Old 4th January 2007, 19:40   #1
limainfinita
Junior Member
 
Join Date: Mar 2006
Location: peru
Posts: 25
help: one different server down every 1 hour 30mins ?

Hi I have a really huge problem:
I have a radio station and we have several shoutcast accounts in differents providers, differents locations.

Well since yesterday, looks like my radio is under attack.

server A: began to streaming at 8am, at 11am server is down

server b ( europe location) : began to stream at 1pm, at 3pm server is down.

server c: began to stream at 4pm, at 6pm server is down.

each server I use, will be down in 1h and 30m

What kind I do?

Im loosing listenenrs because of that.

thanks in advance
limainfinita is offline   Reply With Quote
Old 4th January 2007, 19:56   #2
dotme
Moderator
 
dotme's Avatar
 
Join Date: Feb 2005
Location: USA
Posts: 4,024
It is exactly 1 hr 30 mins, something else is at play.

If the servers are all slaves, check the relay master for a listener timer. If one is set, the relay source could be kicking the relay servers every 90 minutes...
dotme is offline   Reply With Quote
Old 4th January 2007, 20:02   #3
limainfinita
Junior Member
 
Join Date: Mar 2006
Location: peru
Posts: 25
is not 1h 30m exactly
and like I said:
Im using different providers which provide me shoutcast accounts.

comapany A gave me 2 accounts
company B gave me 2 accounts
a friend of mine give me 1 account

so those all accounts are in differents providers
with differents iports
limainfinita is offline   Reply With Quote
Old 4th January 2007, 20:05   #4
dotme
Moderator
 
dotme's Avatar
 
Join Date: Feb 2005
Location: USA
Posts: 4,024
Then look in the logfiles to see what happens right before a disconnect...
dotme is offline   Reply With Quote
Old 4th January 2007, 20:10   #5
limainfinita
Junior Member
 
Join Date: Mar 2006
Location: peru
Posts: 25
some providers told me you are under attack
other providers told me: I have to cheks logs

the fact is: each server I use is down in 1 hour, 1 hour and 30m , 2 hours, but will be down for sure

what I can do?
limainfinita is offline   Reply With Quote
Old 4th January 2007, 20:18   #6
fc*uk
Moderator
 
fc*uk's Avatar
 
Join Date: Dec 2005
Location: Atlantic Beach
Posts: 8,127
look at your logs like dotme suggested. They hold all of the information.

If you do not know what to look for, then post them as a zip and someone here will look at them.
fc*uk is offline   Reply With Quote
Old 6th January 2007, 14:15   #7
djSpinnerCee
Forum King
 
djSpinnerCee's Avatar
 
Join Date: Aug 2004
Location: Hollis, Queens/The Bronx, NYC
Posts: 3,495
What do you mean by "down"?

A DNAS will call itself down when there is no source connected -- if this is the case, the DNAS log wil indicate a source idle disconnect at least.

You may also call the DNAS server down when the server is not running at all on the host -- if this is the case something else is going on because a DNAS cannot be unloaded (shutdown) remotely via the /admin.cgi interface -- in this case, the source will not be able to connect to it, and if it is a relay, it will not connect to the source DNAS.

For relays, you should also make sure that relays are in the host/parent DNAS RIP (ReserveIP) list so they don't get kicked when their host DNAS server is full.

The logs should give you hints.
djSpinnerCee is offline   Reply With Quote
Old 6th January 2007, 14:27   #8
limainfinita
Junior Member
 
Join Date: Mar 2006
Location: peru
Posts: 25
when I said down means:
http://ip: port/
this site is not available
dj cant connect to the shoutcast server
listeners cant connect to shoutcast server

one example:
a friend of mine who recently rent a dedy server gave me a shoutcast account.

I was using that account but after 30m the http://ip: port was unavailable
new visitors couldnt listen myradio
listenners who was listenning my radio, continuing listening radio.

after 10m more, my friend server was down and needed to reboot

I asked my friend: what happened?
My friend told me: all was really good, the new stuff in my server is your shoutcast account.

I feel sorry about that.

I had to migrate to another shoutcast account, this time another friend gave me a shoutcast account ( he has his server is a different place - provider than my previous friend)

well in thi account my radio works 1h 30m after that same problem, and my friend had to restart all shoutcast accounts.

Looks like: each shoutcast account that I use has problems in 30m - 3h max

2 differents providers answered my questions in that way:
Your radio recieved a massive attack. we had to reboot server.

