These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

 
  • Topic is locked indefinitely.
 

Regarding Recent Connection Issues

First post First post
Author
Siege Torpedo
The Scope
Gallente Federation
#41 - 2014-09-22 18:36:38 UTC
Down with DDOSING F*****s.
Grace Chang
Tyrannis Enterprises
#42 - 2014-09-22 18:38:38 UTC
Ryan Paladin wrote:
I was going to say "X group must be mad" but when I started thinking about it half of Eve is butt hurt enough at any given moment to do this...


Well since it is clearly very criminal (you would go to jail for it in most jurisdictions and go bankrupt in the process), it seems to be very personal. Probably someone who got fired or has some financial stake in it. Why would anyone attack an Online game otherwise for extended periods of time.
Atum
Eclipse Industrials
Quantum Forge
#43 - 2014-09-22 18:44:31 UTC
Analeesa wrote:
Hate to have to ask but is there no hope for better mitigation in the near future?

Not really... DDoS attacks are stupidly easy to initiate, and damn near impossible to stop. A quick (and oversimplified) description of how a normal internet connection works, using web browsing as an example...

Client walks up to Server and knocks on door #80.
Server opens the door, says "Hey, how are ya? Which of your pipes should I send the webpages back through?"
Client says "Ehh, #2503 looks pretty bored, use that one."
Server says "Ok, here's your webpage. Happy surfing!"

In a DDoS, though, the process looks like this:
Zombie walks up to Sever and knocks on door #80
Server opens the door, says "Hey, how are ya? Which of your pipes.....?"
Zombie stands there like a... well... like a zombie.
Server says "Uhh, dude, you knocked on the door. How do you want this?"
Zombie wobbles a little, maybe mumbles something to the effect of "Braaaaaiiiiinnnnnnssssss......"
Server says "No, really dude, you asked for it. I can even give you fries with that if you like."
Zombie shambles down the street, dropping a limb here or there for good measure.
Server says, "What a freak, I give up."
Zombie slowly stumbles back and starts the process all over again.

Basically, the idea is that a normal connection is quick and over with. A DDoS, though, ties up the server's resources as it's sitting there, waiting for the zombie (and that's what botnet victims are generally called) to actually complete the service request. That resource exhaustion is what eventually causes the server to crash out (or in our case, disconnect the socket).
Grace Chang
Tyrannis Enterprises
#44 - 2014-09-22 18:49:18 UTC
Analeesa wrote:
Hate to have to ask but is there no hope for better mitigation in the near future?
Constant downtime is really getting infuriating as I'm always either losing a ship to it or losing out on relic sites.


Mitigation options depend on how sophisticated the attack is. You can filter out the network packets if you have any chance to differentiate them from legitimate packets. That is a service so called "DDoS protection" providers provide. However if you can't differentiate the attack network packets from legitimate packets (i.e. the attacker emulates for example an application layer handshake) you are screwed. You can of course also block entire network segments, but considering that eve players come from everywhere that is probably not an option.
Rain6637
NulzSec
#45 - 2014-09-22 18:51:14 UTC
Omega Crendraven
The Scope
Gallente Federation
#46 - 2014-09-22 18:53:21 UTC
OK GUYS LETS BLAME ISP
O7 O7 O7
Sattracer
Dragon Claw Sovereignty
#47 - 2014-09-22 18:55:31 UTC  |  Edited by: Sattracer
http://www.buddypedia.com/blog/wp-content/uploads/2014/09/ccp-ping1-300x129.jpg

6 dead hops at London. Not exactly a "minor" thing if you ask me. Had this verified with Time Warner's NOC.


Can't you guys at least get those nodes flagged as wormholes and routed around them?
loquacious7
KarmaFleet
Goonswarm Federation
#48 - 2014-09-22 18:56:18 UTC
Keep up the good fight. No one should be above the EULA. No one should be this butt hurt for this long , Looser. ;) find another game to exploit and let us get back to serious ship spinning.
addelee
KarmaFleet
Goonswarm Federation
#49 - 2014-09-22 18:58:10 UTC  |  Edited by: ISD Ezwal
*Snip* Removed quote of a deleted post. ISD Ezwal.

What kind of customer service would you exactly expect with a ddos attack?

They're neigh on impossible to stop without a tonne of work. Personally, I think CCP are doing a good job as the servers could be down one hell of a lot longer.

I'm definitely not shedding a few tears over a little bit of downtime. It's not exactly an hourly thing.
Fluidpunk Unknown
InkMasters
#50 - 2014-09-22 18:59:41 UTC  |  Edited by: Fluidpunk Unknown
Client is dead...
Did a client-repair = Nothing wrong there!

Did a Verify Integrity Of Game Files, On Steam. : Missing 865 files Shocked So Steam is atm downloading 5.51GB of files..
So the Q is, who tha F... deleted those files???
Rain6637
NulzSec
#51 - 2014-09-22 19:03:38 UTC
John Atura
Highsec Heroes
Stockholm Syndrome.
#52 - 2014-09-22 19:07:12 UTC
Sattracer wrote:
http://www.buddypedia.com/blog/wp-content/uploads/2014/09/ccp-ping1-300x129.jpg

6 dead hops at London. Not exactly a "minor" thing if you ask me. Had this verified with Time Warner's NOC.


