Author [EN] [ZH] [ES] [PT] [IT] [DE] [FR] [NL] [TR] [SR] [AR] [RU] [EN] [ZH] [ES] [PT] [IT] [DE] [FR] [NL] [TR] [SR] [AR] [RU] [EN] [ZH] [ES] [PT] [IT] [DE] [FR] [NL] [TR] [SR] [AR] [RU] Topic: Attack on DevShares / client misbehaving?  (Read 1030 times)

0 Members and 1 Guest are viewing this topic.

Offline wackou

Attack on DevShares / client misbehaving?
« on: March 10, 2015, 03:46:30 PM »

Since yesterday morning, 2015-03-09 at about 07:40 UTC, my DVS delegate's CPU usage has been spiking, with a client that seems to be connecting / disconnecting a lot:



This is still going on as of today. This also happens when I run a DevShares client on my laptop, so is not restricted to my delegates. see the last 5 minutes on my laptop (no wallet open):



Is this an attack / spamming of the DevShares network? More likely, could it be some client on the network that is misbehaving (hinted at by the deconnection/reconnection)?

I have this IP that comes up in the client a lot:
Code: [Select]
Peer 46.10.205.0:32123 disconnected us: You offered us a block that we reject as invalid

Can anyone shed a light on what could be happening here?
Please vote for witness wackou! More info at http://digitalgaia.io

Offline wackou

Re: Attack on DevShares / client misbehaving?
« Reply #1 on: March 10, 2015, 03:52:40 PM »
last 10 minutes on my laptop:



this is something that happens exactly every 30 seconds...
Please vote for witness wackou! More info at http://digitalgaia.io

Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12242
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BTS: xeroc
  • GitHub: xeroc
Re: Attack on DevShares / client misbehaving?
« Reply #2 on: March 10, 2015, 04:26:14 PM »
@come-from-beyond: is this you?

is the client running as expected?
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH

Offline wackou

Re: Attack on DevShares / client misbehaving?
« Reply #3 on: March 10, 2015, 04:38:16 PM »
yes, apart from that, everything is running smoothly, as usual. But given the looks of it, I doubt that it's a real attack, more like a bug that is somehow causing this.
Please vote for witness wackou! More info at http://digitalgaia.io

38PTSWarrior

  • Guest
Re: Attack on DevShares / client misbehaving?
« Reply #4 on: March 10, 2015, 04:41:10 PM »
This is like in “contact“.. alien message.. :D

Offline wackou

Re: Attack on DevShares / client misbehaving?
« Reply #5 on: March 11, 2015, 01:56:33 PM »
Any opinion from core devs on the matter? This has been going on for more than 48 hours now...
Please vote for witness wackou! More info at http://digitalgaia.io

Offline xeroc

  • Board Moderator
  • Hero Member
  • *****
  • Posts: 12242
  • ChainSquad GmbH
    • View Profile
    • ChainSquad GmbH
  • BTS: xeroc
  • GitHub: xeroc
Re: Attack on DevShares / client misbehaving?
« Reply #6 on: March 11, 2015, 02:47:24 PM »
paging @vikram !
Give BitShares a try! Use the http://testnet.bitshares.eu provided by http://bitshares.eu powered by ChainSquad GmbH

Offline jsidhu

  • Hero Member
  • *****
  • Posts: 1337
    • View Profile
Re: Attack on DevShares / client misbehaving?
« Reply #7 on: March 11, 2015, 06:18:24 PM »
probably CfB
Hired by blockchain | Developer
delegate: dev.sidhujag

Offline Ander

  • Hero Member
  • *****
  • Posts: 3507
    • View Profile
  • BTS: Ander
Re: Attack on DevShares / client misbehaving?
« Reply #8 on: March 11, 2015, 06:51:56 PM »
This is like in “contact“.. alien message.. :D

Alien message from Come from Beyond, trying to test our system. ;)
https://metaexchange.info | Bitcoin<->Altcoin exchange | Instant | Safe | Low spreads

Offline dannotestein

Re: Attack on DevShares / client misbehaving?
« Reply #9 on: March 11, 2015, 08:36:28 PM »
Any opinion from core devs on the matter? This has been going on for more than 48 hours now...
I looked at my devshares delegate on Linux and also at my devshares GUI client, and they seem to be operating within normal parameters (both are less loaded as to cpu/memory usage than my respective bitshares clients). My devshares delegate is consuming around 800MB, my bitshares delegate is consuming around 1GB.

My devshares delegate is being sent invalid blocks from the same peer as you are. This is most likely just an out-of-date client from before a hard-fork.

What OS's are you running under, and what's the specs (CPU, memory) for the machines you're running on?
http://blocktrades.us Fast/Safe/High-Liquidity Crypto Coin Converter

Offline liondani

Re: Attack on DevShares / client misbehaving?
« Reply #10 on: March 11, 2015, 10:23:13 PM »
This is like in “contact“.. alien message.. :D

lol  +5%
  https://bitshares.OPENLEDGER.info/?r=GREECE  | You are in Control | BUY | SELL | SHORT | SWAP | LOAN | TRADE |  

Offline vikram

Re: Attack on DevShares / client misbehaving?
« Reply #11 on: March 12, 2015, 01:22:47 AM »
What OS's are you running under, and what's the specs (CPU, memory) for the machines you're running on?

And also what version DevShares are you running?

Offline wackou

Re: Attack on DevShares / client misbehaving?
« Reply #12 on: March 12, 2015, 11:33:41 AM »
my devshares delegate (first screenshot of this thread, this post: https://bitsharestalk.org/index.php?topic=14852.msg192315#msg192315) is running 0.6.3 on debian jessie, 2-core xeon and 4G RAM.

the second and third screenshot are from my laptop which is a 2012 macbook pro, with osx 10.9, devshares 0.6.3 as well.

here's a new one from my laptop where I completely removed the devshares dir:



as you can see, it starts by synchronizing the blockchain and then the same pattern appears. Note that total average cpu usage is not really that high, it's more the pattern that bothers me (so for instance just checking your average daily usage of your server will not show any unusual cpu usage). I am pretty sure also that this appeared 3 days ago and wasn't present before.

Unrelated to this issue, but still worth noticing, is that my BitShares delegate has an extremely low cpu usage (uncannily low, actually), at the cost of a small memory leak (this appeared in bts 0.6.2, 0.6.1 had a more normal cpu usage and no mem leak). Here's a screenshot (specs are the same as my dvs delegate, 2-core xeon and 4G RAM)

Please vote for witness wackou! More info at http://digitalgaia.io

Offline wackou

Re: Attack on DevShares / client misbehaving?
« Reply #13 on: March 18, 2015, 08:28:40 PM »
an update on the situation:

last night the cpu usage on the spike has been slowly fading out:



however, today it starting going up a lot more again, and nearly maxes out 1 core now:



(it doesn't show anything before ~15:20 because I was running it on another machine at that time)

Maybe it is related to the current fork with the init delegates somehow?
Please vote for witness wackou! More info at http://digitalgaia.io

Offline vikram

Re: Attack on DevShares / client misbehaving?
« Reply #14 on: March 18, 2015, 08:58:20 PM »
It's very strange and we don't really know what's going on. We are working to get DVS 0.8 out as soon as we can which has lots of changes; if the behavior still persists with the latest code then we will have to investigate more closely.

 

Google+