[IRCServices] Notice Bug
Andrew Church
achurch at achurch.org
Sat Feb 19 16:23:21 PST 2005
Thanks for the information--I've updated the FAQ (C.10)
appropriately.
--Andrew Church
achurch at achurch.org
http://achurch.org/
>RAW Telnet session:
>
>:Global!services at epicirc.net NOTICE $* :[Network Notice] Our network has
>been experiencing a major increase of unattended bots connecting. We are
>taking many defensive actions to make sure that they do not interrupt the
>normal activity of the network. If you receive a CTCP LAG, please ignore it,
>as it is our Opers running :a scan to detect malicious bots. If you have any
>questions, please join #Help and speak to an Oper. - XanaX, Sr. Network
>Admin.
>
>
>IRCServices log (debug):
>
>[Feb 19 00:26:25.908610 2005] debug: Received: :XanaX !
>operserv at services.epicirc.net :global [Network Notice] Our network has been
>experiencing a major increase of unattended bots connecting. We are taking
>many defensive actions to make sure that they do not interrupt the normal
>activity of the network. If you receive a CTCP LAG, please ignore it, as it
>is our Opers running :a scan to detect malicious bots. If you have any
>questions, please join #Help and speak to an Oper. - XanaX, Sr. Network
>Admin.
>
>[Feb 19 00:26:25.908762 2005] operserv/main: XanaX: global [Network Notice]
>Our network has been experiencing a major increase of unattended bots
>connecting. We are taking many defensive actions to make sure that they do
>not interrupt the normal activity of the network. If you receive a CTCP LAG,
>please ignore it, as it is our Opers running :a scan to detect malicious
>bots. If you have any questions, please join #Help and speak to an Oper. -
>XanaX, Sr. Network Admin.
>
>[Feb 19 00:26:25.911967 2005] debug: Sent: :Global NOTICE $* :[Network
>Notice] Our network has been experiencing a major increase of unattended
>bots connecting. We are taking many defensive actions to make sure that they
>do not interrupt the normal activity of the network. If you receive a CTCP
>LAG, please ignore it, as it is our Opers running :a scan to detect
>malicious bots. If you have any questions, please join #Help and speak to an
>Oper. - XanaX, Sr. Network Admin.
>
>
>... And just to be clear, let me paste a copy of the 'alias' that I've been
>using to run this command.
>
>alias xdccwarn { .operserv global [Network Notice] Our network has been
>experiencing a major increase of unattended bots connecting. We are taking
>many defensive actions to make sure that they do not interrupt the normal
>activity of the network. If you receive a CTCP LAG, please ignore it, as it
>is our Opers running a scan to detect malicious bots. If you have any
>questions, please join #Help and speak to an Oper. - XanaX, Sr. Network
>Admin. }
>
>Hm, that is weird. I also wanted to test sending the message from another
>client than mIRC, and seeing what the result was.
>
>....
>
>[ 12:40am ] -Global- [Network Notice] Our network has been
>experiencing a major increase of unattended bots connecting. We are taking
>many defensive actions to make sure that they do not interrupt the normal
>activity of the network. If you receive a CTCP LAG, please ignore it, as it
>is our Opers running a scan to detect malicious bots. If you have any
>questions, please join #Help and speak to an Oper. - XanaX, Sr. Network
>Admin.
>
>..... So I guess all that work just proved you guys were right. When I used
>BitchX to SEND the notice (instead of mIRC) the result was without error. A
>bug in mIRC must place the : there on outgoing messages if it is over a
>certain length or something.
>
>If anyone has anything to add I would be glad to hear it, but as of this
>test I will go ahead and just assume an mIRC bug, I will try to submit it
>to them see if it can be fixed that way.
>
>Thanks for all the support,
>
>XanaX
>EpicIRC - irc.epicirc.net
>
>
>
>-----Original Message-----
>From: ircservices-bounces at ircservices.esper.net
>[mailto:ircservices-bounces at ircservices.esper.net] On Behalf Of Andrew
>Church
>Sent: Friday, February 18, 2005 11:48 PM
>To: ircservices at ircservices.esper.net
>Subject: RE: [IRCServices] Notice Bug
>
> Hmm, interesting. Can you provide a debug log from Services
>(ircservices -debug) for this behavior? If you could get a raw dump of the
>client/server connection, that would help as well; for example:
>
>$ telnet host.name 6667
>NICK nick
>USER user * * user
>
>and send the raw IRC data that follows.
>
> --Andrew Church
> achurch at achurch.org
> http://achurch.org/
>
>>Xchat:
>>
>>[3:27pm] <ANTRAiCX> -Global- [Network Notice] Our network has been
>>experiencing a major increase of unattended bots connecting. We are
>>taking many defensive actions to make sure that they do not interrupt
>>the normal activity of the network. If you receive a CTCP LAG, please
>>ignore it, as it is our Opers running :a scan to detect malicious bots.
>>If you have any questions, please join #Help and speak to an Oper. -
>>XanaX, Sr. Network Admin.
>>
>>iircII on solaris:
>>
>>[3:31pm] <work> -Global- [Network Notice] Our network has been
>>experiencing a major increase of unattended bots connecting. We are
>>taking many defensive [3:31pm] <work> actions to make sure that they do
>>not interrupt the normal activity of the network. If you receive a CTCP
>>LAG, please ignore it, as it is [3:31pm] <work> our Opers running :a
>>scan to detect malicious bots. If you have any questions, please join
>>#Help and speak to an Oper. - XanaX, Sr.
>>
>>And of course it still does it on mIRC as well.
>>
>>So my tests show that this bug is in fact an ircservices bug, and not
>>related to any mirc errors. Testing in 3 other clients all performed
>>the exact same way, and duplicated the exact same results. The source
>>notice of course didn't have the ":" in it, however it appeared at the
>>same location for all 3 of the clients.
>>
>>Thanks for any help you may be able to offer,
>>
>>JL.
>>admin at epicirc.net
>>EpicIRC - irc.epicirc.net
>------------------------------------------------------------------
>To unsubscribe or change your subscription options, visit:
>http://lists.ircservices.za.net/mailman/listinfo/ircservices
>
>
>
>
>------------------------------------------------------------------
>To unsubscribe or change your subscription options, visit:
>http://lists.ircservices.za.net/mailman/listinfo/ircservices