Official eMule-Board: Mldonkey-spam - Official eMule-Board

Jump to content


  • (3 Pages)
  • +
  • 1
  • 2
  • 3

Mldonkey-spam What's that?!

#1 User is offline   tHeWiZaRdOfDoS 

  • Man, what a bunch of jokers...
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 5630
  • Joined: 28-December 02

Post icon  Posted 08 August 2006 - 09:14 AM

Hi there...

during the last few month I noticed an increasing number of unk-tags from MLDonkey-Clients, e.g. from a few minutes ago:

Quote

08.08.2006 10:59:20: Unknown eDonkey Protocol Opcode: 0xfa, Size=33.68 KB, Data=[77 0d d7 e1 05 b2 a0 7c 59 25 b7 10 1b 71 01 eb 50 9e da 04 27 fc 36 12 da 04 27 fc d9 ff f7 ac 36 12 d9 ff f7 ac d9 ff e8 88 36 12 d9 ff e8 88 d9 ff d7 2c 36 12 d9 ff d7 2c d9 ff a1 15 36 12 d9 ff a1 15 d9 ff 9b 05 36 12 d9 ff 9b 05 d9 ff 84 5e 36 12 d9 ff 84 5e d9 ff 6b 02 36 12 d9 ff 6b 02 d9 ff..]; Client=XXX.XXX.XXX.XXX 'murzik_(RUS)_' (MLdonkey v2.7.7,Connected/None/None)
08.08.2006 11:03:36: Unknown eDonkey Protocol Opcode: 0xfa, Size=3.16 KB, Data=[42 01 75 56 a1 35 e3 c5 3d dc 3c cd 13 b6 f9 0b 14 a9 dd be bc 65 36 12 dd be bc 65 dd be ad c2 36 12 dd be ad c2 da 5a 14 c3 cc 29 da 5a 14 c3 d9 ec ec 0a 36 12 d9 ec ec 0a d9 ec d6 ad 36 12 d9 ec d6 ad d9 ec b1 bd 36 12 d9 ec b1 bd d9 ea 7f 4d 36 12 d9 ea 7f 4d d9 ea 7e 3b 36 12 d9 ea 7e 3b d9 e8..]; Client=XXX.XXX.XXX.XXX 'vmqooo' (MLdonkey v2.7.3,Connected/None/None)
08.08.2006 11:03:38: Unknown eDonkey Protocol Opcode: 0xfa, Size=3.60 KB, Data=[6f 01 75 56 a1 35 e3 c5 3d dc 3c cd 13 b6 f9 0b 14 a9 dd be bc 65 36 12 dd be bc 65 dd be ad c2 36 12 dd be ad c2 da 5a 14 c3 cc 29 da 5a 14 c3 d9 ec ec 0a 36 12 d9 ec ec 0a d9 ec d6 ad 36 12 d9 ec d6 ad d9 ec b1 bd 36 12 d9 ec b1 bd d9 ec b0 37 36 12 d9 ec b0 37 d9 ea 7f 4d 36 12 d9 ea 7f 4d d9 ea..]; Client=XXX.XXX.XXX.XXX 'zpqlnv' (MLdonkey v2.7.7,Connected/None/None)

As you can see I modified both the output as well as the number of chars to print to point out what enormous kind of spam that is! Just read it again: >30kB(!) on an unk tag - what's going on!? It seems to be some kind of "code" - if you compare the latter 2 examples you can see that they are very equal...
Does someone know what they are (trying) to send here?
GreetZ,
WiZ
0

#2 User is offline   fabtar 

  • Golden eMule
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 880
  • Joined: 14-March 04

Posted 08 August 2006 - 11:50 AM

tHeWiZaRdOfDoS, on Aug 8 2006, 09:14 AM, said:

Hi there...

during the last few month I noticed an increasing number of unk-tags from MLDonkey-Clients, e.g. from a few minutes ago:



I send a link to this problem/thread to the main mldonkey's developer immediately.

This post has been edited by fabtar: 08 August 2006 - 11:50 AM

0

#3 User is offline   Famerlor 

  • also known as Spike2
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 685
  • Joined: 16-October 04

Posted 08 August 2006 - 01:10 PM

If I understand the mldonkey-codeparts i just looked at in the right way, this packet is a sources request (0xfa = opcode 250)....?!?

