Post
by Necromanic » Thu Jan 23, 2003 8:35 am
Over the past few months I’ve been visiting these boards, I’ve seen more than one post on whether EQ is detectable or not. Combing my work experience with GM experience I can shed some light on the matter.
I’m not going to get into a debate as to what a ‘Guide’ or ‘Server Admin’ can or can’t do. I can’t speculate on access levels, I’ve never worked for Verant or SoE. Having said that, being a GM for other on-line games, I can say the following can and ‘IS’ being done.
Short list of GM powers…
1) Float between servers, using any name/race/class/deity combination, with or without the normal GM flag (green name tag)
2) Cast any spell available, including some spells that are not available to us mere mortals.
3) Move at any speed.
4) Zone to any Loc anywhere, in any zone.
5) Summon any item.
6) Summon new items, name them, give them stats ect.
7) Summon any mob in any zone, (to any HP’s/level) provided that mob appears on that particular zone list, i.e.. a GM will be unlikely to spawn, say a Siren in GFey.
8). Take over any mob/npc in any zone, either partially or fully. That’s to say they can take over a vendor and watch for themselves what is being bought, sold, by whom and how often, this also includes controlling any mob/npc. GM’s do not have to be on-line to do this. Think of MQ’s telnet server.
9) Chose to appear on the / or /who all gm lists. See invis has no effect. GM information can be blocked from clients just as easy as hitting an FD button. Simply put, if a GM chooses not to be seen, nothing client side can be done.
10) ‘Spectate’ on any client, think of Counter Strike or Team Fortress, while being invisible to clients.
11) Inspect, without you knowing. GM’s do not have to be stood next to you to do this, nor do they need to be in the same zone or even on-line. This information is stored in a database, requiring only a Unix client, server IP, user name and password to access.
12) Obtain client information such as total play time, session time, idle time, current zone, what you’ve killed, where, how often, and how many and where your bound ect, again, GM’s or System Admin’s do not need to be in-game to do this.
13) Take over your client, yes, they can move you. Also disconnect your keyboard, effectively blocking any commands sent from your client.
Wan’s/Lan’s differ in configuration and setup from company to company. However, observing the way EQ work’s it is possible to deduce roughly how things work.
Server’s graphical:
Domain’s such as Sullon Zek, Drinal ect, are probably made up of a number of servers. For instance, it may take 15 or more server’s clustered together to make a domain. Ever wondered how the Bazaar can come down on one server, yet not affect any other zone on the same domain? Each domain will have a load balancing, possibly redundant mirror. As a side note, I’m sceptical about SoE using a redundant mirror as we often see zones or entire domains drop out. The whole idea behind using redundant hardware is for it to kick in seamlessly if a particular piece of hardware falls over. The idea of mirroring, amongst other things is to be able to backup/restore information on a live network without impacting performance.
Server’s database:
Most likely Unix/SQL. These particular servers contain detailed database information such as spawn locations, loot tables, mobs/levels, character’s, banked items, coins, spell cast info ect ect. Unix/SQL is perfect for handling vast’s amount of information at high speed. Not only will these server’s ‘inject’ mobs/items into domains they will record and store user activities. We all know EQ mainly resides ‘server side’ how else would they know if you zoned and lost all your items or not? Or what your current jewel craft skill is (think of a proxy server). A lot of this information is useless on the face of it. I highly doubt SoE have teams of people reading through all the crap these servers generate on a daily basis, they wouldn’t need too either!
Backup:
There are a number of different backup technologies SoE could use. For instance, one approach is to use a tape library. A tape library is a box, standing approx 5ft high split in to 2 sections. The first section of tape library takes roughly up ¾ of the total space within the box, it contains a number of pigeon holes (up to 200), each ‘hole’ contains a DLT or DAT tape with a bar code on it, arranged in a semi circle. The Other ¼ of this box contains a stack of DLT or DAT backup drives, normally 6 or 8. In the middle is a robot arm with a bar code reader (laser or LED) on the end. The idea behind this piece of hardware is the ability to backup/restore a number of different servers at the same time, without having someone psychically stuff or remove tapes as and when the need requires. It is possible to backup/restore any information in any domain at any time without impacting performance or requiring human assistance.
Rest assured, every click, every key press, every move, every HP lost, every pp spent is logged and archived. Before you sit and think, hey, this guy is nuts… that’s way to much information to store, think again.. You log off with 50hp’s full mana and a SoW in Qeynos, you log back on with 50hp’s full mana and a SoW in Qeynos. All key strokes are buffered until you zone, log, loot or reach your backup timer (Sandoso saved) Backup tapes cost peanuts…
Ok, let’s put what we have learnt thus far in to practice. A few patches ago, SoE introduced a ‘combine’ throttle. How do you think they came to the conclusion a throttle was necessary? SoE have the ability to average the number of combines per month, day or even by the hour on any given domain on any given server. They do this by running a query on combines and analyse historical information, looking for peeks. They can see there is a problem, without delving into everyone’s account.
Bearing that in mind, how difficult do you think it would be to get a server to flag an account that was combing super humanly? Remember, you don’t need a human to decide something funny is going on software can do that quite easily. The very idea that SoE would mass ban accounts that showed unusual activity doesn’t make business sense. It is feasible that each user is allowed a certain number of clicks/combines per min/hour/day/month, provided you don’t reach this pre determined figure, your safe.. however… if you do, your account could be flagged. SoE may ignore 1st or 2nd flags, but as soon as you hit 3 or 4 flags alarm bells start to ring. It’s just a matter of the system emailing an Admin to make him/her aware there is a problem that requires further investigation. Completely automated, there is no need for spotty nurds to spend hours going though server logs. I would assume GM’s would be made aware of problem users and spend some time invisible, observing, taking action where/when required. On the same note, I don’t think I’d like to see hordes of paying customers being banned due to a server deciding someone is macroing. When you think about people being banned for macroing, there is no continuity. Some people macro for months without a hitch, others may turn and face and get a ban. This leads me to believe that account bans are ultimately left to customer services to decide.
It’s not a case if SoE can detect MQ or not, nor would they need to have some sort of elaborate client side detective, even if EQ were detectable. All this can be done very easily server side.
Non of the above is science fiction, it’s very real. Being a server/network Engineer I see well put together configurations like this almost on a daily basis. Most of which require very little human interaction to run.
If you use MQ, or any other macro utility, think on…. It ‘IS’ detectable…..
Necro
_______________________________
I Love it when they lie still like that....