NoCheatPlus
Detect and fight the exploitation of various flaws/bugs in Minecraft!
Introduction
NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.
NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.
Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).
NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.
Recommended
The following plugins might be useful to have a look at.
ProtocolLib
Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.
CompatNoCheatPlus (cncp)
Make plugins like mcMMO or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp. Phasing out: Citizens 2 should work with NCP out of the box, MagicSpells are working on compatibility too - rest will be integrated into NCP.
Orebfuscator
Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)
Downloads and History of Changes
- Download officially approved versions on the Files page at BukkitDev.
- Development builds have been moved over to the Jenkins at md-5.net.
- Do not download from any other source, do not use jars other people send you.
- Change lists: Wiki (digest) | Jenkins (by build number) | GitHub (all commits).
- Source code
Plugin statistics are no longer reported to mcstats.org.
Support
Documentation Resources
- Consider first: Frequently asked Questions and Known Issues.
- Wiki (Configuration, Permissions, Commands)
- Developers might have a look at the page describing the API of NoCheatPlus.
Contact us
- Quick questions can be asked on this page,
or on IRC (Server: irc.spi.gt | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC) - For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
- To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.
Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).
Comments
-
_ForgeUser9668734 Owner
-
_ForgeUser15078623 Ticket Manager
-
_ForgeUser16101223 Contributor
-
_ForgeUser7091862 Former Author
-
_ForgeUser7459264 Former Author
-
Forge_User_61842651 Author
-
MyPicturesCP Artist
-
View User Profile
-
Send Message
Posted May 21, 2012_> we need update players are bypassing some of the already implimted things
-
View User Profile
-
Send Message
Posted May 21, 2012@Jozeth
I think hes busy on something very interesting... nocheat website... wow... give it some time ;)
-
View User Profile
-
Send Message
Posted May 21, 2012I don't know if this exists but is it possible if you could add MySQL support, for the logs?
-
View User Profile
-
Send Message
Posted May 21, 2012@Dinastya
Well i think you need much higher Count values to get reliable results.
The next thing to judge is how often the event occurs, the timings are given in nanoseconds, so a value around 35000 in average can be a "high" value but also can be a reasonably low value. For a PlayerMove event a value of 35000 nanoseconds per event would not be small, because it happens very often, especially for big servers this will test the server: 100 players x 35000 nanoseconds per tick = 3.5 milliseconds per tick. A server tick has 50 milliseconds, so this would not be a game-stopper but it is a substantial amount of time, even worse the average time is more like 80000 in your timings list, so you end up around 8 ms for a 100 slot server with all people moving.
Still one should note that for a player move event you should have a count number of several hundred thousands to have a really good estimate.
I have no idea about the memory issue, it could be related to object generation and the garbage colleciton not working well, but i need not be right here. We have a similar memory issue, but can not test reliably where it comes from (too seldom).
-
View User Profile
-
Send Message
Posted May 21, 2012@asofold
Sorry forgot the link but here it is:
http://pastebin.com/C48kh1vQ
seems EntityDamageEvent have biggest timing.
-
View User Profile
-
Send Message
Posted May 21, 2012@Dinastya There are some performance issues, but:
The timings are for which events? And what is the event count, and thus the average per event)?
-
View User Profile
-
Send Message
Posted May 21, 2012@NeatMonster
Haha I see new fancy NoCheat+ logo. Very nice and cute :D
-
View User Profile
-
Send Message
Posted May 21, 2012Anyone else having huge performance drop with last versions?
I'm running 3.6.1 and latest RB from CB.
I have runned timings and the timings of nocheat are really really big.
This is just 20 seconds after starting up:
Total time 1016033162 (1s)
And then +/- 1 minute later it's already this:
Total time 3894795794 (3s)
My server specs are:
Intel Xeon E3-1270 3,4GHZ, 16gb Ram, 1GB Network, 64gb Crucial M4 hdd
It can easy run 100+ players but with nocheat on TPS is dropping bellow 20 and ram is
slowly dropping down and after a day it even get around 10% left.
I have tried AntiCheat and checked it and the timings where all 0s and the tps stay at 20
even with around 100 on.
And the ram stays around 80<>90% free even after 2 days online time.
So there is really something leaking hard here for me
and giving me a hugeee performance drop.
Hope you can look at at neat
else i have to leave NoCheat i guess after using it more then a year
btw sorry for all lines but chrome is messing with me :p
-
View User Profile
-
Send Message
Posted May 20, 2012How can I disable connection throlling completely (Config.yml)?
-
View User Profile
-
Send Message
Posted May 20, 2012@BioRage
I don't have time to take an exact look at your problem, but it sounds like you could just allow fastsneaking (subsection runfly, allowfastsneaking: true). If that doesn't help you could increase the initial VL of the check that the player fails (most likely runfly). Then your config should look like that:
actions: vl>100 log:moveshort:0:5:if cancel vl>400 log:movelong:0:5 cancel
You might have to experiment with the value 100 (as you don't want to allow everyone to use speedhack), just take a look at the violation level that the users sneaking usually reach.
-
View User Profile
-
Send Message
Posted May 20, 2012I started (since yesterday) a rewrite of the code to improve the plugin's performances. A development build will be available by the end of the week (on our new Jenkins).
By the way, have you seen our mockup of the web interface (really far from being finished)? And our new logo?
-
View User Profile
-
Send Message
Posted May 20, 2012Hmm anticheat or nocheat+?
-
View User Profile
-
Send Message
Posted May 20, 2012Hey everyone!
First off, this is a very good plugin which I would recommend for every server. Anyway, there are currently two problems I have.
The first thing is that everybody is able to use Rei's Minimap, independent of the permission. The only difference between having the node or not is the chat message "[Rei's Minimap] enabled: [...]", which does not show up when not being allowed to use it. But the map loads anyway. All other mod permissions seem to work. A complete reinstall of the Minimap with the latest version didn't help.
Second point - the waterwalk check is throwing even more wrong warnings since the last update. Basically, everyone who keeps pressing space (jump) while swimming reaches a VL of over 100.
Have fun,
Addi
-
View User Profile
-
Send Message
Posted May 20, 2012Hello, I have an issue someone addressed on my server, please see the video at the bottom of the post:
http://www.mytatrea.net/threads/the-knave.257/
It occurs with the Heroes skills "Sneak"
And I've had a mod test it while opped, they can run fine, however when de-opped they glitch as in the video.
-
View User Profile
-
Send Message
Posted May 20, 2012@Hawk1117
Get NoCheat+.. NoCheat isn't detecting very much anymore :)
-
View User Profile
-
Send Message
Posted May 20, 2012So should we keep NoCheat? or should we just uninstall that and get NoCheat+?
-
View User Profile
-
Send Message
Posted May 20, 2012Lawl nice logo XD
-
View User Profile
-
Send Message
Posted May 20, 2012Loving the new logo :)
-
View User Profile
-
Send Message
Posted May 20, 2012DOUGHNUTS !!!
-
View User Profile
-
Send Message
Posted May 20, 2012@KevinEssence
Open the config and remove cmd:kick form any check you don't want that someone is kick/banned if they fail it.
Example: