BF2 Server Restart

MEGA · **Joined:** 09 Sep 2009 09:34 **Posts:** 7

Hi, im new here... I want to know if some1 know a way for force a battlefield 2 server restart... or something like that...
I have 2 server 64 slots and my server all day is restarted... i contact the support but they are fucking asshole, i think some1 is doing it... any1 know any exploit force the server restart ore something like that???

aluigi · **Posted:** 09 Sep 2009 10:21

is highly probable that the restart is only an effect.
in reality your server could be crashed and the auto-restart feature of the launcher restarts it.
what's your exact server version? 1.4? 1.5?

if you don't have the 1.5 patch first install it, monitor your server for one or two days and then we can continue the discussion:
http://blogs.battlefield.ea.com/bf2_214 ... lable.aspx

MEGA · **Joined:** 09 Sep 2009 09:34 **Posts:** 7

Our server already have the new patch installed v1.5, i really think some1 is doing it by any exploit... because really strange the support sayd cant do nothing for help!

The server just auto restart always, all days...

aluigi · **Posted:** 09 Sep 2009 10:53

1.5 should have fixed the bug reported by Francis and for which I created my unofficial bfloop fix so we can exclude it.

bug there is something you can do, at least 2 things:
- attaching a debugger (ollydb) to the server and then save a screenshot of it when it breaks after the server goes down so that I can check it and maybe can be useful
- run a sniffer or proxocket (better solution) on your server so that it will collect ALL the sent and received packets included those which causes the problem, anyway this "test" is a bit exagerated because the file with all the packets can be very big if the crash happens not soon

obviously if your server is remote (ftp access only) you can't attach the debugger to it so the only test remains proxocket... these are the tests I have in mind for the moment if you are 100% sure that this is an external cause (aka attack) and not something in the hardware/software/configuration of your server.

have you also noticed something strange before the crash? like a new player joining or "strange" activities and logs?

MEGA · **Joined:** 09 Sep 2009 09:34 **Posts:** 7

No, we dont have FTP acess, just have BF2CC acess and control panel on website, but ftp we are not allowed to acess...
I send a lot of tickets for support but they just says reinstall the server, and put the fault on the new patch, but before the new patch update this was happening, before patch update was server crash but now they cant crash anymore, but now they make the server auto restart.

Please send me the links, of this tools, i will try send to gameservers support and ask if they can install this, and i will send u the logs.

look some screenshot of the bfcc log

http://img30.imageshack.us/img30/8436/509p.jpg
http://img42.imageshack.us/img42/8436/509p.jpg

aluigi · **Posted:** 09 Sep 2009 11:26

no those screenshots are totally useless.
the link to proxocket is http://aluigi.org/mytoolz.htm#proxocket
it's a simple ws2_32.dll file to place in the bf2 folder, it works only on windows

anyway I repeat that will be generated a big CAP file (huge if there are a lot of players) so it's definitely not a good test and moreover it's not certain that it will help

MEGA · **Joined:** 09 Sep 2009 09:34 **Posts:** 7

Okay thanks i will try :D or i will back to a provieder with BF2ahd there this never happenning.

aluigi · **Posted:** 09 Sep 2009 19:06

uhmmm can you tell me how an unknown, undocumented, closed source, third party and commercial "something" can protect your server versus an unknown problem which could or couldn't be a malicious attack?

then I'm not aware of security researches performed by those people so remain the fact that if a problem is known (read "found and made public by someone else") then they "could" try to fix it which is exactly the same thing made by other people in the community (or sometimes me) for free.

MEGA · **Joined:** 09 Sep 2009 09:34 **Posts:** 7

Hi, my server have BF2ahd but they still can force my server restart, the support from branzone.com, quote me this:

"Could be possible someone is port flooding the server IP, let us know the next time it occurs and we'll check the packets."

aluigi · **Posted:** 10 Sep 2009 09:46

the first part of the answer they gave you is senseless because bf2 has no problems with packets flooding like the 99% of the games because there is no reason to have problems in handling many packets (after all they are servers).

while the second part probably refers only to a simple check on the amount of packets received and not on a packet inspection which requires knowledge of the battlefield protocol and a lot of manual testing.

would be useful to know if someone else is suffering your same problem.
does the restart happen regularly or in some particular conditions?

gregory · **Joined:** 10 Sep 2009 17:27 **Posts:** 1

Hello fellows.

