Curse

Lord Shazneri · May 28, 2007, 07:16 PM // 19:16

Since update on Friday I have been receiving a hit on my Firewall from different NCSoft.com Servers. When I change districts or zones, the ip that is flooding me is the same name as the IP in the colored ping circle in the Guild Wars game. It randomly hits me and locks me up for a good 20 seconds. I am getting no assistance via NCSoft Support. I have made sure that my Verizon Fios Router is setup to forward port 6112 even though it is not required. I have Defraged my Hard Drive, Scanned with both Norton and Mcafee, ran Spyware and have updated my Firewall Black Ice Defender. I am about to uninstall and reinstall and see if that fixes the issue, but it seems that it is initiated by NCSoft servers as soon as I log on. (Since Port 80 could it be bad code for the /wiki and /help since they use HTTP)???

Am I the only one having this issue???

Here is the information from my Firewall.

[Protocol Signature] This signature detects 3-way handshake on port 80, followed by a non HTTP compliant request, followed by a non HTTP compliant response.

Time, Event, Intruder, Count
5/28/2007 10:31:29 AM, HTTP_Unknown_Protocol, 216-107-240-222.plaync.com, 1
5/28/2007 10:30:57 AM, HTTP_Unknown_Protocol, 216-107-240-200.plaync.com, 1
5/27/2007 9:44:53 PM, HTTP_Unknown_Protocol, 216-107-240-222.plaync.com, 1
5/27/2007 9:44:36 PM, HTTP_Unknown_Protocol, 216-107-240-199.plaync.com, 1
5/27/2007 4:23:45 PM, HTTP_Unknown_Protocol, 216-107-245-56.plaync.com, 3
5/27/2007 4:05:33 PM, HTTP_Unknown_Protocol, 216-107-240-167.plaync.com, 1
5/27/2007 4:03:57 PM, HTTP_Unknown_Protocol, 216-107-240-222.plaync.com, 1
5/27/2007 4:03:32 PM, HTTP_Unknown_Protocol, 216-107-240-231.plaync.com, 1
5/27/2007 1:24:21 PM, HTTP_Unknown_Protocol, 216-107-245-56.plaync.com, 1
5/27/2007 1:11:40 PM, HTTP_Unknown_Protocol, 216-107-241-98.plaync.com, 1
5/27/2007 1:11:16 PM, HTTP_Unknown_Protocol, 216-107-240-231.plaync.com, 1
5/26/2007 11:52:32 PM, HTTP_Unknown_Protocol, 216-107-241-36.plaync.com, 4
5/26/2007 11:50:03 PM, HTTP_Unknown_Protocol, 216-107-240-167.plaync.com, 1
5/26/2007 11:48:59 PM, HTTP_Unknown_Protocol, 216-107-245-56.plaync.com, 6
5/26/2007 11:42:43 PM, HTTP_Unknown_Protocol, 216-107-240-222.plaync.com, 2
5/26/2007 1:07:04 AM, HTTP_Unknown_Protocol, 216-107-245-56.plaync.com, 6
5/26/2007 12:59:30 AM, HTTP_Unknown_Protocol, 216-107-245-131.plaync.com, 1
5/26/2007 12:42:30 AM, HTTP_Unknown_Protocol, 216-107-241-36.plaync.com, 2
5/26/2007 12:23:30 AM, HTTP_Unknown_Protocol, 216-107-240-222.plaync.com, 4
5/25/2007 11:04:30 PM, HTTP_Unknown_Protocol, 216-107-241-103.plaync.com, 2
5/25/2007 11:03:56 PM, HTTP_Unknown_Protocol, 216-107-241-105.plaync.com, 1
5/25/2007 11:03:04 PM, HTTP_Unknown_Protocol, 216-107-241-30.plaync.com, 1
5/25/2007 10:44:52 PM, HTTP_Unknown_Protocol, 216-107-240-200.plaync.com, 1

Matsumi · May 28, 2007, 07:41 PM // 19:41

Interesting... Can you still play the game ok? I doubt it's anything serious, do you have applications rules set up in black ice to allow the guild wars game client access? I used to see an occasional 2-3 hits from NCSoft when I had zone alarm running. I'm sure it just has something to do with you only forwarding port 6112, all these servers are probably looking for port 80, but since that one isn't forwarded it's cycling through looking for it.

Try taking port forwarding off for 6112, and see if you get the same response.

Lord Shazneri · May 29, 2007, 01:18 AM // 01:18

No I cannot play the game, It lags me out so badly and it is random. I can't even play PVE with Hench/Hero's because it is lagging out. I have been playing game for over 20 months same system so nothing has changed on my end. This started with update on Friday 25th 2007. Never had a ping on my Firewall.

Matsumi · May 29, 2007, 01:58 AM // 01:58

Well, that's pretty strange, but I guess I haven't been playing lately. I just logged on a little bit ago, and you're right, the lag is pretty bad now. I'm gonna run some more tests.

edited: Nope, it's nothing. I opened my ports up, logged on, listened in on port 80 and got nothing. Checked to see if maybe it was PvE only, and still nothing. I think black ice is just freaking out. Plus, I don't think arenanet's little latency indicator is working, because at first I thought I was seriously lagging out, but then I started moving around and even though it reported a ping of 1800-3500ms I was doing just fine. Went through a few zones, and still nothing coming in on port 80.

but anyways, I guess if you want to leave port 6112 exposed, that's up to you.

osk · May 31, 2007, 12:47 PM // 12:47

I 've been having +2k-13k ping since the big update last Thursday/Friday.
i had turn off firewall, enable port forwarding... with netstat, it seems doesn't listen to/from plaync.com server...
im in australia, using dlink G604T modem/router. wired.
any1 else has similar prob? few of my friends also experiencing high ping after last Friday's update >_>

Matsumi · May 31, 2007, 03:07 PM // 15:07

You really only need to setup port forwarding if you have other computers connecting up to your computer, such as setting up a gaming server. The Guild Wars game client doesn't offer any services to outside connecting clients, so I would turn port forwarding off. Leaving those ports exposed will most likely cause unnecessary lag. Arenanet doesn't connect up to you, you connect to arenanet using the game client.

I don't think their performance indicator is working properly at the moment. Could try using the -perf switch and see what the results are.

edited: nope, from what it looks like, the FPS and other read outs are somewhat accurate. I guess the -perf switch doesn't display latency results.