banimod / etpro / ettv forums Forum Index banimod / etpro / ettv forums
Bani's Discussion Forums
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Anti cheat system
Goto page 1, 2  Next
 
Post new topic   Reply to topic    banimod / etpro / ettv forums Forum Index -> ET Pro Documentation
View previous topic :: View next topic  
Author Message
bani
Site Admin


Joined: 21 Jul 2002
Posts: 3685

PostPosted: Wed Apr 14, 2004 11:51 pm    Post subject: Anti cheat system Reply with quote

ET Pro integrates a new anti cheat system. At the moment it is intended to complement (not replace) PB for cheat detection. ET Pro looks for things PB cannot, and PB looks for things ET Pro cannot.

Controlling the anticheat system
b_anticheat controls the anticheat system. The possible settings are:
0 - disabled. ET Pro does not report cheaters at all.
1 - enabled (default). Normal sensitivity. ET Pro reports known cheats from the database and known cheat techniques as cheaters.
2 - Increased sensitivity (not recommended). Includes checks which are likely to cause false positives.
3 - Extreme sensitivity (absolutely not recommended). Only absolutely clean windows systems are allowed. Absolutely clean windows sytems are very rare though, so lots of players will be reported as cheaters.

Logs
If a cheater is found, they are reported to players on the server and in the logs.

If the word CHEATING is in RED, ET Pro has detected the player is absolutely using a known public cheat. It is safe to kick/ban these players. You will also see something like this in your logs:

21:58.11 etpro IAC: 1 [JiuJitsu^7] [304DADA5916CE3A8E8B6966AB772D142A7578C3D] [^1CHEATER^7 win32]
21:58.11 etpro IAC: HWe8auebgXt69-IaJ3TkljBwH7j8FlvEnJDUk1AUNMZgdOZ0WyyL2n
zx-z0phDJQFvXU74+rqeXadpIWgp822butKGwycggXnA-B9I4Sw9AqGuorR7Mwz+Rt45
tyMwxunGdEe0V8MGTzqM4IKm8mPt-6LlY6YaRvyDdOrqyaiInYX2Zeq8k2BI0mufHztkIU
CiSvtNQwtZFTjSCe6VKHKkbV8UUTKT-0PW5Oa1Y81cRdIBqkRQ

This is encrypted information which allows ET Pro developers to positively identify which specific cheat the player was using, if needed. The ET Pro developers do not generally need such logs reported to them.

The following only applies if b_anticheat is set to 1:

If the word CHEATING is in YELLOW, ET Pro has detected the player has software which does exactly the same thing cheats do. There are two possibilities: they are using software which causes false positives (FRAPS, atitool), or they are using a private/non-public cheat. Users who get false positives should read this thread to resolve them.

If an admin suspects a player in YELLOW is using a new undetected cheat, you may forward your logs to us for inspection. You will see something like this in your logs:

10:58.03 etpro IAC: 0 [^7[^3AV^7]^2Ikkyo^7^7] [5C650F40214398C58AE5ECDFADBC8D1AB6BFDD89] [^3CHEATER^7 win32]
10:58.03 etpro IAC: 5F+yE+tIboJD0TcZW+V3BrfKONQYxCEkmUGp4XWCRamupExR
cKGVjS31kmClRCWY0+d+0ugxz-X+9u1IHnispm3MGCt6QFlgVHuK41D3188DvPUY5i1
7LXNclCEYwQxs3rZLkCnXew3McNthKA8ASo4yyhbU6OALVV3az+dyEVAvB1NEudU
YoYJoEXFKFEbJSRt+3Rw4atWM8NO7yQbULkFrT1MjPjKzULVr2CiXcy+6YP6rDTXcWg

This encrypted information allows ET Pro developers to determine if the player was really cheating with a new cheat, or if it is a false positive caused by external programs.

Players who are reported as yellow CHEATER who are unable to resolve their problems by following these instructions should post a bug report in this forum.

You may see "strange logs" like the following:

09:20.10 etpro IAC: 0 [^7de^2A^7D ai^2M^7] [556B00DCB87C92A03784A7C558C5BFCA3238B1FF] [??? win32]
09:20.10 etpro IAC:MsCWa5viR4imLMGpS6W7gpMa1OgM-bSPmI69cE-z+nL2xQgc8t7
b6TdkwOfiDBG5llCaW4MuWrQr8VSBxSt+pqJVvJFkR29ppgerMLqGmCh0+bsf5w+m23
Wj-diM68xx4kVc+BDX1ZEMTsMYTccaSXKyNzkKZT1wx9rAWG5plv96QsrieIXY+3LpSK
xuuanLPixzpARZOv5VH6rZFY0LhvdvA3vVQwSynTKkOIW3XLmrmt3LNOWpO3RmTR3
uR87OFCCh38ws3S76cfmG

This does not mean the player is cheating, it simply means there is something unusual about their system that may be of interest to ET Pro developers. You should not forward these logs unless you suspect a player is cheating or unless ET Pro developers specifically request them from you.

Likewise, simply because an encrypted debug follows a player's log does not mean they are cheating:

21:24.58 etpro IAC: 3 [^7|^0NE^7|R^5a^di^4n^7-^d42^7^7] [BD0875F42CB16B337A0EDC85F6BA03155665AEFF] [clean linux]
21:24.58 etpro IAC: vZHbY0m5i8DJ-my5FxRp1+I9Drj8cuVMAowAoX6XwWKaCh2h3lH
oCVTAgHsngeSrITZQWoFsJRGSjyAqsw9SxirdsZmoR7vLeTJYgk2t35ROlMyxgk+yd1nFq
HKfdE5sn5oE5tQQ-YTEJl7KIWHyG8ODeK+aLbR4NGIvgdWbVrllMEWFL3d99cgej+a+e
MKJIQYEbJB2LVh-MGxmXFovazupjtPGSydBnlCtWG6FWvLrd50tgO6gY2atXLaJfW-b-a
iw1Q5bcZMuZZ8yDHGDdFVoeobI2vw8qsZG-bXlINVVpNhIbNaenba6mvo

In this case it is simply logging information so that the ET Pro developers know the anticheat system is functioning correctly. Please do not forward these logs unless specifically requested.

Keeping up to date
As new cheats are found, they will be added to ET Pro's anticheat database, and database updates will be posted in the ET News forum.

Admins can download these database updates and install them at their leisure to keep up to date.

Autokicking
The cvar b_cheatkicktime controls what is done when a cheater is detected. If it is -1 (default), nothing is done besides reporting to the console and logs. Any other value will kick the player for the specified number of minutes (eg 0 = kick for 0 minutes, 10 = kick for 10 minutes).
Back to top
View user's profile Send private message Send e-mail Visit poster's website
WiLZy



Joined: 15 Sep 2003
Posts: 29
Location: My PC

PostPosted: Wed Apr 28, 2004 7:14 am    Post subject: Reply with quote

in wich log is this nfo saved? etconsole.log, games.log ?
_________________
Best Regards
Back to top
View user's profile Send private message
Deus



Joined: 12 Mar 2004
Posts: 1053
Location: Germany

PostPosted: Wed Apr 28, 2004 8:08 am    Post subject: Reply with quote

Example.cfg wrote:
// b_cheatlog - defines the name of a separate log for the anti-cheat system
// when set to an empty string, the anti-cheat system uses the main system
// log file
// default: ""
set b_cheatlog "etpro_cheats.log"

_________________

http://spielwelt15.monstersgame.net/?ac=vid&vid=39033566
Back to top
View user's profile Send private message Visit poster's website
SpankD



Joined: 15 May 2004
Posts: 1

PostPosted: Sat May 15, 2004 6:46 am    Post subject: Hey check this out Reply with quote

