egghelp/eggheads community

Kick innocent user for "JOIN-PART flooder"

2004-05-09T17:05:20-04:00

I get the same, whenever a bot on a big channel, encounters some mass joining bots, it kicks them out for a flood, but also at the same time kicks some joining and some ops as well, which were not flooding.

Because of this as I only use DALnet, I had to set join/part flood kick off.
Also, I think it is because of a big channel, that my bot is in like 200+ user channels.

Statistics: Posted by awyeah — Sun May 09, 2004 5:05 pm

Kick innocent user for "JOIN-PART flooder"

2003-08-20T05:20:06-04:00

oh ok then, there are no such flood on DALnet . my bad.

thanx

Statistics: Posted by Sir_Fz — Wed Aug 20, 2003 5:20 am

Kick innocent user for "JOIN-PART flooder"

2003-08-20T00:55:42-04:00

Looks like everyone has a different definition for "bogus usernames"

sentinel.tcl defines them the same way as eggdrop does--usernames outside the 041-176 octal character range. There were two reasons flooders would use them. Firstly, eggdrop had a really dumb feature that caused it to repeatedly kick users who joined with a bogus username. It would flood itself off doing this. It still has this feature, but it can be toggled with the kick-fun setting.

Secondly, it allowed flooders to use mIRC colour codes in their usernames, so that the "nick has joined the channel" lines would have coloured characters and backgrounds. This made the join/part apsect of the flood more impressive, and if you set the background to mIRC's default for joins/parts (green) it would obscure the flooders' hosts for many mIRC users.

If more than a couple of users with bogus usernames joined the channel in quick succession, you could bet that the channel was about to be flooded. sentinel.tcl preempted this by locking the channel if a set number of users with bogus usernames joined. But I suspect it's very much a legacy feature now--I believe few IRC servers will allow you to connect with a bogus username these days.

Statistics: Posted by slennox — Wed Aug 20, 2003 12:55 am

Kick innocent user for "JOIN-PART flooder"

2003-08-19T20:06:08-04:00

DALnet flood bots sometimes like the old fashioned idea of bogus usernames. Then that's the nature of DALnet, somewhat old fashioned and not liking a lot of change. LOL

Statistics: Posted by Alchera — Tue Aug 19, 2003 8:06 pm

Kick innocent user for "JOIN-PART flooder"

2003-08-19T15:16:53-04:00

on the contrary, most use botnenets with nicks similar to \zxhXCxz[ and idents ~zxcz@host, rare organized like [something]sad@host...

Statistics: Posted by Sir_Fz — Tue Aug 19, 2003 3:16 pm

Kick innocent user for "JOIN-PART flooder"

2003-08-19T15:04:42-04:00

To answer Sir_Fz: Bogus usernames look like this xuogqwe or yuhwggq

To answer Slennox: They aren't back in vogue where I join, most flooders use normal people nicks these days.

Statistics: Posted by z_one — Tue Aug 19, 2003 3:04 pm

Kick innocent user for "JOIN-PART flooder"

2003-08-19T11:46:39-04:00

what exactly is bogus user name ? isn't it the idents of the flooders ?

Statistics: Posted by Sir_Fz — Tue Aug 19, 2003 11:46 am

Kick innocent user for "JOIN-PART flooder"

2003-08-19T11:05:40-04:00

Are you sure you are actually getting bogus username floods? I don't think they're very common these days. Admittedly, the channels I currently spend any time in tend not to attract flooders, so I don't get to see the latest fashionable flooding methods. Are bogus usernames back in vogue?

Statistics: Posted by slennox — Tue Aug 19, 2003 11:05 am

Kick innocent user for "JOIN-PART flooder"

2003-08-16T13:09:54-04:00

well? nobody experiances such problem expect me or what ?

Statistics: Posted by Sir_Fz — Sat Aug 16, 2003 1:09 pm

Kick innocent user for "JOIN-PART flooder"

2003-08-12T12:42:21-04:00

yeah, I guess you're right.

but It seems that the Bogus Username Join flood doesn't seem to work, I never noticed the bot sayin in partyline or in kick message bogus username or something like that.

- Channel BOGUS flood: 6 in 23 secs

Statistics: Posted by Sir_Fz — Tue Aug 12, 2003 12:42 pm

Kick innocent user for "JOIN-PART flooder"

2003-08-12T12:19:31-04:00

Hi,

I remember that Slennox once explained that this is how Sentinel works.
When there is a flood, anyone changing nicks or perhaps messaging the main channel a few seconds before or after the flood, is considered to be a flooder.

I don't think that increasing the joins:secs will help prevent this.
It would help discard false alarms, but if you increase it too much the bot will take longer to react.

It's not a bug, a bug is an unintentional error in the code. Whereas, if I am not mistaken, Slennox willingly programmed sentinel that way for maximum efficiency

Statistics: Posted by z_one — Tue Aug 12, 2003 12:19 pm

Kick innocent user for "JOIN-PART flooder"

2003-08-12T07:53:23-04:00

everytime there's a botnet flood. the bot always bans an innocent user or voice/op for reason "JOIN-PART flooder", which is very annoying.

I tried to increase the joins:secs to prevent such bug, but didn't work.

Statistics: Posted by Sir_Fz — Tue Aug 12, 2003 7:53 am