, 2006 7:39 am

ouroboro wrote:Please don't post the names and ETPro GUIDs of people. Just post the ETPro IAC hash.

the ETPro-guid is a valueable information in the deciphering process of the IAC-hash. And the name is in the hash anyways.

you still need the secret key to decipher it, including a heavy math-construct involving phi and the root of 2Â³.

ouroboro · Post by **ouroboro** » Mon May 29, 2006 10:12 am

Deus wrote:
ouroboro wrote:Please don't post the names and ETPro GUIDs of people. Just post the ETPro IAC hash.
the ETPro-guid is a valueable information in the deciphering process of the IAC-hash. And the name is in the hash anyways.

you still need the secret key to decipher it, including a heavy math-construct involving phi and the root of 2Â³.

The point is, don't post names and other things easily identifiable by the general public every time you get rolled on a pub. He's all but accusing people of cheating and they haven't been proven to do anything of the sort (yet).

Save the names for after the confirmation.

P.S. Happy 3rd birthday, ET!

The Birdman · Post by **The Birdman** » Mon May 29, 2006 11:20 am

Deus wrote:
The Birdman wrote: ETPro's commands ie:

command r_picmip in 0 3

With this in your config no one will be allowed have r_picmip outside of these values, if they are ETPro will if >3 lower it to 3.
actually its either sv_cvar r_picmip IN 0 3 for a .cfg file or command "sv_cvar r_picmip IN 0 3" for a .config file.

sorry, cheers Deus for correcting my mistake, knew there was something wrong with it when i posted, but was to lazy to check it up lol.