Session Start: Wed Feb 04 18:36:47 2009 Session Ident: LSD 01[18:36] ffff we're still being DDoSed [18:37] I see that, he blocked me as well [18:38] or hes offline.. but after that many stunts at once I'm guessing a block. [18:38] also [18:38] [18:28] Hehe, you will like this.. I was talking to infolink and told them someone was abusing their network and they told me they already have a report on that server and will be taking actions soon. :) [18:38] [18:28] No such nick/channel 01[18:38] o.o 01[18:38] lol [18:40] Wait.. 01[18:40] hmm? [18:40] I thought your host blocked them at the router..? 01[18:40] who knows 01[18:40] i haven't got word from tira [18:48] Wow.. Still getting hit? 01[18:48] seems like it o_O [18:49] oh site loaded fine [18:49] now it died.. 01[18:49] 98.0 Mb/s (98.0%) 01[18:49] inbound transfer still high [18:49] :( [18:51] i'm calling the number he called me from lol 01[18:51] ookay :O [18:52] nevermind.. it was from skype or some other voip, just says a bunch of 0's as the number [18:52] I really would just love to talk to him one last time. 01[18:52] lol [18:53] Have you contacted the host yet? O_o 01[18:53] tira has 01[18:54] waiting for a response from them [18:55] I'd tell them to put you on a gbit port :\ 01[18:55] still gotta stop the flooding [18:56] True, but you could filter a bunch of it from the box itself if you could reach it. [18:56] iptables 01[18:56] aye 01[18:56] sometimes I can reach the host 01[18:56] it isn't always quite 100% full [18:56] I'm ping it now, It replys a bunch but also request times out a bunch.. 01[18:56] yeah [18:56] pinging* [18:58] I'm passing out.. I want to see what happens though.. 01[18:58] lol D: 01[18:58] what time is it on our end? [18:58] 6:58pm.. 01[18:58] oh same as mine [18:59] I have not slept in a few days though, besides like 30min or so earlier. [18:59] mmm, i noticed your bell.ca hostmask earlier. 01[18:59] yar [18:59] where in canada are you? 01[18:59] I'm at a different location now 01[18:59] near toronto [19:00] hehe, i'm bout 2 hours away from toronto. 01[19:00] ooh probably really close to me haha 01[19:00] I'm in brampton [19:00] mmm, trenton here.. near kingston. 01[19:00] oh i just got in [19:00] what OS? 01[19:00] CentOS 5 [19:01] ooo [19:01] yum install ifstat [19:01] oh well, i guess you have graphs [19:01] so it doesnt matter. 01[19:01] yeah 01[19:01] mrtg 01[19:01] http://essencero.com/mrtg/ [19:01] wow [19:01] it raping the cpu too? 01[19:01] seems like it o_O 01[19:01] look at connections/min [19:02] O_o [19:02] it wont load anymore [19:02] but it did at first [19:02] oh here it is 01[19:02] yeah it's sporadic [19:03] I feel bad for you guys :( 01[19:03] Dx [19:07] I'm pulling up some of my own stats from when I got hit january [19:10] tinypic is failing me. 01[19:10] lol D: 01[19:10] I just use photobucket xD [19:10] http://i42.tinypic.com/2rxgq6x.png [19:10] some asshat hitting someones site I host.. [19:11] they learned quickly it has 0 effect. 01[19:11] lol [19:11] mm [19:11] the attack stopped? [19:11] ping is fine now. 01[19:11] they're doing something I guess [19:12] bout time :\ [19:13] does mrtg work for you? 01[19:13] sporadically [19:13] oh it loaded. 01[19:13] whats the current transfer? [19:14] 100m 01[19:14] i see 43.2 mbps [19:14] oh its fine now [19:15] 26.5 Mb/s (26.5%) 01[19:15] yeah its dropping [19:16] err [19:16] all my pings are timing out? 01[19:16] same for me too [19:16] site loads perfect though 01[19:17] yeah so they just disabled pinging the server [19:17] heh [19:20] it took them long enough to fix it :\ 01[19:21] oh it went down under 1mbps [19:22] yeah i see that [19:24] Good to see things back in working order. :] 01[19:24] lets hope they stay that way [19:24] I they put on some kind of DDoS mitigation and not just blocked the ips. [19:24] I hope they* [19:28] I think I'm off to bed.. [19:28] Quickly YouTube browsing time though xD 01[19:28] kk :O [19:41] Alright enough youtube, i'm off to bed. [19:43] wait [19:43] Hidden [19:43] Hidden [19:43] are you here? 01[19:43] yea 01[19:43] it went back up again 01[19:43] so evidently, it isn't solved [19:43] ... [19:43] its replying fine to ping [19:44] nevermind.. [19:47] http://www.hostdime.com/facilities/status/ [19:48] wow look @ all the traffic [20:28] Hey Hidden, I woke up to use the bathroom so I thought id check on things, everything ok? 01[20:29] nope not quite [20:29] mm, let me open ping [20:29] I see... [20:29] How long hsa it been like this? [20:29] the whole time? 01[20:29] for some time now yeah [20:30] did Tira call them again yet? 01[20:30] yeah [20:30] and..? 01[20:30] hasn't received a response yet [20:30] ah.. [20:32] ehm.. this is pretty sad.. 01[20:33] yeah tira is getting kinda pissed lol [20:34] How long ago did she call...? 01[20:34] dunno [20:35] you relize [20:35] that you are going to have to pay for all the bandwidth that is going into the box 01[20:35] yeah i know [20:35] :x [20:35] what is your limit? 01[20:35] I don't know xD 01[20:35] it's not unmetered though I know that [20:36] Well if you guys are managing to go over it, it must not be that big. [20:38] Do you have access to the dedi's billing panel? Or some kind of panel the host gives to start/stop the box? 01[20:38] nup :s [20:38] I would get Tira to either shutdown the box or do SOMETHING to drop the network. [20:38] Do they not have an emergency number? 