• sing a song of duplicates

    From mark lewis@1:3634/12.73 to digital man on Sun Jan 21 08:28:14 2018

    a while back, we were havig a slew of duplicates across the network... it was related to another all-in-one BBS package stripping (trailing) spaces off of certain control lines (eg: MSGID) instead of leaving them as originally produced and treating them as strings... i'm leaving this little present for you to take a look at, too ;)

    first, the original... please note the MSGIDcrc value and bytes 0x0050-0x0058 in the header...

    ----->8 snip 8<-----
    Msgbase : /home/myuser/ftn/msgBase/fido/backbone/1/10th_amd
    Signature : JAM
    Revision : 1
    ReservedWord : 0
    SubfieldLen : 452
    TimesRead : 1
    MSGIDcrc : 4BFD43BFh
    REPLYcrc : FFFFFFFFh
    ReplyTo : 0
    Reply1st : 0
    ReplyNext : 0
    DateWritten : 2018-01-14 18:37:00 (5A5BA34Ch)
    DateReceived : 1970-01-01 00:00:00 (00000000h)
    DateProcessed : 2018-01-15 01:22:28 (5A5C0254h)
    MessageNumber : 139
    Attribute : 01000000h (00000001000000000000000000000000b)
    Attribute2 : 00000000h (00000000000000000000000000000000b)
    Offset : 120825
    TxtLen : 638
    PasswordCRC : FFFFFFFFh
    Cost : 0

    0000 02 00 00 00 0B 00 00 00 4D 69 6B 65 20 50 6F 77 ........Mike Pow 0010 65 6C 6C 03 00 00 00 09 00 00 00 44 61 76 65 20 ell........Dave
    0020 44 72 75 6D 06 00 00 00 0F 00 00 00 52 65 3A 20 Drum........Re:
    0030 4F 75 74 70 6F 73 74 20 42 42 53 04 00 00 00 16 Outpost BBS..... 0040 00 00 00 31 3A 32 33 32 30 2F 31 30 37 2E 30 20 ...1:2320/107.0
    0050 35 33 38 61 37 38 34 61 20 D1 07 00 00 3C 00 00 538a784a ╤...<.. 0060 00 31 35 2F 30 20 31 39 2F 33 36 20 33 34 2F 39 .15/0 19/36 34/9 0070 39 39 20 39 30 2F 31 20 31 31 36 2F 31 38 20 31 99 90/1 116/18 1 0080 31 36 20 31 32 30 2F 33 33 31 20 31 32 33 2F 32 16 120/331 123/2 0090 35 20 31 32 30 20 31 34 30 20 31 34 31 D1 07 00 5 120 140 141╤.. 00A0 00 3E 00 00 00 31 33 35 2F 33 30 30 20 31 35 33 .>...135/300 153 ----->8 snip 8<-----


    now the duplicate... please note the MSGIDcrc value and bytes 0x005c-0x0064 in the header...

    ----->8 snip 8<-----
    Msgbase : /home/myuser/ftn/msgBase/fido/backbone/1/10th_amd
    Signature : JAM
    Revision : 1
    ReservedWord : 0
    SubfieldLen : 607
    TimesRead : 1
    MSGIDcrc : F997F805h
    REPLYcrc : FFFFFFFFh
    ReplyTo : 0
    Reply1st : 141
    ReplyNext : 0
    DateWritten : 2018-01-14 18:37:00 (5A5BA34Ch)
    DateReceived : 1970-01-01 00:00:00 (00000000h)
    DateProcessed : 2018-01-20 17:04:10 (5A63768Ah)
    MessageNumber : 148
    Attribute : 01000000h (00000001000000000000000000000000b)
    Attribute2 : 00000000h (00000000000000000000000000000000b)
    Offset : 127873
    TxtLen : 695
    PasswordCRC : FFFFFFFFh
    Cost : 0

    0000 02 00 00 00 0B 00 00 00 4D 69 6B 65 20 50 6F 77 ........Mike Pow 0010 65 6C 6C 03 00 00 00 09 00 00 00 44 61 76 65 20 ell........Dave
    0020 44 72 75 6D 06 00 00 00 0F 00 00 00 52 65 3A 20 Drum........Re:
    0030 4F 75 74 70 6F 73 74 20 42 42 53 D4 07 00 00 04 Outpost BBS╘.... 0040 00 00 00 30 30 30 30 04 00 00 00 15 00 00 00 31 ...0000........1 0050 3A 32 33 32 30 2F 31 30 37 2E 30 20 35 33 38 61 :2320/107.0 538a 0060 37 38 34 61 D0 07 00 00 34 00 00 00 54 49 44 3A 784a╨...4...TID: 0070 20 53 42 42 53 65 63 68 6F 20 33 2E 30 33 2D 4C SBBSecho 3.03-L 0080 69 6E 75 78 20 72 33 2E 36 36 20 4A 61 6E 20 31 inux r3.66 Jan 1 0090 39 20 32 30 31 38 20 47 43 43 20 36 2E 33 2E 30 9 2018 GCC 6.3.0 00A0 D1 07 00 00 41 00 00 00 30 2F 33 20 31 35 2F 30 ╤...A...0/3 15/0 ----->8 snip 8<-----

    yes, the GTPower stuff has a bug where it tacks a trailing space on the MSGID... while that's not really proper, systems stripping off that space cause
    dupes on other systems that take the MSGID line in toto and calculate their checksum on it instead of breaking it apart into separate fields...

    )\/(ark

    Always Mount a Scratch Monkey
    Do you manage your own servers? If you are not running an IDS/IPS yer doin' it wrong...
    ... We dug her up and gave her a screen test.
    ---
    * Origin: (1:3634/12.73)