My radio is loosing listenners because Im changing iport 4 or 6 times per day.

any idea what can I do?

btw I use 48kbps 22.050 Mono bitrate
limainfinita is offline   Reply With Quote
Old 6th January 2007, 14:42   #9
djSpinnerCee
Forum King
 
djSpinnerCee's Avatar
 
Join Date: Aug 2004
Location: Hollis, Queens/The Bronx, NYC
Posts: 3,495
"new visitors couldnt listen myradio ... listenners who was listenning my radio, continuing listening radio."

Does that mean that while the source was disconnected, current listeners were still attached to the DNAS but new listeners could not attach (because there is no source), and a new source could also not connect?

at this time, can you ping and attach to the admin.cgi interface to see if the DNAS thinks a source is still connected?

The problem could be one of your DJs not properly disconnecting? What kind of settings do you server's have for source idle disconnects, and listener disconnects.

; AutoDumpUsers controls whether listeners are disconnected if the source
; stream disconnects. The default is 0.
AutoDumpUsers=0

; AutoDumpSourceTime specifies how long, in seconds, the source stream is
; allowed to be idle before the server disconnects it. 0 will let the source
; stream idle indefinately before disconnecting. The default is 30.
AutoDumpSourceTime=600
djSpinnerCee is offline   Reply With Quote
Old 6th January 2007, 15:43   #10
limainfinita
Junior Member
 
Join Date: Mar 2006
Location: peru
Posts: 25
now happen again:
http://66.252.13.205:8020

dj called me at home and told me: the server is not available

I cheked and cant see the http://66.252.13.205:8020 site

now takes 3s,4s 6s to load the page.

Im using now another shoutcast provider because the http://66.252.13.205:8020 has problems

if is happening same situation like days ago, in few hours currently new shoutcast account in use will suffer the same problems and will have to change again the shoutcast account.

Is a nightmare because I have to change shoutcast accounts( in 30m , in 1h, in 1h30m)
limainfinita is offline   Reply With Quote
Old 6th January 2007, 15:55   #11
djSpinnerCee
Forum King
 
djSpinnerCee's Avatar
 
Join Date: Aug 2004
Location: Hollis, Queens/The Bronx, NYC
Posts: 3,495
I checked it out -- page load is slow, but ping and tracert are fine -- the server is near Chicago?

You need to view the log [/admin.cgi] to see what's happening -- is the server getting hammered with source connect requests, or listen requests? It's important to know "who" is loading the server this way.

The server may appear to be unavailable to a source/DJ because the DNAS is taking too long to accept the source connection request because it is busy fending off "load."

You have to get to the log -- the answers are there.
djSpinnerCee is offline   Reply With Quote
Old 6th January 2007, 15:57   #12
limainfinita
Junior Member
 
Join Date: Mar 2006
Location: peru
Posts: 25
I can provide you the admin shoutcast password if you want
I need a resolve that problem

becasue like I said, Im lossing listenners

If the answer is in the log , I dont know what i have to searrch or look
limainfinita is offline   Reply With Quote
Old 6th January 2007, 17:39   #13
limainfinita
Junior Member
 
Join Date: Mar 2006
Location: peru
Posts: 25
Now http://38.100.80.136:8012 is not available

this is my second server which turn inavailable today

Im using my 3rd shoutcast account today
limainfinita is offline   Reply With Quote
Old 6th January 2007, 18:27   #14
KOOLguy
Senior Member
 
KOOLguy's Avatar
 
Join Date: Aug 2006
Posts: 100
Have you tried changing ports? The servers could be running something else on the same ports every 1 1/2 hours or so
KOOLguy is offline   Reply With Quote
Old 6th January 2007, 18:29   #15
dotme
Moderator
 
dotme's Avatar
 
Join Date: Feb 2005
Location: USA
Posts: 4,024
Christ - yeah, something's going on with your servers. The logfiles are going to be essential to troubleshooting this.

Log into your Admin area, choose "View Log", cut and paste it here.
dotme is offline   Reply With Quote
Old 6th January 2007, 19:52   #16
limainfinita
Junior Member
 
