[Red5] URGENT - Hacker attack with random packets

Branko Pecnik branko_pecnik at t-2.net
Wed Jun 13 18:42:11 EDT 2007 

This is not the solution. He can use TOR :-(
 
  _____  

Od: Red5-bounces at osflash.org [mailto:Red5-bounces at osflash.org] Namesto
Dominick Accattato
Poslano: 14. junij 2007 0:16
Za: Red5 at osflash.org
Zadeva: Re: [Red5] URGENT - Hacker attack with random packets
 
your gonna need a hardware solution that deny's his ip address
On 6/13/07, Branko Pecnik <branko_pecnik at t-2.net > wrote:
Hi to all
 
I have a video chat www.planka.net <http://www.planka.net/>  . It's working
just fine. But now I have a problem. There was a hacker, which can block
Red5 server with packets which contain random data. He told me, that he
established a lot of sockets connections to the Red5 server (5000) and with
some connections he posts packets with random content. He can crash my red5
server immediately. 
Here is the end of console after attack.   :-(
 
     [java] [ERROR] 166904909 SocketAcceptorIoProcessor-0.1:(
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decode ) Error in packet
at 140
     [java] java.lang.NullPointerException
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodeHeader(RTMPProtocol
Decoder.java:421)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodePacket(RTMPProtocol
Decoder.java:315)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decode(RTMPProtocolDecode
r.java:178)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodeBuffer(RTMPProtocol
Decoder.java:120)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPMinaProtocolDecoder.decode(RTMPMinaProtoc
olDecoder.java:60)
     [java]     at
org.apache.mina.filter.codec.ProtocolCodecFilter.messageReceived(ProtocolCod
ecFilter.java:172)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived
(AbstractIoFilterChain.java:362)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.access$1100(AbstractIoF
ilterChain.java:54)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain$EntryImpl$1.messageRece
ived(AbstractIoFilterChain.java:800)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain$HeadFilter.messageRecei
ved(AbstractIoFilterChain.java:617)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived
(AbstractIoFilterChain.java:362)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.fireMessageReceived(Abs
tractIoFilterChain.java:353)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.read(SocketIoProcesso
r.java:246)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.process
(SocketIoProcessor.java:206)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.access$500(SocketIoPr
ocessor.java:44)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor$Worker.run(SocketIoPr
ocessor.java:506)
     [java]     at
org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:
43)
     [java]     at
java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.ja
va:885)
     [java]     at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:9
07)
     [java]     at java.lang.Thread.run(Thread.java:619)
     [java] [ERROR] 166904910 SocketAcceptorIoProcessor-0.1:(
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodeBuffer ) Error
decoding buffer
     [java] org.red5.server.net.protocol.ProtocolException: Error during
decoding
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decode(RTMPProtocolDecode
r.java:189)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodeBuffer(RTMPProtocol
Decoder.java:120)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPMinaProtocolDecoder.decode(RTMPMinaProtoc
olDecoder.java:60)
     [java]     at
org.apache.mina.filter.codec.ProtocolCodecFilter.messageReceived(ProtocolCod
ecFilter.java:172)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived
(AbstractIoFilterChain.java:362)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.access$1100(AbstractIoF
ilterChain.java:54)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain$EntryImpl$1.messageRece
ived(AbstractIoFilterChain.java:800)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain$HeadFilter.messageRecei
ved(AbstractIoFilterChain.java:617)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived
(AbstractIoFilterChain.java:362)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.fireMessageReceived(Abs
tractIoFilterChain.java:353)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.read(SocketIoProcesso
r.java:246)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.process(SocketIoProce
ssor.java:206)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.access$500(SocketIoPr
ocessor.java:44)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor$Worker.run(SocketIoPr
ocessor.java:506)
     [java]     at
org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:
43)
     [java]     at
java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.ja
va:885)
     [java]     at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:9
07)
     [java]     at java.lang.Thread.run(Thread.java:619)
     [java] [ERROR] 166905938 SocketAcceptorIoProcessor-0.1:(
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decode ) Error in packet
at 0
     [java] java.lang.NullPointerException
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodeHeader(RTMPProtocol
Decoder.java:421)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodePacket(RTMPProtocol
Decoder.java:315)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decode(RTMPProtocolDecode
r.java:178)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodeBuffer(RTMPProtocol
Decoder.java:120)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPMinaProtocolDecoder.decode(RTMPMinaProtoc
olDecoder.java:60)
     [java]     at
org.apache.mina.filter.codec.ProtocolCodecFilter.messageReceived(ProtocolCod
ecFilter.java:172)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived
(AbstractIoFilterChain.java:362)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.access$1100(AbstractIoF
ilterChain.java:54)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain$EntryImpl$1.messageRece
ived(AbstractIoFilterChain.java:800)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain$HeadFilter.messageRecei
ved(AbstractIoFilterChain.java:617)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived
(AbstractIoFilterChain.java:362)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.fireMessageReceived(Abs
tractIoFilterChain.java:353)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.read
(SocketIoProcessor.java:246)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.process(SocketIoProce
ssor.java:206)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.access$500(SocketIoPr
ocessor.java:44)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor$Worker.run(SocketIoPr
ocessor.java:506)
     [java]     at