I guess it's because of BF2CC - it caused a lot of problems with the new patch. See here: http://forums.electronicarts.co.uk/batt ... rrors.html

A new Modmanager version (2.0) was also released to support BF2 v1.50 better: http://forums.electronicarts.co.uk/batt ... st11148868

MEGA · **Joined:** 09 Sep 2009 09:34 **Posts:** 7

I think is not because the bfcc or anything installed, because before the patch update was happenning, not all the time but happenning...
Some guys before the patch update crash our server to desktop all the time, then we move our server for a provider with bf2ahd, and then now they force the server restart because they cant crash us to the desktop anymore... A asshole add me on msn and told he is doing the server restart and dont will stop...
And a friend 2 have the same problem with the same asshole, he add her on msn 2 and told he is making his server restart.... i know he buy a private hack 187ci.com, because he is a fucking newbie for do it self...

*EDIT never and again never talk or think about similar things here*.

Because we never do nothing for this guy, he just a noob aimbot and we ban him from all our server... and now this idiot disturb us.

aluigi · **Posted:** 11 Sep 2009 15:46

and you and your hosters are directly or indirectly supporting his actions because your hoster has done and is doing nothing to understand the causes of the problem (aka debugging), probably due to the lack of technical knowledge (as usual) and because doesn't care (you pay, that's what he wants).

so if you (not you personally but you in general) do nothing to analyze the problem, moreover for the fact that you have the possibility of doing it since the problem happens often and so there are more chances of analyzing it, how you expect that someone else can do it without having nothing to analyze and other details?!?

if the problem is not caused by bfcc as you claim the causes are only two:

- a lame in-game bug which causes the crash of the server, those are usually the most diffused because require no technical skills to be found by gamers.
the first example which comes in my mind is the grenade bug in medal of honor of which I heard some years ago

- a security bug exploitable through the modification of the protocol, those are more rare because it's required to figure the protocol and its fields (that's why the only documentation and examples are the mine like bf2_sniff).
an example of this type of bugs is just the loop vulnerability found by Francis in BF2/BF2142 for which I created an unofficial fix (bfloopfix)
this is usually the most easy type of bugs to analyze because the last packets received from the server (if not even just the last one) are those malformed

oh and don't make confusion between cheats and vulnerabilities, they are two completely different things

MEGA · **Joined:** 09 Sep 2009 09:34 **Posts:** 7

Yah, thanks i think we found the problem is fucking gamehost with billions of server in the same box, wen all servers full, restart! because we found some people reporting the same problem... with the same server IP... so because this the support dont do nothing for solve, we already move our server for this Host, and now its all fine, and we have full control of the machine! all server ranked with ftp acess, desktop all, now really control all, not the same this fucking game host with a patetic control panel and bad support.

Thanks aluigi, you have a lot of tools really usefull!

devicenull · **Joined:** 14 Jul 2009 18:38 **Posts:** 13

aluigi wrote:

and you and your hosters are directly or indirectly supporting his actions because your hoster has done and is doing nothing to understand the causes of the problem (aka debugging), probably due to the lack of technical knowledge (as usual) and because doesn't care (you pay, that's what he wants).

so if you (not you personally but you in general) do nothing to analyze the problem, moreover for the fact that you have the possibility of doing it since the problem happens often and so there are more chances of analyzing it, how you expect that someone else can do it without having nothing to analyze and other details?!?

Given he said he only has BF2CC access, I can tell you he has a "ranked" server. This kind of server requires the host to sign a contract with EA. What this contract says I can't be sure, but given that the only access people can be provided is FTP, I'd imagine that debugging or packet sniffing on that machine would violate it, possibly making EA remove the ranked license.

Also given that the ranked servers cannot be modified at all, even if the bug/exploit was known, it could not be fixed.

Luigi Auriemma

BF2 Server Restart