Pages: [1] :: one page |
|
Author |
Thread Statistics | Show CCP posts - 0 post(s) |
Aranorn
Element 115. Test Alliance Please Ignore
|
Posted - 2011.02.16 22:56:00 -
[1]
Edited by: Aranorn on 16/02/2011 23:05:48 I work at a small university where we employ some enterprise grade hardware for a intrusion detection system (IDS). About a week and a half ago, an update came out for our IDS box that included some new detection rules for something called "Segment Overlap with Different Data." that has been affecting client <-> server communications.
What's happening?
Apparently, Tranquility is generating these overlapping segments and causing a bit of a problem. The IDS does it's job by saying "I think you're an attack, and I don't really like that...so no more traffic for you!" and kills the connection. The net result is an unresponsive client, and ultimately a close-to-desktop.
What can be done?
If you're friends with your networking team, or you have beer to give them, you can ask them to set up an exception rule for the Tranquility cluster within Tipping Point (the IDS). If you're not, you can open a petition and pray CCP updates the TCP/IP stack (because apparently that's ultimately the issue here...)
How do you know if this is affecting you?
If you're on a College Campus, or other enterprise grade system, chances are they have some IDS solution in place. If that solution is based on Tipping Point hardware, you're probably encountering this same thing. I've already found one other person in my alliance with the same issue and it appears to also be IDS based.
Why is this a problem?
"Segment Overlaps with Different Data" is the basis for an attack designed specifically to evade IDS.
I already have a petition filed, just felt I should post in case others are having similar issues.
|
Medarr
Amarr ZeroSec Excuses.
|
Posted - 2011.02.17 03:35:00 -
[2]
Confirmed that it can be exploited to hijack connections.
|
BoodaBooda
Minmatar Dreddit Test Alliance Please Ignore
|
Posted - 2011.02.22 02:38:00 -
[3]
I am the alliance-mate having this problem, and I'm trying to get my campus' IT guys to help me out, but they're unresponsive.
Just bumping to say that this is still a problem, and an odd one at that. Maybe some of you are experiencing it and don't know the cause. |
Aranorn
Element 115. Test Alliance Please Ignore
|
Posted - 2011.03.02 18:28:00 -
[4]
Just a quick update to this: I heard back from a GM and apparently a member of CCP's networking team is in contact with Tipping Point. I assume this means that they're actively working on a solution.
|
Raipah
|
Posted - 2011.03.09 07:02:00 -
[5]
Same issue on my end. After some back and forth, a GM eventually came to the same conclusion - "Thank you for the pingplotter file. This indeed looks like a perfectly fine connection, which strengthens your suspicion that the IDS in use is indeed interfering with the EVE connection and somehow misidentifying it. As our net code didn't change to my knowledge, I would suspect that this would be the result of a new pattern that causes this to happen once again. We have been getting reports about the hardware in use from other sources in addition to the forum post you linked as well and are doing what we can from our end to have this resolved as soon as possible."
Reading that, it seems as if this may not be the first time a situation like this has happened.
|
BoodaBooda
Minmatar Dreddit Test Alliance Please Ignore
|
Posted - 2011.03.17 04:39:00 -
[6]
Bumping, CCP hasn't worked out a solution yet, but the guys at my campus have found the problem and will hopefully be fixing it locally for me soon.
There are a lot of other people having this problem right now, I know of 2 people on campus here with me at least, so I feel this is relevant yet.
|
Trophous
Upvote Test Alliance Please Ignore
|
Posted - 2011.03.30 03:32:00 -
[7]
Originally by: BoodaBooda Bumping, CCP hasn't worked out a solution yet, but the guys at my campus have found the problem and will hopefully be fixing it locally for me soon.
There are a lot of other people having this problem right now, I know of 2 people on campus here with me at least, so I feel this is relevant yet.
this started happening to me today as well.
login, 30 seconds later i get kicked off, what the ****.
Also, are TEST people the only ones having this happen to them? I cant even set skill queues atm.
|
|
|
|
Pages: [1] :: one page |
First page | Previous page | Next page | Last page |