Kick innocent user for "JOIN-PART flooder"

Post by **Sir_Fz** » Tue Aug 12, 2003 7:53 am

everytime there's a botnet flood. the bot always bans an innocent user or voice/op for reason "JOIN-PART flooder", which is very annoying.

I tried to increase the joins:secs to prevent such bug, but didn't work.

z_one · Post by **z_one** » Tue Aug 12, 2003 12:19 pm

Hi,

I remember that Slennox once explained that this is how Sentinel works.
When there is a flood, anyone changing nicks or perhaps messaging the main channel a few seconds before or after the flood, is considered to be a flooder.

I don't think that increasing the joins:secs will help prevent this.
It would help discard false alarms, but if you increase it too much the bot will take longer to react.

It's not a bug, a bug is an unintentional error in the code. Whereas, if I am not mistaken, Slennox willingly programmed sentinel that way for maximum efficiency

Post by **Sir_Fz** » Tue Aug 12, 2003 12:42 pm

yeah, I guess you're right.

but It seems that the Bogus Username Join flood doesn't seem to work, I never noticed the bot sayin in partyline or in kick message bogus username or something like that.

- Channel BOGUS flood: 6 in 23 secs

Post by **Sir_Fz** » Sat Aug 16, 2003 1:09 pm

well? nobody experiances such problem expect me or what ?

Post by **slennox** » Tue Aug 19, 2003 11:05 am

Are you sure you are actually getting bogus username floods? I don't think they're very common these days. Admittedly, the channels I currently spend any time in tend not to attract flooders, so I don't get to see the latest fashionable flooding methods. Are bogus usernames back in vogue?

Post by **Sir_Fz** » Tue Aug 19, 2003 11:46 am

what exactly is bogus user name ? isn't it the idents of the flooders ?

z_one · Post by **z_one** » Tue Aug 19, 2003 3:04 pm

To answer Sir_Fz: Bogus usernames look like this xuogqwe or yuhwggq

To answer Slennox: They aren't back in vogue where I join, most flooders use normal people nicks these days.

Post by **Sir_Fz** » Tue Aug 19, 2003 3:16 pm

on the contrary, most use botnenets with nicks similar to \zxhXCxz[ and idents ~zxcz@host, rare organized like [something]sad@host...

Alchera · Post by **Alchera** » Tue Aug 19, 2003 8:06 pm

DALnet flood bots sometimes like the old fashioned idea of bogus usernames. Then that's the nature of DALnet, somewhat old fashioned and not liking a lot of change. LOL

Post by **slennox** » Wed Aug 20, 2003 12:55 am

Looks like everyone has a different definition for "bogus usernames"

sentinel.tcl defines them the same way as eggdrop does--usernames outside the 041-176 octal character range. There were two reasons flooders would use them. Firstly, eggdrop had a really dumb feature that caused it to repeatedly kick users who joined with a bogus username. It would flood itself off doing this. It still has this feature, but it can be toggled with the kick-fun setting.

Secondly, it allowed flooders to use mIRC colour codes in their usernames, so that the "nick has joined the channel" lines would have coloured characters and backgrounds. This made the join/part apsect of the flood more impressive, and if you set the background to mIRC's default for joins/parts (green) it would obscure the flooders' hosts for many mIRC users.

If more than a couple of users with bogus usernames joined the channel in quick succession, you could bet that the channel was about to be flooded. sentinel.tcl preempted this by locking the channel if a set number of users with bogus usernames joined. But I suspect it's very much a legacy feature now--I believe few IRC servers will allow you to connect with a bogus username these days.

Post by **Sir_Fz** » Wed Aug 20, 2003 5:20 am

oh ok then, there are no such flood on DALnet

. my bad.

thanx

awyeah · Post by **awyeah** » Sun May 09, 2004 5:05 pm

I get the same, whenever a bot on a big channel, encounters some mass joining bots, it kicks them out for a flood, but also at the same time kicks some joining and some ops as well, which were not flooding.

Because of this as I only use DALnet, I had to set join/part flood kick off.
Also, I think it is because of a big channel, that my bot is in like 200+ user channels.