Just wondered has anyone else got any good patches for this.

Personally its annoying on a game called Soldier of Fortune II

Since people are going threw the server list and just crashing whatever they see.

The bug is documented here.


There are quite a few bugs for sof2, 1 being a ingame command which would only be fixable by either making your own game mod, or hexing the sof2ded file and manually fixing it.

The given sof2ded on that site listed above, does not actualy fix it. Although I made quick fix for those of you out there who are getting annoyed by it.

This is the snort rules that do stop it on sof2.

log udp ! !20000:30000 -> 20000:30000 (content: "|FF FF FF FF 63 6F 6E 6E 65 63 74 20 01|"; msg: "sof2crash";logto: "alerts";)
pass udp ! !20000:30000 -> 20000:30000 (content: "|FF FF FF FF 63 6F 6E 6E 65 63 74 20 01|"; msg: "sof2crash";)
To ignore the packet with pass, you will need to start snort with -o

I use this on freeBSD, you cant use snort on freeBSD for the pass part, you can log it, but if you want to reject it aswell as log, you will have to install snort_inline which can be found on http://snort-inline.sourceforge.net compile it with ipfw

tar -zxvf snort_inline-2.3.0-RC1.tar.gz
cd snort_inline-2.3.0-RC1
./configure --enable-inline --enable-ipfw
make install
Then just add it to one of the rule files.

This will work for Soldier of fortune II servers. Not tested with any other games, but i'm sure I can install an test them some time.

Hope this helps, anyone else got any ideas?