Prob something I did in a configuration file
New Linux server with ET Pro installed
Ive been playing ET casually for 4-5 months now and I have never been kicked for cheating nor kicked for that matte r(except idling).
As said before I just installed etpro on the server and dont know if I botched the settings.
I run a linux client with the latest ET patch.
heres the log lol banned from my own server Razz
09:37.38 etpro IAC: 4 [[cRm]SpankDMonkey^7] [6B7F1DE3A0F05F4A573A888EC7F93B2075B58077] [^3CHEATER^7 linux]
09:37.38 etpro IAC: -8hCR3iwUFer5CI2aft31r2-JGuARExNLju+M5C9CwBHpEHwIHoA60GP9SV0KdrTYv7htA8+a-l9RDho4onmoq1UonSpg4PqTApDv5zf3Ke0117HJx-YHd5tU616PjrFVbJShIbRQyXw3ZH38KvqQzl4LrMJpixyJrijrZqyEDUSdqX9bd99l7QG+sj8HBWkM3aW685124sFzY3dHF8DF7uXWqFJJu0LUu+UJ0Ypn6YITT6Bq2jnQJZkKbSXCHwL7AhnkcaI11K8vAXV3M+0cSSkZLJbGQlWZGlz2hV5b5QiNFA4+4pMGgGvE6GuhHrL1di45cffoHLy3OuIvlDk3XL1LpEGXz-t8lcjGjUSd2S7HSH7zUObG0srEjGoDPZMDZEtjckk9G+85XvvhCpF2HsT0i0SOrEmeNH+Zl8rEKAMlbN0HSvJ3sfXXCNawCsF6oUjZN2xfSLuRud-ndFXEUvVhBd8v4NUOhf4Ha6Z0PfArEmrfgMdkZnOKyGUhKA9OEg9DTMOsI3fak+M62w+1K3jcg2n5XbFN+Cy+3-g6ZatCDg9RwWMfyBmrYjtQDlx

Im running a pure linux client no win running under wine or winex I have pristine opengl lins which as I said function perfect everywhere else but my server lol. Id like to turn this added cheat detection on but not if I cant play.
Back to top
View user's profile Send private message
SnowWhite



Joined: 08 Dec 2004
Posts: 22
Location: Sweden

PostPosted: Wed Dec 08, 2004 12:01 pm    Post subject: teamspeak=false positiv? Reply with quote

I recently noticed, when I use teamspeak, etpro shows my client is [??? linux]. Without teamspeak it shows [clean linux].

This is my system:
AMD Athlon(TM) XP 1800+ AuthenticAMD
Gentoo Linux 1.4 3.2.3-r1
Kernel 2.6.9-gentoo-r4,
libc 2.3.2
KDE 3.2

I use standard ET linux client. It is clean, except I had to change start script to make ET use artsdps for play with teamspeak, otherwise it's no sound in ET.

I don't know which version of etpro started to report me, because I didn't check this before. Some server admin asked a while ago why I had [??? linux], but I didn't know, because I understood that it was related to teamspeak only now. I said I wasn't cheating, but he didn't believe me. Ok, who cares, just some public serv. Smile

And (before someone says it) no I can't stop using teamspeak. I need it for clanwars. But it can be a big problem some day if the other clan looks at /cheaters and think that maybe everyone on my clan uses aimbots. Then it's no so OK, and I care!

Can someone please help me fix this?
Back to top
View user's profile Send private message
bani
Site Admin


Joined: 21 Jul 2002
Posts: 3685

PostPosted: Wed Dec 08, 2004 12:13 pm    Post subject: Reply with quote

get the output of /cheaters for your client and post it, eg /cheaters <clientnum> when you are connected to the server.
Back to top
View user's profile Send private message Send e-mail Visit poster's website
SnowWhite



Joined: 08 Dec 2004
Posts: 22
Location: Sweden

PostPosted: Wed Dec 08, 2004 1:02 pm    Post subject: Reply with quote

Ok, I did this on my own local host server:

]/cheaters
etpro anticheat database revision 2004-11-22 07Z
0 [^wwhite^7] [F482363D2DD9CB81E16757BA94845080175CD58C] [??? linux]
]/cheaters 0
etpro anticheat database revision 2004-11-22 07Z
^3WARNING^7: Server improperly installed! Multiple client .pk3 versions installed on server! Please notify administrator.
]/cheaters clientnum 0
etpro anticheat database revision 2004-11-22 07Z
0 [^wwhite^7] [F482363D2DD9CB81E16757BA94845080175CD58C] [??? linux]


As you see I typed /cheaters 0, but it gave no output, so I tried a different ways. All same output. Hope this helps.
Back to top
View user's profile Send private message
gotenks