Join Date: Mar 2006
Location: peru
Posts: 25
<12/11/06@11:58:53> [dest: 190.41.122.148] server
unavailable, disconnecting
<12/11/06@11:58:53> [dest: 190.41.122.148] server
unavailable, disconnecting
<12/11/06@11:58:54> [dest: 190.41.122.148] server
unavailable, disconnecting
<12/11/06@11:58:55> [dest: 190.41.122.148] server
unavailable, disconnecting
<12/11/06@11:58:55> [dest: 190.41.122.148] server
unavailable, disconnecting
<12/11/06@11:58:56> [dest: 190.41.122.148] server
unavailable, disconnecting
<12/11/06@11:58:58> [dest: 190.41.122.148] server
unavailable, disconnecting
<12/11/06@11:58:59> [dest: 190.41.122.148] server
unavailable, disconnecting
<12/11/06@11:59:00> [dest: 190.41.122.148] server
unavailable, disconnecting
<12/11/06@11:59:00> [dest: 190.41.122.148] server
unavailable, disconnecting
<12/11/06@11:59:01> [dest: 190.41.122.148] server
unavailable, disconnecting
<12/11/06@11:59:02> [dest: 190.41.122.148] server
unavailable, disconnecting
<12/11/06@11:59:02> [dest: 190.41.122.148] server
unavailable, disconnecting
[02:50:41 PM] RADIO LIMAIN: como se llama eso
[02:50:46 PM] RADIO LIMAIN: el log seguia infinito
[02:51:24 PM] RADIO LIMAIN: 201.240.41.130 0m 30s 0 Kick Ban Ban
Reserve
201.240.41.130 0m 28s 0 Kick Ban Ban Reserve
201.240.41.130 0m 27s 0 Kick Ban Ban Reserve
201.240.41.130 0m 26s 0 Kick Ban Ban Reserve
201.240.41.130 0m 26s 0 Kick Ban Ban Reserve
201.240.41.130 0m 23s 0 Kick Ban Ban Reserve
201.240.41.130 0m 22s 0 Kick Ban Ban Reserve

I found that one ip was coneccting and reconecting 1000 times

that is an attack?
limainfinita is offline   Reply With Quote
Old 6th January 2007, 20:04   #17
limainfinita
Junior Member
 
Join Date: Mar 2006
Location: peru
Posts: 25
Againn, Im gonna to make me crazy
4 shoutcast account is down
Im changing servers, ports
I dont know what to do