Greetz --
Spike2
Posted Image

You want a light mod with source-dropping, Powershare and WiZaRd's ClientAnalyzer ?
Try Spike2-Mod !

You rather want to stick to official eMule but don't want to miss all the new fixes and optimizations from the mods ?
Try OfFixed-Mod !


This post has been edited 1 time, the last time by God: Tomorrow, 12:74 PM
0

#4 User is offline   tHeWiZaRdOfDoS 

  • Man, what a bunch of jokers...
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 5630
  • Joined: 28-December 02

Posted 08 August 2006 - 01:19 PM

That would be a HUGE one, don't you think!?

BTW, this might be caused by running a mod with ML-emulation some hours ago but then again, I don't get why they would STILL send me those packages now...
0

#5 User is offline   spiralvoice 

  • Member
  • PipPip
  • Group: Members
  • Posts: 38
  • Joined: 22-June 03

Posted 08 August 2006 - 02:49 PM

tHeWiZaRdOfDoS, on Aug 8 2006, 01:19 PM, said:

BTW, this might be caused by running a mod with ML-emulation some hours ago but then again, I don't get why they would STILL send me those packages now...

Opcode 0xfa is used for old mldonkey-only source exchange.

Because you used a mod with ML-emulation (what does it emulate btw?)
you are still known to other MLDonkey clients as MLDonkey, so they
still send you sources...
0

#6 User is offline   Famerlor 

  • also known as Spike2
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 685
  • Joined: 16-October 04

Posted 08 August 2006 - 03:38 PM

and parse emule_version magic s =
  try
    let len = String.length s in
    if len = 0 then raise Not_found;
    let opcode = int_of_char (s.[0]) in
(*lprintf "opcode: %d" opcode; lprint_newline (); *)
    match magic with
      227 ->
        begin
          match opcode with
          | 1 -> ConnectReq (Connect.parse false len s)
          | 70 -> BlocReq (Bloc.parse len s)
          | 71 -> QueryBlocReq (QueryBloc.parse len s)
          | 72 -> NoSuchFileReq (NoSuchFile.parse len s)
          | 73 -> EndOfDownloadReq (EndOfDownload.parse len s)
          | 74 -> ViewFilesReq (ViewFiles.parse len s)
          | 75 -> ViewFilesReplyReq (ViewFilesReply.parse len s)
          | 76 -> ConnectReplyReq (Connect.parse true len s)
          | 77 -> NewUserIDReq (NewUserID.parse len s)
          | 78 -> SayReq (Say.parse len s)
          | 79 -> QueryChunksReq (QueryChunks.parse len s)
          | 80 -> QueryChunksReplyReq (QueryChunksReply.parse len s)
          | 81 -> QueryChunkMd4Req (QueryChunkMd4.parse len s)
          | 82 -> QueryChunkMd4ReplyReq (QueryChunkMd4Reply.parse len s)
(* JoinQueue: the sender wants to join the upload queue *)
          | 84 -> JoinQueueReq (JoinQueue.parse len s)
(* AvailableSlot: there is an available slot in upload queue *)
          | 85 -> AvailableSlotReq (AvailableSlot.parse len s)
(* ReleaseSlot: the upload is finished *)
          | 86 -> ReleaseSlotReq (ReleaseSlot.parse len s)
(* CloseSlot: the upload slot is not available *)
          | 87 -> CloseSlotReq (CloseSlot.parse len s)
          | 88 -> QueryFileReq (QueryFile.parse emule_version len s)
          | 89 -> QueryFileReplyReq (QueryFileReply.parse len s)
          | 92 -> QueueRankReq (QueueRank.parse len s)
          | 93 -> ViewDirsReq (ViewDirs.parse len s)
          | 94 -> ViewFilesDirReq (ViewFilesDir.parse len s)
          (*
          | 95 -> ViewDirsReplyReq (ViewDirsReply.parse len s)
          | 96 -> ViewFilesDirReplyReq (ViewFilesDirReply.parse len s)
          *)
[COLOR=red]          | 250 -> SourcesReq (Sources.parse len s)[/COLOR]

          | _ -> raise Not_found
        end


from the mldonkey-sources (ProtoDonkeyClient.ml)
Posted Image

You want a light mod with source-dropping, Powershare and WiZaRd's ClientAnalyzer ?
Try Spike2-Mod !

