open All Channels
seplocked Issues, Workarounds & Localization
blankseplocked Tipping Point hates Tranquility.
 
This thread is older than 90 days and has been locked due to inactivity.


 
Author Topic

Aranorn
Broski Federation
Tactical Narcotics Team
Posted - 2011.02.16 22:56:00 - [1]
 

Edited by: Aranorn on 16/02/2011 23:05:48
I work at a small university where we employ some enterprise grade hardware for a intrusion detection system (IDS). About a week and a half ago, an update came out for our IDS box that included some new detection rules for something called "Segment Overlap with Different Data." that has been affecting client <-> server communications.

What's happening?

Apparently, Tranquility is generating these overlapping segments and causing a bit of a problem. The IDS does it's job by saying "I think you're an attack, and I don't really like that...so no more traffic for you!" and kills the connection. The net result is an unresponsive client, and ultimately a close-to-desktop.

What can be done?

If you're friends with your networking team, or you have beer to give them, you can ask them to set up an exception rule for the Tranquility cluster within Tipping Point (the IDS). If you're not, you can open a petition and pray CCP updates the TCP/IP stack (because apparently that's ultimately the issue here...)

How do you know if this is affecting you?

If you're on a College Campus, or other enterprise grade system, chances are they have some IDS solution in place. If that solution is based on Tipping Point hardware, you're probably encountering this same thing. I've already found one other person in my alliance with the same issue and it appears to also be IDS based.

Why is this a problem?

"Segment Overlaps with Different Data" is the basis for an attack designed specifically to evade IDS.

I already have a petition filed, just felt I should post in case others are having similar issues.

Medarr
Amarr
Ghost Festival
Naraka.
Posted - 2011.02.17 03:35:00 - [2]
 

Confirmed that it can be exploited to hijack connections.

BoodaBooda
Minmatar
Dreddit
Test Alliance Please Ignore
Posted - 2011.02.22 02:38:00 - [3]
 

I am the alliance-mate having this problem, and I'm trying to get my campus' IT guys to help me out, but they're unresponsive.

Just bumping to say that this is still a problem, and an odd one at that. Maybe some of you are experiencing it and don't know the cause.

Aranorn
Broski Federation
Tactical Narcotics Team
Posted - 2011.03.02 18:28:00 - [4]
 

Just a quick update to this: I heard back from a GM and apparently a member of CCP's networking team is in contact with Tipping Point. I assume this means that they're actively working on a solution.

Raipah
Posted - 2011.03.09 07:02:00 - [5]
 

Same issue on my end. After some back and forth, a GM eventually came to the same conclusion - "Thank you for the pingplotter file. This indeed looks like a perfectly fine connection, which strengthens your suspicion that the IDS in use is indeed interfering with the EVE connection and somehow misidentifying it. As our net code didn't change to my knowledge, I would suspect that this would be the result of a new pattern that causes this to happen once again. We have been getting reports about the hardware in use from other sources in addition to the forum post you linked as well and are doing what we can from our end to have this resolved as soon as possible."

Reading that, it seems as if this may not be the first time a situation like this has happened.

BoodaBooda
Minmatar
Dreddit
Test Alliance Please Ignore
Posted - 2011.03.17 04:39:00 - [6]
 

Bumping, CCP hasn't worked out a solution yet, but the guys at my campus have found the problem and will hopefully be fixing it locally for me soon.

There are a lot of other people having this problem right now, I know of 2 people on campus here with me at least, so I feel this is relevant yet.

Trophous
Upvote
Test Alliance Please Ignore
Posted - 2011.03.30 03:32:00 - [7]
 

Edited by: Trophous on 30/03/2011 03:40:35
Originally by: BoodaBooda
Bumping, CCP hasn't worked out a solution yet, but the guys at my campus have found the problem and will hopefully be fixing it locally for me soon.

There are a lot of other people having this problem right now, I know of 2 people on campus here with me at least, so I feel this is relevant yet.


this started happening to me today as well.

login, 30 seconds later i get kicked off, what the ****.

Also, are TEST people the only ones having this happen to them? I cant even set skill queues atm.


edit: also i dont believe my apartment building uses tipping point


 

This thread is older than 90 days and has been locked due to inactivity.


 


The new forums are live

Please adjust your bookmarks to https://forums.eveonline.com

These forums are archived and read-only