<01/06/07@13:14:36> [dest: 201.240.41.130] starting stream (UID: 5592)[L: 15]{A: NSPlayer/9.0.0.3250}(P: 15)
<01/06/07@13:14:37> [dest: 201.240.41.130] starting stream (UID: 5593)[L: 16]{A: NSPlayer/9.0.0.3250 WMFSDK/9.0}(P: 16)
<01/06/07@13:14:38> [dest: 201.240.41.130] connection closed (0 seconds) (UID: 5593)[L: 15]{Bytes: 65536}(P: 16)
<01/06/07@13:14:38> [dest: 201.240.41.130] starting stream (UID: 5594)[L: 16]{A: NSPlayer/9.0.0.3250}(P: 16)
<01/06/07@13:14:38> [dest: 201.240.41.130] connection closed (1 seconds) (UID: 5594)[L: 15]{Bytes: 71024}(P: 16)
<01/06/07@13:14:38> [dest: 201.240.41.130] starting stream (UID: 5595)[L: 16]{A: NSPlayer/9.0.0.3250 WMFSDK/9.0}(P: 16)
<01/06/07@13:14:38> [dest: 201.240.41.130] connection closed (0 seconds) (UID: 5595)[L: 15]{Bytes: 65536}(P: 16)
<01/06/07@13:14:39> [dest: 201.240.41.130] starting stream (UID: 5596)[L: 16]{A: NSPlayer/9.0.0.3250}(P: 16)
<01/06/07@13:14:39> [dest: 201.240.41.130] starting stream (UID: 5597)[L: 17]{A: NSPlayer/9.0.0.3250 WMFSDK/9.0}(P: 17)
<01/06/07@13:14:39> [dest: 201.240.41.130] connection closed (0 seconds) (UID: 5597)[L: 16]{Bytes: 65536}(P: 17)
<01/06/07@13:14:39> [dest: 201.240.41.130] starting stream (UID: 5598)[L: 17]{A: NSPlayer/9.0.0.3250}(P: 17)
<01/06/07@13:14:40> [dest: 201.240.41.130] starting stream (UID: 5599)[L: 18]{A: NSPlayer/9.0.0.3250 WMFSDK/9.0}(P: 18)
<01/06/07@13:14:40> [dest: 201.240.41.130] connection closed (1 seconds) (UID: 5599)[L: 17]{Bytes: 65536}(P: 18)
<01/06/07@13:14:40> [dest: 201.240.41.130] starting stream (UID: 5600)[L: 18]{A: NSPlayer/9.0.0.3250}(P: 18)
<01/06/07@13:14:41> [dest: 201.240.41.130] starting stream (UID: 5601)[L: 19]{A: NSPlayer/9.0.0.3250 WMFSDK/9.0}(P: 19)
<01/06/07@13:14:41> [dest: 201.240.41.130] connection closed (1 seconds) (UID: 5601)[L: 18]{Bytes: 65536}(P: 19)
<01/06/07@13:14:41> [dest: 201.240.41.130] starting stream (UID: 5602)[L: 19]{A: NSPlayer/9.0.0.3250}(P: 19)
<01/06/07@13:14:42> [dest: 201.240.41.130] starting stream (UID: 5603)[L: 20]{A: NSPlayer/9.0.0.3250 WMFSDK/9.0}(P: 20)
<01/06/07@13:14:42> [dest: 201.240.41.130] connection closed (0 seconds) (UID: 5603)[L: 19]{Bytes: 65536}(P: 20)
<01/06/07@13:14:42> [dest: 201.240.41.130] starting stream (UID: 5604)[L: 20]{A: NSPlayer/9.0.0.3250}(P: 20)
<01/06/07@13:14:43> [dest: 201.240.41.130] starting stream (UID: 5605)[L: 21]{A: NSPlayer/9.0.0.3250 WMFSDK/9.0}(P: 21)
<01/06/07@13:14:44> [dest: 201.240.41.130] starting stream (UID: 5606)[L: 22]{A: NSPlayer/9.0.0.3250}(P: 22)
<01/06/07@13:14:45> [dest: 201.240.41.130] starting stream (UID: 5607)[L: 23]{A: NSPlayer/9.0.0.3250 WMFSDK/9.0}(P: 23)
<01/06/07@13:14:45> [dest: 201.240.41.130] connection closed (1 seconds) (UID: 5607)[L: 22]{Bytes: 65536}(P: 23)
<01/06/07@13:14:45> [dest: 201.240.41.130] starting stream (UID: 5608)[L: 23]{A: NSPlayer/9.0.0.3250}(P: 23)
<01/06/07@13:14:46> [dest: 201.240.41.130] starting stream (UID: 5609)[L: 24]{A: NSPlayer/9.0.0.3250 WMFSDK/9.0}(P: 24)
<01/06/07@13:14:46> [dest: 201.240.41.130] connection closed (0 seconds) (UID: 5609)[L: 23]{Bytes: 65536}(P: 24)
<01/06/07@13:14:46> [dest: 201.240.41.130] starting stream (UID: 5610)[L: 24]{A: NSPlayer/9.0.0.3250}(P: 24)
<01/06/07@13:14:47> [dest: 201.240.41.130] starting stream (UID: 5611)[L: 25]{A: NSPlayer/9.0.0.3250 WMFSDK/9.0}(P: 25)
<01/06/07@13:14:47> [dest: 201.240.41.130] connection closed (1 seconds) (UID: 5611)[L: 24]{Bytes: 65536}(P: 25)
<01/06/07@13:14:57> [dest: 201.240.41.130] connection closed (22 seconds) (UID: 5591)[L: 23]{Bytes: 71024}(P: 3)
<01/06/07@13:15:01> [dest: 201.240.41.130] connection closed (24 seconds) (UID: 5592)[L: 22]{Bytes: 68120}(P: 15)
<01/06/07@13:15:06> [dest: 201.240.41.130] connection closed (26 seconds) (UID: 5598)[L: 21]{Bytes: 71024}(P: 17)
<01/06/07@13:15:07> [dest: 201.240.41.130] connection closed (24 seconds) (UID: 5606)[L: 20]{Bytes: 71024}(P: 22)
<01/06/07@13:15:09> [dest: 201.240.41.130] connection closed (26 seconds) (UID: 5605)[L: 19]{Bytes: 71024}(P: 21)
<01/06/07@13:15:09> [dest: 201.240.41.130] connection closed (30 seconds) (UID: 5596)[L: 18]{Bytes: 71024}(P: 16)
<01/06/07@13:15:09> [dest: 201.240.41.130] connection closed (24 seconds) (UID: 5608)[L: 17]{Bytes: 71024}(P: 23)
<01/06/07@13:15:10> [dest: 201.240.41.130] connection closed (29 seconds) (UID: 5602)[L: 16]{Bytes: 71024}(P: 19)
<01/06/07@13:15:12> [dest: 201.240.41.130] connection closed (32 seconds) (UID: 5600)[L: 15]{Bytes: 71024}(P: 18)
<01/06/07@13:15:15> [dest: 201.240.41.130] connection closed (33 seconds) (UID: 5604)[L: 14]{Bytes: 71024}(P: 20)
<01/06/07@13:15:21> [dest: 201.240.41.130] connection
limainfinita is offline   Reply With Quote
Old 6th January 2007, 20:27   #18
djSpinnerCee
Forum King
 
djSpinnerCee's Avatar
 
Join Date: Aug 2004
Location: Hollis, Queens/The Bronx, NYC
Posts: 3,495
You didn't give us the right part of the log, but what you did show is a single player loading up at the same time -- could this be an embedded player on a webpage?