You rather want to stick to official eMule but don't want to miss all the new fixes and optimizations from the mods ?
Try OfFixed-Mod !


This post has been edited 1 time, the last time by God: Tomorrow, 12:74 PM
0

#7 User is offline   tHeWiZaRdOfDoS 

  • Man, what a bunch of jokers...
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 5630
  • Joined: 28-December 02

Posted 08 August 2006 - 04:48 PM

Hmmm that was HOURS after using the other client, meanwhile they must have received a different hello...
Anyways, if they sent me sources, then I'll dig into the code and try to figure out how to use it, I guess :lol:
0

#8 User is offline   EvolutionCrazy 

  • Golden eMule
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 1226
  • Joined: 05-May 04

Posted 08 August 2006 - 05:50 PM

tHeWiZaRdOfDoS, on Aug 8 2006, 05:48 PM, said:

Hmmm that was HOURS after using the other client, meanwhile they must have received a different hello...
Anyways, if they sent me sources, then I'll dig into the code and try to figure out how to use it, I guess :lol:
View Post


so a real mldonkey emulation is coming? nice nice nice :+1:

good work :+1:
There are three kinds of people in this world: people who watch things happen ... people who complain about things that happen ... and people who make things happen...
0

#9 User is offline   Kry 

  • No Support
  • PipPipPipPipPipPipPip
  • Group: Member_D
  • Posts: 2018
  • Joined: 27-June 03

Posted 08 August 2006 - 05:58 PM

I fear at the idea that someone wants to emulate mldonkey. What for?
Retired aMule developer.
Minister of Strange Operative Systems and Sarcasm (S.O.S & S) in President Birk's New World Order
0

#10 User is offline   EvolutionCrazy 

  • Golden eMule
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 1226
  • Joined: 05-May 04

Posted 08 August 2006 - 06:07 PM

Kry, on Aug 8 2006, 06:58 PM, said:

I fear at the idea that someone wants to emulate mldonkey. What for?
View Post


lol

to show them "queue full" all the time? :devil:
There are three kinds of people in this world: people who watch things happen ... people who complain about things that happen ... and people who make things happen...
0

#11 User is offline   tHeWiZaRdOfDoS 

  • Man, what a bunch of jokers...
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 5630
  • Joined: 28-December 02

Posted 08 August 2006 - 06:29 PM

eMulations ensure equal chances between clients... i.e. have you ever tested a MLDonkey Client? It's unbelievable but you can actually download properly from those guys, though you upload almost only to them...
Appearing as "on of their kind" might help to balance the scales...
0

#12 User is offline   Kry 

  • No Support
  • PipPipPipPipPipPipPip
  • Group: Member_D
  • Posts: 2018
  • Joined: 27-June 03

Posted 08 August 2006 - 06:31 PM

Oh, cheating because they do it too? How considerate of you.
Retired aMule developer.
Minister of Strange Operative Systems and Sarcasm (S.O.S & S) in President Birk's New World Order
0

#13 User is offline   tHeWiZaRdOfDoS 

  • Man, what a bunch of jokers...
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 5630
  • Joined: 28-December 02

Posted 08 August 2006 - 06:47 PM

Hmmm you call it cheating...
I don't think you can call a camouflage that prevents unfair drawbacks a "cheat", though that's really a new point of view...
0

#14 User is offline   Famerlor 

  • also known as Spike2
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 685
  • Joined: 16-October 04

Posted 08 August 2006 - 09:19 PM

Quote

I fear at the idea that someone wants to emulate mldonkey. What for?


???? The feature "emulate mldonkey" isn't very new and it is well spread ???? There are even "emulate eDonkey", "emulate eDonkeyHybrid", "emulate Shareaza" and "emulate lphant"....!
Posted Image

You want a light mod with source-dropping, Powershare and WiZaRd's ClientAnalyzer ?
Try Spike2-Mod !

You rather want to stick to official eMule but don't want to miss all the new fixes and optimizations from the mods ?
Try OfFixed-Mod !


