This is the new home of the egghelp.org community forum.
All data has been migrated (including user logins/passwords) to a new phpBB version.


For more information, see this announcement post. Click the X in the top right-corner of this box to dismiss this message.

Is there a TCL for Mass Notice Floods

Old posts that have not been replied to for several years.
Locked
User avatar
Sir_Fz
Revered One
Posts: 3794
Joined: Sun Apr 27, 2003 3:10 pm
Location: Lebanon
Contact:

Is there a TCL for Mass Notice Floods

Post by Sir_Fz »

Well in the Sentinel.tcl there's protection for several types of floods, one of them is the msg flood, but what i want is one for Notice flood.

can anyone help ?
p
ppslim
Revered One
Posts: 3914
Joined: Sun Sep 23, 2001 8:00 pm
Location: Liverpool, England

Post by ppslim »

the sl_flood proc seems to handle both incoming messages and notices, so there it will handle them with the same settings.
User avatar
Sir_Fz
Revered One
Posts: 3794
Joined: Sun Apr 27, 2003 3:10 pm
Location: Lebanon
Contact:

ok got it

Post by Sir_Fz »

ok, I got it :)
But can u tell me what are the perfect settings to set for botnet floods ?
(events:time)

and I'm facing another problem, it seems that my eggdrop everyday dies with no reason, any reasons why ?
p
ppslim
Revered One
Posts: 3914
Joined: Sun Sep 23, 2001 8:00 pm
Location: Liverpool, England

Post by ppslim »

First off, the pefect settings and answers to all your prays are available in my hardback book called "The answer to everything" for only $99999999.99.

Sarcasm aside. There are no perfect settings. It all depends on your needs, wants and how touchy you want your bot to be. Read the guides provided with netbots about the settings, and then the only thing I can sugest is experiment.
User avatar
slennox
Owner
Posts: 593
Joined: Sat Sep 22, 2001 8:00 pm
Contact:

Re: ok got it

Post by slennox »

sentinel.tcl doesn't have a specific detector for plain notice floods. It will only detect them if they have an "avalanche" or "tsunami" component. Up to the current released version, plain notice floods were in the "annoying" category considered beyond the scope of the script at the time (sentinel was meant for "dangerous" floods).
Sir_Fz wrote:ok, I got it :)
But can u tell me what are the perfect settings to set for botnet floods ?
(events:time)
Start with the default settings. After a while you will be able to see for yourself whether they're too sensitive or too lenient, and adjust them for your situation. Follow the recommendations given in the documentation (e.g. it is better to fiddle with the "number" rather than the "seconds" field in the flood settings).
and I'm facing another problem, it seems that my eggdrop everyday dies with no reason, any reasons why ?
Check the bot's log and see if there's something that tells you what it's doing just before it dies. If you have netbots.tcl loaded, perhaps disabling nb_update would help (it has an every-other-day update check which can block the bot from doing other things).
J
JudgeFred

use Chanpro1.4.tcl for channel notice

Post by JudgeFred »

chanpro1.4.tcl would detect room notice. I forgot where I got that file, but that the original file name. It's probably on this site or search for Channel notice, notice keyword.

JF
User avatar
Sir_Fz
Revered One
Posts: 3794
Joined: Sun Apr 27, 2003 3:10 pm
Location: Lebanon
Contact:

k, thanx :)

Post by Sir_Fz »

ok thanx Slennox, I started with the default setting, and i fixed them fine, but i made the seconds between 6 and 15, so i recently made the seconds back between 20-60 but its too sensitive, may I know if like 30:60 is the same as 3:6 for example ? (like are they proportional?)

as for the dieing *thingie*, the bot doesn't show anything in the logs before it dies and no i don't have netbots.tcl... I guess its the Box then.

JudgeFred, I'll search for that tcl, thank you :)
p
ppslim
Revered One
Posts: 3914
Joined: Sun Sep 23, 2001 8:00 pm
Location: Liverpool, England

Post by ppslim »

Overall, 3:6 is the same as 30:60.

However, there is one major differance.

3:6 requires that they send all 3 messages with 6 seconds of the first. This means they have to stop taking after 2, to make sure they are below the threshold.

30:60 means they can do up to 29 in 60 seconds. While in average it is the same as 3:6, it means they can flood 29 messages, without worry, then hold back to allow the threshold to pass.
User avatar
Sir_Fz
Revered One
Posts: 3794
Joined: Sun Apr 27, 2003 3:10 pm
Location: Lebanon
Contact:

Post by Sir_Fz »

thats bad :P I thought that its the same like 60:60 reads events the same as 6:6 but the only difference is that the bot would have more time to collect the flooder nicks... well I'll just try to make it less sensitive, and fiddel with the numbers only :)
Locked