The log entries you're looking for are related to the source and maybe yp-touches, or any errors -- I know the /admin.cgi is just a tail of the end of the log, so to really find out what's going on, you need to get a bigger piece of the log -- unfortunately, you cannot get that from the DNAS web interface.
djSpinnerCee is offline   Reply With Quote
Old 6th January 2007, 20:37   #19
limainfinita
Junior Member
 
Join Date: Mar 2006
Location: peru
Posts: 25
what is that plz:
01/06/07@11:58:52> [dest: 201.230.201.178] server unavailable, disconnecting
<01/06/07@11:58:52> [dest: 201.230.201.178] server unavailable, disconnecting
<01/06/07@11:59:27> [dest: 201.230.201.178] server unavailable, disconnecting
<01/06/07@11:59:27> [dest: 201.230.201.178] server unavailable, disconnecting
<01/06/07@12:17:12> [dest: 200.121.139.131] server unavailable, disconnecting
<01/06/07@12:17:20> [dest: 200.121.139.131] server unavailable, disconnecting
<01/06/07@12:26:11> [dest: 201.230.220.192] server unavailable, disconnecting
<01/06/07@12:29:10> [dest: 190.40.32.44] server unavailable, disconnecting
<01/06/07@12:29:12> [dest: 190.40.32.44] server unavailable, disconnecting
<01/06/07@12:29:54> [dest: 190.40.32.44] server unavailable, disconnecting
<01/06/07@12:29:55> [dest: 190.40.32.44] server unavailable, disconnecting
<01/06/07@12:33:41> [dest: 200.121.139.131] server unavailable, disconnecting
<01/06/07@12:33:43> [dest: 200.121.139.131] server unavailable, disconnecting
<01/06/07@12:33:47> [dest: 201.230.220.192] server unavailable, disconnecting
<01/06/07@12:33:58> [dest: 200.121.139.131] server unavailable, disconnecting
<01/06/07@12:37:13> [dest: 200.121.139.131] server unavailable, disconnecting
<01/06/07@12:37:15> [dest: 200.121.139.131] server unavailable, disconnecting
<01/06/07@12:38:30> [dest: 201.230.220.192] server unavailable, disconnecting
<01/06/07@12:38:38> [dest: 201.230.220.192] server unavailable, disconnecting
<01/06/07@12:39:11> [dest: 201.240.28.157] server unavailable, disconnecting
<01/06/07@12:41:11> [dest: 83.76.118.229] server unavailable, disconnecting
<01/06/07@12:41:22> [dest: 83.76.118.229] server unavailable, disconnecting
<01/06/07@12:42:07> [dest: 83.76.118.229] server unavailable, disconnecting
<01/06/07@12:45:14> [dest: 200.121.173.237] server unavailable, disconnecting
<01/06/07@12:45:14> [dest: 200.121.173.237] server unavailable, disconnecting
<01/06/07@12:45:36> [dest: 200.121.173.237] server unavailable, disconnecting
<01/06/07@12:45:36> [dest: 200.121.173.237] server unavailable, disconnecting

25)
<01/06/07@13:14:47> [dest: 201.240.41.130] connection closed (1 seconds) (UID: 5611)[L: 24]{Bytes: 65536}(P: 25)
<01/06/07@13:14:57> [dest: 201.240.41.130] connection closed (22 seconds) (UID: 5591)[L: 23]{Bytes: 71024}(P: 3)
<01/06/07@13:15:01> [dest: 201.240.41.130] connection closed (24 seconds) (UID: 5592)[L: 22]{Bytes: 68120}(P: 15)
<01/06/07@13:15:06> [dest: 201.240.41.130] connection closed (26 seconds) (UID: 5598)[L: 21]{Bytes: 71024}(P: 17)
<01/06/07@13:15:07> [dest: 201.240.41.130] connection closed (24 seconds) (UID: 5606)[L: 20]{Bytes: 71024}(P: 22)
<01/06/07@13:15:09> [dest: 201.240.41.130] connection closed (26 seconds) (UID: 5605)[L: 19]{Bytes: 71024}(P: 21)
<01/06/07@13:15:09> [dest: 201.240.41.130] connection closed (30 seconds) (UID: 5596)[L: 18]{Bytes: 71024}(P: 16)
<01/06/07@13:15:09> [dest: 201.240.41.130] connection closed (24 seconds) (UID: 5608)[L: 17]{Bytes: 71024}(P: 23)
<01/06/07@13:15:10> [dest: 201.240.41.130] connection closed (29 seconds) (UID: 5602)[L: 16]{Bytes: 71024}(P: 19)
<01/06/07@13:15:12> [dest: 201.240.41.130] connection closed (32 seconds) (UID: 5600)[L: 15]{Bytes: 71024}(P: 18)
<01/06/07@13:15:15> [dest: 201.240.41.130] connection closed (33 seconds) (UID: 5604)[L: 14]{Bytes: 71024}(P: 20)
<01/06/07@13:15:21> [dest: 201.240.41.130] connection closed (34 seconds) (UID: 5610)[L: 13]{Bytes: 71024}(P: 24)