This post has been edited 1 time, the last time by God: Tomorrow, 12:74 PM
0

#15 User is offline   Kry 

  • No Support
  • PipPipPipPipPipPipPip
  • Group: Member_D
  • Posts: 2018
  • Joined: 27-June 03

Posted 09 August 2006 - 02:29 AM

View PostFamerlor, on Aug 8 2006, 11:19 PM, said:

Quote

I fear at the idea that someone wants to emulate mldonkey. What for?


???? The feature "emulate mldonkey" isn't very new and it is well spread ???? There are even "emulate eDonkey", "emulate eDonkeyHybrid", "emulate Shareaza" and "emulate lphant"....!



Well that does completely reply to my question... not.
Retired aMule developer.
Minister of Strange Operative Systems and Sarcasm (S.O.S & S) in President Birk's New World Order
0

#16 User is offline   fabtar 

  • Golden eMule
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 880
  • Joined: 14-March 04

Posted 09 August 2006 - 12:00 PM

View PosttHeWiZaRdOfDoS, on Aug 8 2006, 06:29 PM, said:

eMulations ensure equal chances between clients... i.e. have you ever tested a MLDonkey Client? It's unbelievable but you can actually download properly from those guys, though you upload almost only to them...
Appearing as "on of their kind" might help to balance the scales...


? Perhaps I have not understood well you sentence, But I suppose you are pointing that mldonkey is not fair giving' upload slots.
I can assure this is not true, curently mldonkey is not shaping his behaviour based on client's brand.
Mldonkey is simply queueless and has not credit system, but I have heard being Emule's MODs too using similar solutions.
It's a philosophical choice.

@Kry
mldonkey is not cheating, If someone try to emulate mldonkey to take this effect..then.. this is useless attempt ;) .
I'm concluding this by looking in to my ed2k stats (brand UL/DWNL).

This post has been edited by fabtar: 09 August 2006 - 12:02 PM

0

#17 User is offline   tHeWiZaRdOfDoS 

  • Man, what a bunch of jokers...
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 5630
  • Joined: 28-December 02

Posted 09 August 2006 - 12:08 PM

@fabtar: well, it was just a bit too strange, usually I get 1 download from MLDonkey per day, usually a few bits and then he's gone, while I can be glad if it wasn't corrupted...
Using MLDonkey I downloaded from more than 10 donkeys simultaneously...
Maybe they trade each other via that strange packet or they hammer each other with requests to gain access, anyhow, this looked really strange and unfair to me...
0

#18 User is offline   EvolutionCrazy 

  • Golden eMule
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 1226
  • Joined: 05-May 04

Posted 09 August 2006 - 12:30 PM

View Postfabtar, on Aug 9 2006, 02:00 PM, said:

? Perhaps I have not understood well you sentence, But I suppose you are pointing that mldonkey is not fair giving' upload slots.
I can assure this is not true, curently mldonkey is not shaping his behaviour based on client's brand.
Mldonkey is simply queueless and has not credit system, but I have heard being Emule's MODs too using similar solutions.
It's a philosophical choice.


so mldonkey just uses packets that all the standard ed2k clients cannot understand, but it's fair :)

btw adding to the emule mods the capability to understand those packets maybe can make same users happy :angelnot:
go tHeWiZaRdOfDoS go
show us you can make it :+1:

This post has been edited by EvolutionCrazy: 09 August 2006 - 12:31 PM

There are three kinds of people in this world: people who watch things happen ... people who complain about things that happen ... and people who make things happen...
0

#19 User is offline   netfinity 

  • Master of WARP
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 1658
  • Joined: 23-April 04

Posted 09 August 2006 - 02:44 PM

Well, to shed some lights about what clients are the worst leechers I can tell that my statistics say this!

I have balanced the ratios so that 1:1 is the median, to get the true ratios you have to divide with 18.8. The statistics is based on 2 884 570 upload sessions and 97 867 download sessions. The clients have been sorted with the worst leechers on top and the best clients at the bottom.
Shareaza				1 : 4.03
MLdonkey				1 : 3.13
eM Compatible		   1 : 2.49
aMule				1.01 : 1
eMule				1.05 : 1
eD Hybrid			1.33 : 1
eDonkey			 11.43 : 1	   (only 300 MB has been downloaded from this client, so this is not very accurate)