Joined: 15 Nov 2002
Posts: 4040
Location: out of my mind

PostPosted: Wed Dec 08, 2004 1:37 pm    Post subject: Reply with quote

it was confused because you had multiple etpro pk3's in the etpro directory, remove all but 3.1.9's pk3 then try it again
_________________
My Website

After a night of binge drinking:
=FF=im2good4u wrote:
WTF wanst i on top ?
Back to top
View user's profile Send private message Visit poster's website
SnowWhite



Joined: 08 Dec 2004
Posts: 22
Location: Sweden

PostPosted: Wed Dec 08, 2004 2:09 pm    Post subject: Reply with quote

gotenks wrote:
it was confused because you had multiple etpro pk3's in the etpro directory, remove all but 3.1.9's pk3 then try it again


Sorry, I don't think you are correct. It says [clean linux] when TS is not running. If your guess was true then I would have [??? linux] without TS, too. And also, this happened first when I was playing on some public server that was properly installed.

Oh, I just realize that maybe it's a problem with KDE's arts, not with TS. When that admin asked me about "??? linux" before, TS wasn't running, only XMMS mp3 player. And I run ET with artsdsp to have mp3 and game sound at the same time.
Back to top
View user's profile Send private message
bani
Site Admin


Joined: 21 Jul 2002
Posts: 3685

PostPosted: Wed Dec 08, 2004 2:29 pm    Post subject: Reply with quote

arts causes problems with linux anticheat becayse of the library preloading arts does.
Back to top
View user's profile Send private message Send e-mail Visit poster's website
nihilist



Joined: 28 Nov 2004
Posts: 30

PostPosted: Wed Dec 08, 2004 2:59 pm    Post subject: Reply with quote

SnowWhite wrote:
Sorry, I don't think you are correct.


gotenks was helping you with the issue of your "local host server" not returning you /cheaters output, not with the state of said output.
Back to top
View user's profile Send private message
gotenks



Joined: 15 Nov 2002
Posts: 4040
Location: out of my mind

PostPosted: Wed Dec 08, 2004 5:00 pm    Post subject: Reply with quote

SnowWhite wrote:
]/cheaters 0
etpro anticheat database revision 2004-11-22 07Z
^3WARNING^7: Server improperly installed! Multiple client .pk3 versions installed on server! Please notify administrator.
that is what i was refering to... if you clear out your other one's you'll get a correct iac feedback
_________________
My Website

After a night of binge drinking:
=FF=im2good4u wrote:
WTF wanst i on top ?
Back to top
View user's profile Send private message Visit poster's website
SnowWhite



Joined: 08 Dec 2004
Posts: 22
Location: Sweden

PostPosted: Wed Dec 08, 2004 5:13 pm    Post subject: Reply with quote

nihilist wrote:
gotenks was helping you with the issue of your "local host server" not returning you /cheaters output, not with the state of said output.


oh ok, sorry, I missunderstood. I'm tired and my english is not very good even normally Embarassed so, thanks to you all for the answers Smile

Now I done what gotenks suggested, only left etpro 3.1.9, and the message about bad server install stopped appearing. but "/cheaters 0" still returns nothing, and just "/cheaters" returns what I posted before.

maybe it doesn't matter now, anyway. If I understand you correct bani, arts is known problem? In that case, will you guys fix it in following versions?
Back to top
View user's profile Send private message
gotenks



Joined: 15 Nov 2002
Posts: 4040
Location: out of my mind

PostPosted: Wed Dec 08, 2004 7:31 pm    Post subject: Reply with quote

there are many different versions of arts (iirc) and bani doesn't have them all to get the info from
_________________
My Website

After a night of binge drinking:
=FF=im2good4u wrote:
WTF wanst i on top ?
Back to top
View user's profile Send private message Visit poster's website
kriterium



Joined: 03 Nov 2003
Posts: 3

PostPosted: Sat Feb 05, 2005 1:59 am    Post subject: Re: Anti cheat system Reply with quote

Hello Smile
bani wrote:

[304DADA5916CE3A8E8B6966AB772D142A7578C3D]

Can 2 computers have the same GUID Question
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    banimod / etpro / ettv forums Forum Index -> ET Pro Documentation All times are GMT - 8 Hours
Goto page 1, 2  Next
Page 1 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group