<01/06/07@13:19:07> [yp_add] yp.shoutcast.com gave error (nak)
<01/06/07@13:19:07> [yp_add] yp.shoutcast.com gave extended error (Please identify this station's genre (in the dsp plugin YP tab).)
<01/06/07@13:19:20> [dest: 68.32.151.135] starting stream (UID: 5618)[L: 17]{A: NSPlayer/10.0.0.4054 WMFSDK/10.0}(P: 17)
<01/06/07@13:19:20> [dest: 68.32.151.135] starting stream (UID: 5619)[L: 18]{A: NSPlayer/10.0.0.4054 WMFSDK/10.0}(P: 19)
<01/06/07@13:19:35> [dest: 68.32.151.135] connection closed (62 seconds) (UID: 5616)[L: 17]{Bytes: 102968}(P: 3)
<01/06/07@13:19:58> [dest: 201.240.224.247] starting stream (UID: 5620)[L: 18]{A: NSPlayer/10.0.0.3802 WMFSDK/10.0}(P: 16)
<01/06/07@13:20:02> [dest: 201.240.224.247] starting stream (UID: 5621)[L: 19]{A: NSPlayer/10.0.0.3802 WMFSDK/10.0}(P: 3)
<01/06/07@13:20:09> [dest: 201.240.224.247] connection closed (11 seconds) (UID: 5620)[L: 18]{Bytes: 79736}(P: 16)
<01/06/07@13:20:23> [dest: 68.32.151.135] connection closed (109 seconds) (UID: 5617)[L: 17]{Bytes: 529186}(P: 12)
<01/06/07@13:20:25> [dest: 68.32.151.135] connection closed (64 seconds) (UID: 5618)[L: 16]{Bytes: 73728}(P: 17)
<01/06/07@13:20:41> [dest: 68.32.151.135] connection closed (81 seconds) (UID: 5619)[L: 15]{Bytes: 369163}(P: 19)
<01/06/07@13:20:46> [dest: 74.72.140.235] starting stream (UID: 5622)[L: 16]{A: NSPlayer/11.0.5705.5043 WMFSDK/11.0}(P: 16)
<01/06/07@13:20:48> [dest: 201.240.224.247] connection closed (47 seconds) (UID: 5621)[L: 15]{Bytes: 278528}(P: 3)
<01/06/07@13:20:48> [dest: 74.72.140.235] connection closed (4 seconds) (UID: 5622)[L: 14]{Bytes: 73728}(P: 16)
<01/06/07@13:20:53> [dest: 201.240.224.247] starting stream (UID: 5623)[L: 15]{A: NSPlayer/10.0.0.3802 WMFSDK/10.0}(P: 3)
<01/06/07@13:20:55> [dest: 201.240.224.247] connection closed (1 seconds) (UID: 5623)[L: 14]{Bytes: 16384}(P: 3)
<01/06/07@13:20:56> [dest: 201.240.224.247] starting stream (UID: 5624)[L: 15]{A: NSPlayer/10.0.0.3802 WMFSDK/10.0}(P: 16)
<01/06/07@13:20:59> [dest: 74.72.140.235] starting stream (UID: 5625)[L: 16]{A: NSPlayer/11.0.5705.5043 WMFSDK/11.0}(P: 3)
<01/06/07@13:21:01> [dest: 74.72.140.235] connection closed (2 seconds) (UID: 5625)[L: 15]{Bytes: 77256}(P: 3)
<01/06/07@13:21:01> [dest: 74.72.140.235] starting stream (UID: 5626)[L: 16]{A: NSPlayer/11.0.5705.5043 WMFSDK/11.0}(P: 3)
<01/06/07@13:21:11> [dest: 201.240.39.108] connection closed (482 seconds) (UID: 5586)[L: 15]{Bytes: 2730069}(P: 13)
<01/06/07@13:21:35> [dest: 200.121.244.248] starting stream (UID: 5627)[L: 16]{A: NSPlayer/9.0.0.3287 WMFSDK/9.0}(P: 13)
<01/06/07@13:21:38> [dest: 200.121.244.248] connection closed (4 seconds) (UID: 5627)[L: 15]{Bytes: 69956}(P: 13)
<01/06/07@13:21:42> [dest: 200.121.244.248] starting stream (UID: 5628)[L: 16]{A: NSPlayer/9.0.0.3287 WMFSDK/9.0}(P: 19)
<01/06/07@13:22:18> [dest: 190.40.101.134] starting stream (UID: 5629)[L: 17]{A: NSPlayer/11.0.5358.4827 WMFSDK/11.0}(P: 12)
<01/06/07@13:22:33> [dest: 85.55.163.242] connection closed (1894 seconds) (UID: 5531)[L: 16]{Bytes: 9112463}(P: 1)
<01/06/07@13:22:34> [dest: 190.40.101.134] starting stream (UID: 5630)[L: 17]{A: NSPlayer/11.0.5358.4827 WMFSDK/11.0}(P: 13)
<01/06/07@13:22:34> [dest: 190.40.101.134] connection closed (0 seconds) (UID: 5630)[L: 16]{Bytes: 0}(P: 13)