/netfinity
eMule v0.50a [NetF WARP v0.3a]
- Compiled for 32 and 64 bit Windows versions
- Optimized for fast (100Mbit/s) Internet connections
- Faster file completion via Dynamic Block Requests and dropping of stalling sources
- Faster searching via KAD with equal or reduced overhead
- Less GUI lockups through multi-threaded disk IO operations
- VIP "Payback" queue
- Fakealyzer (helps you chosing the right files)
- Quality Of Service to keep eMule from disturbing VoIP and other important applications (Vista/7/8 only!)
0

#20 User is offline   fabtar 

  • Golden eMule
  • PipPipPipPipPipPipPip
  • Group: Members
  • Posts: 880
  • Joined: 14-March 04

Posted 10 August 2006 - 10:58 AM

View Postnetfinity, on Aug 9 2006, 02:44 PM, said:

Well, to shed some lights about what clients are the worst leechers I can tell that my statistics say this!
...........
eMule 1.05 : 1
eD Hybrid 1.33 : 1
eDonkey 11.43 : 1 (only 300 MB has been downloaded from this client, so this is not very accurate)
[/code]

/netfinity


IInteresting indeed.
I have a consideration I like to discuss on. Cause the mldonkey are not so much around I argue if this thing could cause the statistics to be very variable. (more "misures" = better statistical confidntial interval ).
Personally my father's emule has not problems in downloading from my mdonkey, if you notice particular problemsI think developers 'll be very happy to look into this issue, these are my mldonkey statistics:

  Total downloads:		11230311472 ( 42.7 KB/s)
					unknown:				  0 (  0.0 %)
					eDonkey:		  235168777 (  2.1 %)
			   old mldonkey:				  0 (  0.0 %)
			   new mldonkey:				  0 (  0.0 %)
					Overnet:				  0 (  0.0 %)
					  eMule:		10142534859 ( 90.3 %)
					 server:				  0 (  0.0 %)
				trusted mld:		   23463936 (  0.2 %)
					cDonkey:				  0 (  0.0 %)
					  xMule:				  0 (  0.0 %)
				   shareaza:		   61399040 (  0.5 %)
					  aMule:		  490965562 (  4.4 %)
					 lPhant:			8970240 (  0.1 %)
					  ePlus:		  267809058 (  2.4 %)
					  Hydra:				  0 (  0.0 %)

			  Total uploads:		 2496404160 (  9.5 KB/s)
					unknown:				  0 (  0.0 %)
					eDonkey:		   16496640 (  0.7 %)
			   old mldonkey:				  0 (  0.0 %)
			   new mldonkey:				  0 (  0.0 %)
					Overnet:				  0 (  0.0 %)
					  eMule:		 2103191786 ( 84.2 %)
					 server:				  0 (  0.0 %)
				trusted mld:		   15308800 (  0.6 %)
					cDonkey:				  0 (  0.0 %)
					  xMule:				  0 (  0.0 %)
				   shareaza:		   49376846 (  2.0 %)
					  aMule:		   50595840 (  2.0 %)
					 lPhant:		   11571200 (  0.5 %)
					  ePlus:		  249863048 ( 10.0 %)
					  Hydra:				  0 (  0.0 %)


These are my father's emule stats:

Upload:
 eMule: 345.86 GB (90.8%)
  eD Hybrid: 3.21 GB (0.8%)
  eDonkey: 0 Byte (0.0%)
  aMule: 5.50 GB (1.4%)
  MLdonkey: 6.36 GB (1.7%)
  Shareaza: 132.74 MB (0.0%)
  eM Compat: 20.04 GB (5.3%)

Download:
eMule: 590.29 GB (91.0%)
  eD Hybrid: 8.49 GB (1.3%)
  eDonkey: 27.17 MB (0.0%)
  aMule: 10.52 GB (1.6%)
  MLdonkey: 1.78 GB (0.3%)
  Shareaza: 293.23 MB (0.0%)
  eM Compat: 37.62 GB (5.8%)


Hope this data helps you to trak i the problem is for real.
My last consideration is that cause the mldonkey has "no queue" , clients with faster re-ask could get little better chanche to get in,
there is no Per-brand manipulation ( I have understood this by speaking with developers time ago).

Cheers
0

  • Member Options

  • (3 Pages)
  • +
  • 1
  • 2
  • 3

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users