01[20:39] you'll have to ask tira lol [20:39] she doesnt like me so I just talk to you :P [20:40] mmm, its ok now? [20:40] Its replying a lot now. [20:40] Pings are a bit high though. 01[20:40] timing out for me [20:41] im getting no times out [20:41] just high pings [20:41] ill see if i can get the mrtg to show [20:41] wooow [20:41] its never been filled that green its like a solid green at the end 01[20:42] yeah it's like they're not doing anything [20:42] the other ones are like SPIKE then drop, but this one is constant :x [20:42] still its destroying your bandwidth 01[20:43] responding much faster right nwo 01[20:43] now* [20:43] yeah [20:43] http://essencero.com/mrtg/localhost_66.7.212.29.html heh 01[20:43] im gonna see if I can prioritize ssh [20:45] mm so you are sshd in? 01[20:45] i am now 01[20:47] Tamsin says: 01[20:47] *He says 01[20:47] *That 01[20:47] *Hang on 01[20:47] *He says we need to 01[20:47] *Invest in a hardware firewall with uh 01[20:47] *GIGe capacity [20:47] You relize how much that will cost? 01[20:47] yup lol [20:48] mm, well I wasnt going todo this but if they really want you to buy a gbit hardware firewall thats just stupid.. 01[20:48] lol :o [20:48] I will tell you some background first.. [20:48] Well actually, tell me [20:48] How much RAM does eAthena eat up at WoE? 01[20:49] not all that much 01[20:49] about 30% of 2GB [20:49] Why the ram upgrade then? 01[20:49] that's a good question lol [20:49] anyways [20:50] I have a quad core xeon (2.40ghz) box with 4gb ram and gbit uplink sitting here that I plan on offering VPS's on. [20:50] Including Cisco DDOS Guard and Trippingpoint IPS [20:52] I don't know how either of you feel about this, but I could offer you a VPS for WAY less then your current host with your own dedicated core + burstable to all 4 and if you need 2gb of ram that is fine. (I don't know if you are into this at all.. I'm just throwing the offer out there) 01[20:52] think about it later loll [20:52] I have 10 terabytes of bandwidth to spare as well. [20:56] I'm just throwing the offer on the table and I would normally not offer people a dedicaated core like that but I know what its like to have 1k players whining about the server being down... If they wouldnt of told you to get a gbit hardware firewall I would of not even mentioned it.. [20:57] If you do not accept the offer, I would still like to help you guys get a nice box. (If you plan on switching hosts) 01[21:22] got a question for ya [21:22] sure? 01[21:22] is this box sitting in a data centre and monitored? 01[21:22] i presume its at least monitored [21:22] well, if the box doesnt reply to ping 01[21:23] i mean [21:23] it automatically sends a ticket to the techs 01[21:23] oh 01[21:23] pretty standard I think [21:23] yeah [21:24] Also, don't think of VPS as slow.. The virtulization we have has only has 1% overhead. [21:24] (aka you wont notice it at all) 01[21:25] Tamsin says: 01[21:25] *What kind of latencies does his server get [21:25] ember.KuoNET.org [21:25] give it a ping [21:25] that is the node itself 01[21:26] avg 63ms for me 01[21:26] better than our current host [21:26] Its in dallas, texas. [21:26] Your current host is in Chicago..? [21:26] I'm guessing? 01[21:26] i think its in florida [21:26] ah 01[21:26] btw I'm downloading all the stuff off the host incase we need to move it [21:27] Do you want to know what the datacenter's uplinks are? 01[21:27] i'm actually getting pretty good transfer rates 01[21:27] sure :o [21:27] Lets look at your current host first, http://www.hostdime.com/facilities/network [21:28] Now, with this datacenter.. [21:28] Comcast Peering - 10G: Up Graph [21:28] Equinix Peering - 10G: Up Graph [21:28] Global Crossing - 10G: Up Graph [21:28] Internap - 10G: Up Graph [21:28] Level3 - 10G: Up Graph [21:28] Savvis - 10G: Up Graph [21:28] Verio/NTT 1 - 10G: Up Graph [21:28] Verio/NTT 2 - 10G: Up Graph [21:28] Note the Internap.. Excellent for game serers. 01[21:28] *What portion of total resources 01[21:28] *Are allocated to us 01[21:28] *i.e. how many VPS are gonna be sharing that server [21:29] All connections go through their InterNap FCP's and they decide the best route to the location [21:29] I do not oversell, so I would need to know what you require. 01[21:30] hmmm 01[21:30] tira generally doesn't trust VPS 01[21:30] but I certainly wouldn't mind 01[21:30] giving it a shot 01[21:30] you saw our graphs right? [21:30] Like I said before though, Id be giving you a dedicated core [21:31] yeah [21:31] barely passed 500mb usage and that was during the attacks? 01[21:31] yeah 01[21:32] you are also a coowner of SIP are you not? O.o [21:33] no..? 01[21:33] someone said you were 01[21:33] hmm [21:33] I am a staff member of VerityNET though.. I help out around there. [21:33] I used to be a SiP reseller in the past though.. 01[21:33] ahh :o 01[21:33] why did you leave? [21:34] nenolod.. the owner.. [21:34] he is a complete troll. [21:34] I did not want to work under someone like that. [21:41] mm, there is 3.7gb of free RAM on the node right now.