<01/06/07@13:22:34> [dest: 190.40.101.134] starting stream (UID: 5631)[L: 17]{A: NSPlayer/11.0.5358.4827 WMFSDK/11.0}(P: 21)
<01/06/07@13:22:40> [dest: 190.40.101.134] starting stream (UID: 5632)[L: 18]{A: NSPlayer/11.0.5358.4827 WMFSDK/11.0}(P: 20)
<01/06/07@13:22:55> [dest: 201.240.224.247] connection closed (118 seconds) (UID: 5624)[L: 17]{Bytes: 829172}(P: 16)
<01/06/07@13:22:57> [dest: 190.40.101.134] connection closed (19 seconds) (UID: 5632)[L: 16]{Bytes: 278528}(P: 20)
<01/06/07@13:23:11> [dest: 200.121.177.71] connection closed (558 seconds) (UID: 5590)[L: 15]{Bytes: 3489615}(P: 5)
<01/06/07@13:23:22> [dest: 200.121.244.248] connection closed (102 seconds) (UID: 5628)[L: 14]{Bytes: 731602}(P: 19)
<01/06/07@13:23:24> [dest: 190.40.101.134] connection closed (70 seconds) (UID: 5629)[L: 13]{Bytes: 70600}(P: 12)
<01/06/07@13:23:33> [dest: 200.121.244.248] starting stream (UID: 5633)[L: 14]{A: NSPlayer/9.0.0.3287 WMFSDK/9.0}(P: 12)
<01/06/07@13:23:35> [dest: 200.121.244.248] connection closed (4 seconds) (UID: 5633)[L: 13]{Bytes: 0}(P: 12)
<01/06/07@13:23:47> [dest: 190.40.101.134] connection closed (72 seconds) (UID: 5631)[L: 12]{Bytes: 69064}(P: 21)
<01/06/07@13:24:42> [dest: 200.121.244.248] starting stream (UID: 5634)[L: 13]{A: NSPlayer/9.0.0.3287 WMFSDK/9.0}(P: 12)
<01/06/07@13:24:56> [dest: 200.121.244.248] connection closed (13 seconds) (UID: 5634)[L: 12]{Bytes: 65536}(P: 12)
<01/06/07@13:25:02> [dest: 201.240.87.143] connection closed (708 seconds) (UID: 5588)[L: 11]{Bytes: 4063994}(P: 14)
<01/06/07@13:25:07> [dest: 200.121.244.248] starting stream (UID: 5635)[L: 12]{A: NSPlayer/9.0.0.3287 WMFSDK/9.0}(P: 5)
<01/06/07@13:27:31> [dest: 74.72.140.235] connection closed (347 seconds) (UID: 5626)[L: 11]{Bytes: 1317200}(P: 3)
<01/06/07@13:27:31> [dest: 200.121.244.248] connection closed (1959 seconds) (UID: 5546)[L: 10]{Bytes: 91458****(P: 9)
<01/06/07@13:33:00> [dest: 200.106.63.19] connection closed (2322 seconds) (UID: 5543)[L: 9]{Bytes: 9187112}(P: 8)
<01/06/07@13:33:00> [dest: 200.121.243.205] connection closed (2228 seconds) (UID: 5560)[L: 8]{Bytes: 8905537}(P: 11)
<01/06/07@13:34:00> [dest: 201.240.200.189] connection closed (2184 seconds) (UID: 5564)[L: 7]{Bytes: 8583972}(P: 10)
<01/06/07@13:34:09> [dest: 64.229.185.76] connection closed (1044 seconds) (UID: 5613)[L: 6]{Bytes: 2971707}(P: 15)
<01/06/07@13:36:41> [dest: 201.230.201.178] connection closed (2021 seconds) (UID: 5574)[L: 5]{Bytes: 7661695}(P: 0)
<01/06/07@13:36:41> [dest: 201.230.201.178] connection closed (2608 seconds) (UID: 5533)[L: 4]{Bytes: 9426494}(P: 2)
<01/06/07@13:36:42> [dest: 201.230.201.178] connection closed (1608 seconds) (UID: 5581)[L: 3]{Bytes: 5496704}(P: 4)
<01/06/07@13:36:42> [dest: 200.121.244.248] connection closed (673 seconds) (UID: 5635)[L: 2]{Bytes: 296960}(P: 5)
<01/06/07@13:36:50> [dest: 201.230.35.1] connection closed (1957 seconds) (UID: 5576)[L: 1]{Bytes: 7474322}(P: 6)
<01/06/07@13:36:50> [dest: 200.121.139.131] connection closed (1453 seconds) (UID: 5584)[L: 0]{Bytes: 4566483}(P: 7)
<01/06/07@13:39:09> [yp_add] yp.shoutcast.com gave error (nak)
<01/06/07@13:39:11> [yp_add] yp.shoutcast.com gave extended error