Can't you guys at least get those nodes flagged as wormholes and routed around them?



They aren't dead - they just doesn't respond to ICMP-Requests.
Celly S
Neutin Local LLC
#53 - 2014-09-22 19:19:22 UTC
John Atura wrote:
Sattracer wrote:
http://www.buddypedia.com/blog/wp-content/uploads/2014/09/ccp-ping1-300x129.jpg

6 dead hops at London. Not exactly a "minor" thing if you ask me. Had this verified with Time Warner's NOC.


Can't you guys at least get those nodes flagged as wormholes and routed around them?



They aren't dead - they just doesn't respond to ICMP-Requests.


That is correct, they may not in fact be dead and an ICMP response is so low of a priority that the nodes are either set to, or choosing to ignore (based on it's config) icmp in order to route higher priority traffic

Don't mistake fact for arrogance, supposition for fact, or disagreement for dismissal. Perception is unique in that it can be shared or singular. Run with the pack if you wish, but think for yourself. A sandwich can be a great motivator.

ISD Ezwal
ISD Community Communications Liaisons
#54 - 2014-09-22 19:49:55 UTC
I have removed some rule breaking posts and those quoting them. As always I let some edge cases stay.
Please people, keep it on topic and above all civil!

The Rules:
3. Ranting is prohibited.

A rant is a post that is often filled with angry and counterproductive comments. A free exchange of ideas is essential to building a strong sense of community and is helpful in development of the game and community. Rants are disruptive, and incite flaming and trolling. Please post your thoughts in a concise and clear manner while avoiding going off on rambling tangents.


4. Personal attacks are prohibited.

Commonly known as flaming, personal attacks are posts that are designed to personally berate or insult another forum user. Posts of this nature are not beneficial to the community spirit that CCP promote and as such they will not be tolerated.


5. Trolling is prohibited.

Trolling is a defined as a post that is deliberately designed for the purpose of angering and insulting other players in an attempt to incite retaliation or an emotional response. Posts of this nature are disruptive, often abusive and do not contribute to the sense of community that CCP promote.


6. Racism and discrimination are prohibited.

Racism, gender stereotyping and hate speech are not permitted on the EVE Online Forums. Derogatory posting that includes race, religion or sexual preference based personal attacks and trolling can result in immediate suspension of forum posting privileges.


12. Discussion of forum moderation is prohibited.

The discussion of EVE Online forum moderation actions generally leads to flaming, trolling and baiting of our ISD CCL moderators. As such, this type of discussion is strictly prohibited under the forum rules. If you have questions regarding the actions of a moderator, please file a petition under the Community & Forums Category.




ISD Ezwal Community Communication Liaisons (CCLs)

Galendil
THORN Syndicate
Northern Coalition.
#55 - 2014-09-22 19:53:09 UTC
There are firms that specialize in stopping these on the primary backbones. Have you tried these guys -http://www.arbornetworks.com

They have stopped stuff like this many many times, including reflector attacks and massive zombie attacks.

--- | --- Flammis Acribus Addictis --- | ---

Zen Guerrilla
CTRL-Q
#56 - 2014-09-22 20:00:22 UTC
Man, am i glad we have all these internet experts playing eve online so they can give important advice to CCP. I'm pretty sure without all you important internet spaceship nerds CCP wouldn't have a chance in this.

CCP; HAVE YOU TRIED MY AWESOME IDEA? I BET YOU WOULDVE NEVAR THOUGTH OF THAT!!1

Roll

pew pew

Christopher AET
Lethal Injection Inc.
Pandemic Legion
#57 - 2014-09-22 20:01:13 UTC
Still ongoing eh?

I drain ducks of their moisture for sustenance.

Elsa Nietchize
School of Applied Knowledge
Caldari State
#58 - 2014-09-22 20:03:46 UTC
Anyone else find it amusing that CCP Falcon is posting to state that TQ is being ECM jammed?
Galendil
THORN Syndicate
Northern Coalition.
#59 - 2014-09-22 20:09:21 UTC
Zen Guerrilla wrote:
Man, am i glad we have all these internet experts playing eve online so they can give important advice to CCP. I'm pretty sure without all you important internet spaceship nerds CCP wouldn't have a chance in this.

CCP; HAVE YOU TRIED MY AWESOME IDEA? I BET YOU WOULDVE NEVAR THOUGTH OF THAT!!1

Roll


:Obvious Trollbait: but I will bite anyway...

Your assumption is that CCP knows all the answers and often times, regardless of how smart they are, they do not.

Similarly, many of us are actual security professionals and have been through this before.

However, if you want to criticize folks just offering a helping hand, feel free.

--- | --- Flammis Acribus Addictis --- | ---

Stash Napalm
Andersen and Phelps Inc
#60 - 2014-09-22 20:17:03 UTC
Christopher AET wrote:
I drain ducks of their moisture for sustenance.
Lol