org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:
43)
     [java]     at
java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.ja
va:885)
     [java]     at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:9
07)
     [java]     at java.lang.Thread.run(Thread.java:619)
     [java] [ERROR] 166906112 SocketAcceptorIoProcessor-0.1:(
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodeBuffer ) Error
decoding buffer
     [java] org.red5.server.net.protocol.ProtocolException: Error during
decoding
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decode(RTMPProtocolDecode
r.java:189)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodeBuffer(RTMPProtocol
Decoder.java:120)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPMinaProtocolDecoder.decode(RTMPMinaProtoc
olDecoder.java:60)
     [java]     at
org.apache.mina.filter.codec.ProtocolCodecFilter.messageReceived(ProtocolCod
ecFilter.java:172)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived
(AbstractIoFilterChain.java:362)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.access$1100(AbstractIoF
ilterChain.java:54)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain$EntryImpl$1.messageRece
ived(AbstractIoFilterChain.java:800)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain$HeadFilter.messageRecei
ved(AbstractIoFilterChain.java:617)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived
(AbstractIoFilterChain.java:362)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.fireMessageReceived(Abs
tractIoFilterChain.java:353)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.read(SocketIoProcesso
r.java:246)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.process(SocketIoProce
ssor.java:206)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.access$500(SocketIoPr
ocessor.java:44)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor$Worker.run(SocketIoPr
ocessor.java:506)
     [java]     at
org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:
43)
     [java]     at
java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.ja
va:885)
     [java]     at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:9
07)
     [java]     at java.lang.Thread.run(Thread.java:619)
     [java] [ERROR] 166906409 SocketAcceptorIoProcessor-0.1:(
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decode ) Error in packet
at 0
     [java] java.lang.NullPointerException
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodeHeader(RTMPProtocol
Decoder.java:427)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodePacket(RTMPProtocol
Decoder.java:315)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decode(RTMPProtocolDecode
r.java:178)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodeBuffer(RTMPProtocol
Decoder.java:120)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPMinaProtocolDecoder.decode(RTMPMinaProtoc
olDecoder.java:60)
     [java]     at
org.apache.mina.filter.codec.ProtocolCodecFilter.messageReceived(ProtocolCod
ecFilter.java:172)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived
(AbstractIoFilterChain.java:362)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.access$1100(AbstractIoF
ilterChain.java:54)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain$EntryImpl$1.messageRece
ived(AbstractIoFilterChain.java:800)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain$HeadFilter.messageRecei
ved(AbstractIoFilterChain.java:617)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived
(AbstractIoFilterChain.java:362)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.fireMessageReceived(Abs
tractIoFilterChain.java:353)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.read(SocketIoProcesso
r.java:246)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.process(SocketIoProce
ssor.java:206)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.access$500(SocketIoPr
ocessor.java:44)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor$Worker.run(SocketIoPr
ocessor.java:506)
     [java]     at
org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:
43)
     [java]     at
java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.ja
va:885)
     [java]     at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:9
07)
     [java]     at java.lang.Thread.run(Thread.java:619)
     [java] [ERROR] 166906409 SocketAcceptorIoProcessor-0.1:(
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodeBuffer ) Error
decoding buffer
     [java] org.red5.server.net.protocol.ProtocolException: Error during
decoding
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decode(RTMPProtocolDecode
r.java:189)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPProtocolDecoder.decodeBuffer(RTMPProtocol
Decoder.java:120)
     [java]     at
org.red5.server.net.rtmp.codec.RTMPMinaProtocolDecoder.decode(RTMPMinaProtoc
olDecoder.java:60)
     [java]     at
org.apache.mina.filter.codec.ProtocolCodecFilter.messageReceived(ProtocolCod
ecFilter.java:172)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived
(AbstractIoFilterChain.java:362)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.access$1100(AbstractIoF
ilterChain.java:54)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain$EntryImpl$1.messageRece
ived(AbstractIoFilterChain.java:800)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain$HeadFilter.messageRecei
ved(AbstractIoFilterChain.java:617)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.callNextMessageReceived
(AbstractIoFilterChain.java:362)
     [java]     at
org.apache.mina.common.support.AbstractIoFilterChain.fireMessageReceived(Abs
tractIoFilterChain.java:353)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.read(SocketIoProcesso
r.java:246)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.process(SocketIoProce
ssor.java:206)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor.access$500(SocketIoPr
ocessor.java:44)
     [java]     at
org.apache.mina.transport.socket.nio.SocketIoProcessor$Worker.run(SocketIoPr
ocessor.java:506)
     [java]     at
org.apache.mina.util.NamePreservingRunnable.run(NamePreservingRunnable.java:
43)
     [java]     at
java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.ja
va:885)
     [java]     at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:9
07)
     [java]     at java.lang.Thread.run(Thread.java:619)
 
 

_______________________________________________
Red5 mailing list
Red5 at osflash.org
http://osflash.org/mailman/listinfo/red5_osflash.org



-- 
Dominick Accattato, CTO
Infrared5 Inc.
www.newviewnetworks.com  <http://www.newviewnetworks.com> 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://osflash.org/pipermail/red5_osflash.org/attachments/20070614/2f89983f/attachment-0001.htm

More information about the Red5 mailing list