Well I dont where I have to search

btw one of my shoutcast providers told me that I was underattack.

And just a couple of shoutcast accounts at his server works now.
Also told me that ssh is not available and he cant connect to server
limainfinita is offline   Reply With Quote
Old 6th January 2007, 20:57   #20
djSpinnerCee
Forum King
 
djSpinnerCee's Avatar
 
Join Date: Aug 2004
Location: Hollis, Queens/The Bronx, NYC
Posts: 3,495
1. <01/06/07@12:29:54> [dest: 190.40.32.44] server unavailable, disconnecting

This happens when the source is not (or cannot get) connected -- the DNAS refuses listen attempts, but allows /index.html, and /index.html, etc....

2. <01/06/07@13:19:07> [yp_add] yp.shoutcast.com gave extended error (Please identify this station's genre (in the dsp plugin YP tab).)
<01/06/07@13:19:20> [dest: 68.32.151.135] starting stream (UID: 5618)[L: 17]{A: NSPlayer/10.0.0.4054 WMFSDK/10.0}(P: 17)

This is expected, an dsomewhat normal as well -- the genre is only needed for YP purposes, so the source is connected and listeners can also connect...

You may need to figure out why so many WMP conections are getting started from the same IP at the same time -- could be an embed that has been found by a bad browser that is not correctly handling the embed or something else? Banning the IP ranges (201.[240,230].*.*) may help initially.

Maybe an attack, but more likely a link to your stream has been posted somewhere it does not belong like a forum (by you or one of your listeners), and it's getting a ton of bad hits.
djSpinnerCee is offline   Reply With Quote
Old 6th January 2007, 21:05   #21
limainfinita
Junior Member
 
Join Date: Mar 2006
Location: peru
Posts: 25
My radio is from Peru and we use:
190.
200.
201.
If I ban 201, Im banning lot of peruvians listenners.

about my shoutcast server:
Im changing today like 5 times my ip: port
so if someone has my ip: port

how is posible to know each time I change my ip: port
limainfinita is offline   Reply With Quote
Old 6th January 2007, 21:21   #22
djSpinnerCee
Forum King
 
djSpinnerCee's Avatar
 
Join Date: Aug 2004
Location: Hollis, Queens/The Bronx, NYC
Posts: 3,495
If changing the port does not change the loading, the listeners may be coming from the YP (it always knows) -- try making the stream private [PublicServer=never], or ban the individual IPs that are connecting multi-times --- One thing that is difficult to diagnose is where referrer-wise the listeners are coming from (you really wanna know this) -- the DNAS does not record this info, but it is certainly helpful at times like this.

; PublicServer can be always, never, or default (the default, heh)
; Any setting other than default will override the public status
; of the source plug-in or of a SHOUTcast server that is being relayed.
PublicServer=always
djSpinnerCee is offline   Reply With Quote
Old 6th January 2007, 22:15   #23
limainfinita
Junior Member
 
Join Date: Mar 2006
Location: peru
Posts: 25
thanks for help djspinnercee
limainfinita is offline   Reply With Quote
Old 7th January 2007, 17:10   #24
limainfinita
Junior Member
 
Join Date: Mar 2006
Location: peru
Posts: 25
an update:
"my friend who provided me a shoutcast account told me that:
"Over 3 days, well over 5,000 known (logged) attempts were made to ssh to get into the server, causing ram to shoot to 80%!"

I think each time Im using a shoutcast , a simillar situation is happening

WHat kind I do?
limainfinita is offline   Reply With Quote
Reply
Go Back   Winamp & Shoutcast Forums > Shoutcast > Shoutcast Discussions

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump