Sonar is a lightweight, effective and easy-to-use anti-bot plugin for Velocity, BungeeCord, and Bukkit.
Home Page: https://docs.jonesdev.xyz
License: GNU General Public License v3.0
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot]")
Sonar should support Spigot / Bukkit as well
There are single server “networks”.
E.g., vanilla style survival servers.
No response
/
No response
I've been checking the config and doesnt seem to be mentoning something about firewall block using iptables.
Would not be this more effective to block the IP once it founded that it's a bot? Specially for large massive attacks would be useful. This list could be reset every 24 hours or when the server restart just in case there are some false positives?
No response
This is only an issue on Velocity servers.
Sonar's injection replaces Geyser's (floodgate-velocity plugin) injection resulting in invalid IP addresses and player profiles.
Announcement: https://forums.papermc.io/threads/paper-velocity-1-20-2.920/
Provide support for Minecraft version 1.20.2 as Velocity and Paper for 1.20.2 have been released.
[13:18:11] [Velocity Async Event Executor - #0/ERROR] [com.velocitypowered.proxy.event.VelocityEventManager]: Couldn't pass PreLoginEvent to sonar
java.util.NoSuchElementException: minecraft-decoder
at io.netty.channel.DefaultChannelPipeline.getContextOrDie(DefaultChannelPipeline.java:1073) ~[velocity-3.2.0-SNAPSHOT-265.jar:3.2.0-SNAPSHOT (git-19abb909-b265)]
at io.netty.channel.DefaultChannelPipeline.addBefore(DefaultChannelPipeline.java:248) ~[velocity-3.2.0-SNAPSHOT-265.jar:3.2.0-SNAPSHOT (git-19abb909-b265)]
at io.netty.channel.DefaultChannelPipeline.addBefore(DefaultChannelPipeline.java:237) ~[velocity-3.2.0-SNAPSHOT-265.jar:3.2.0-SNAPSHOT (git-19abb909-b265)]
at xyz.jonesdev.sonar.common.fallback.traffic.TrafficChannelHooker.hook(TrafficChannelHooker.java:31) ~[?:?]
at xyz.jonesdev.sonar.velocity.fallback.FallbackListener.handle(FallbackListener.java:121) ~[?:?]
at xyz.jonesdev.sonar.velocity.fallback.Lmbda$12.execute(Unknown Source) ~[?:?]
at com.velocitypowered.proxy.event.UntargetedEventHandler$VoidHandler.lambda$buildHandler$0(UntargetedEventHandler.java:56) ~[velocity-3.2.0-SNAPSHOT-265.jar:3.2.0-SNAPSHOT (git-19abb909-b265)]
at com.velocitypowered.proxy.event.VelocityEventManager.fire(VelocityEventManager.java:597) ~[velocity-3.2.0-SNAPSHOT-265.jar:3.2.0-SNAPSHOT (git-19abb909-b265)]
at com.velocitypowered.proxy.event.VelocityEventManager.lambda$fire$5(VelocityEventManager.java:478) ~[velocity-3.2.0-SNAPSHOT-265.jar:3.2.0-SNAPSHOT (git-19abb909-b265)]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) ~[?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) ~[?:?]
at java.lang.Thread.run(Thread.java:1623) [?:?]
No response
No response
/
No response
Sonar is a good antibot but But he doesn't have any console filtering strategy I think you can add one now
Sonar is a good antibot but But he doesn't have any console filtering strategy I think you can add one now
I tested your AntiBot using mcstorm and it was I9 13900k without much relief. The CPU utilization was above 40%, and after filtering the console, it was only 10% -20%
You can do a filter similar to BotSentry
For example:
Sonar AntiBot>Join: 34/s Motd: 230/s Ping: 230/s CPS: 2000 Queue: 23 Mode: AntiBot
In the console
I have translated your Soanr Antibot into Chinese. Do you need it? I can provide to everyone :)
I think that adding MongoDB as a supported database too could be a good idea.
Not everyone uses MySQL as their primary db and some don't even have it installed (like me) to save verified players i think it would be good to add it
No response
Instead of loading the configuration, it is saved after the values are loaded.
This leads to a configuration file update every time the plugin is reloaded.
/
No response
No response
(Configuration resets after the error is thrown)
/sonar reload/
No response
The variables failed and successful show the total, absolute amount instead of the relative amount (during attack).
/
No response
VerifiedPlayerController#MAP is static and doesn't reset whenever a new database connection is instantiated
/
No response
The identities of genuine players are mostly reliable
So there is no need to do this verification
In addition, I hope there are options to adjust the verification after successful verification, such as sending it directly to the login server instead of disconnecting.
I'm looking forward to seeing these features added, it will be very helpful to complete the plugin
Some very useful feature improvements
No response
/
This will be fixed in the next week(s) - I wanted to get 2.0.14 out now.
1.7 clients cannot connect to the verification server
No response
This will be fixed in the upcoming updates of the 2.0 series.
Implement support for more than one database type:
/
Sonar 2.0.13 will only support Velocity 3.3.0 and above (and BungeeCord, of course).
[10:13:09 ERROR]: Exception occurred while injecting into netty pipeline
java.util.NoSuchElementException: protocolize2-decoder
at io.netty.channel.DefaultChannelPipeline.getContextOrDie(DefaultChannelPipeline.java:1073) ~[proxy.jar:git:Waterfall-Bootstrap:1.20-R0.2-SNAPSHOT:8a3326a:unknown]
at io.netty.channel.DefaultChannelPipeline.addAfter(DefaultChannelPipeline.java:302) ~[proxy.jar:git:Waterfall-Bootstrap:1.20-R0.2-SNAPSHOT:8a3326a:unknown]
at io.netty.channel.DefaultChannelPipeline.addAfter(DefaultChannelPipeline.java:290) ~[proxy.jar:git:Waterfall-Bootstrap:1.20-R0.2-SNAPSHOT:8a3326a:unknown]
at dev.simplix.protocolize.bungee.netty.NettyPipelineInjector.injectAfter(NettyPipelineInjector.java:36) ~[?:?]
at dev.simplix.protocolize.bungee.listener.PlayerListener.onPing(PlayerListener.java:34) ~[?:?]
at jdk.internal.reflect.GeneratedMethodAccessor27.invoke(Unknown Source) ~[?:?]
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~[?:?]
at java.lang.reflect.Method.invoke(Method.java:568) ~[?:?]
at net.md_5.bungee.event.EventHandlerMethod.invoke(EventHandlerMethod.java:19) ~[proxy.jar:git:Waterfall-Bootstrap:1.20-R0.2-SNAPSHOT:8a3326a:unknown]
at net.md_5.bungee.event.EventBus.post(EventBus.java:50) ~[proxy.jar:git:Waterfall-Bootstrap:1.20-R0.2-SNAPSHOT:8a3326a:unknown]
at net.md_5.bungee.api.plugin.PluginManager.callEvent(PluginManager.java:511) ~[proxy.jar:git:Waterfall-Bootstrap:1.20-R0.2-SNAPSHOT:8a3326a:unknown]
at net.md_5.bungee.connection.InitialHandler$3.done(InitialHandler.java:350) ~[proxy.jar:git:Waterfall-Bootstrap:1.20-R0.2-SNAPSHOT:8a3326a:unknown]
at net.md_5.bungee.connection.InitialHandler$3.done(InitialHandler.java:300) ~[proxy.jar:git:Waterfall-Bootstrap:1.20-R0.2-SNAPSHOT:8a3326a:unknown]
at net.md_5.bungee.connection.InitialHandler.handle(InitialHandler.java:410) ~[proxy.jar:git:Waterfall-Bootstrap:1.20-R0.2-SNAPSHOT:8a3326a:unknown]
at xyz.jonesdev.sonar.bungee.fallback.FallbackInitialHandler.lambda$handle$0(FallbackInitialHandler.java:133) ~[?:?]
at java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java:1804) ~[?:?]
at java.util.concurrent.CompletableFuture$AsyncRun.exec(CompletableFuture.java:1796) ~[?:?]
at java.util.concurrent.ForkJoinTask.doExec(ForkJoinTask.java:373) ~[?:?]
at java.util.concurrent.ForkJoinPool$WorkQueue.topLevelExec(ForkJoinPool.java:1182) ~[?:?]
at java.util.concurrent.ForkJoinPool.scan(ForkJoinPool.java:1655) ~[?:?]
at java.util.concurrent.ForkJoinPool.runWorker(ForkJoinPool.java:1622) ~[?:?]
at java.util.concurrent.ForkJoinWorkerThread.run(ForkJoinWorkerThread.java:165) ~[?:?]
[Sonar]: Generated dump: {"memory":{"total":"4.0 GB","max":"4.0 GB","free":"2.5 GB","used":"1.5 GB"},"runtime":{"virtualCores":12,"jvmArguments":["-Xmx4G","-Xms4G"],"vmName":"OpenJDK 64-Bit Server VM","vmVendor":"Debian","vmVersion":"17.0.7+7-Debian-1deb11u1"},"os":{"name":"Linux","arch":"amd64","version":"5.10.0-26-amd64"},"sonar":{"version":"2.0.15-512faa9-1015-main","platform":"BUNGEE","isOnMainBranch":true}}
No response
startup plugin error
im only add sonar to plugins and start server
not works (plugin not load)
[19:38:30] [Velocity Async Event Executor - #0/INFO] [sonar]: Successfully booted in 0.007s!
[19:38:30] [Velocity Async Event Executor - #0/INFO] [sonar]: Initializing shared components...
[19:38:30] [Velocity Async Event Executor - #0/ERROR] [com.velocitypowered.proxy.event.VelocityEventManager]: Couldn't pass ProxyInitializeEvent to sonar
java.lang.NoSuchMethodError: 'net.kyori.adventure.nbt.LongArrayBinaryTag net.kyori.adventure.nbt.LongArrayBinaryTag.longArrayBinaryTag(long[])'
at xyz.jonesdev.sonar.common.fallback.protocol.packets.EmptyChunkData.prepareNBT(EmptyChunkData.java:71) ~[?:?]
at xyz.jonesdev.sonar.common.fallback.protocol.packets.EmptyChunkData.(EmptyChunkData.java:65) ~[?:?]
at xyz.jonesdev.sonar.common.fallback.protocol.FallbackPreparer.(FallbackPreparer.java:77) ~[?:?]
at xyz.jonesdev.sonar.common.boot.SonarBootstrap.reload(SonarBootstrap.java:111) ~[?:?]
at xyz.jonesdev.sonar.common.boot.SonarBootstrap.initialize(SonarBootstrap.java:79) ~[?:?]
at xyz.jonesdev.sonar.velocity.SonarVelocityPlugin.handle(SonarVelocityPlugin.java:64) ~[?:?]
at xyz.jonesdev.sonar.velocity.Lmbda$21.execute(Unknown Source) ~[?:?]
at com.velocitypowered.proxy.event.UntargetedEventHandler$VoidHandler.lambda$buildHandler$0(UntargetedEventHandler.java:56) ~[server.jar:3.2.0-SNAPSHOT (git-bda1430d-b259)]
at com.velocitypowered.proxy.event.VelocityEventManager.fire(VelocityEventManager.java:597) ~[server.jar:3.2.0-SNAPSHOT (git-bda1430d-b259)]
at com.velocitypowered.proxy.event.VelocityEventManager.lambda$fire$5(VelocityEventManager.java:478) ~[server.jar:3.2.0-SNAPSHOT (git-bda1430d-b259)]
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) ~[?:?]
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) ~[?:?]
at java.lang.Thread.run(Thread.java:829) [?:?]
A single misconfiguration in the database section can lead to NullPointerException spam
java.lang.NullPointerException spam/
There shouldn't be any unhandled exceptions in the DB_UPDATE_SERVICE thread.
LibreLogin plugin not supported due to custom InitialHandler
[Sonar]: Generated dump: {"memory":{"total":"4.0 GB","max":"4.0 GB","free":"3.8 GB","used":"230.9 MB"},"runtime":{"virtualCores":12,"jvmArguments":["-Xmx4G","-Xms4G"],"vmName":"OpenJDK 64-Bit Server VM","vmVendor":"Debian","vmVersion":"17.0.7+7-Debian-1deb11u1"},"os":{"name":"Linux","arch":"amd64","version":"5.10.0-26-amd64"},"sonar":{"version":"2.0.15-bea1d29-1006-main","platform":"BUNGEE","isOnMainBranch":true}}
People have been reporting issues with Geyser (floodgate).
I've tested Geyser before, but only on Velocity and it seemed to work "just fine".
/
I need to collect more information on this issue. More information and related classes:
addPath doesn't exist in BungeeCord's PluginClassLoader
/
Probably going to use a loader in the future...
Support BungeeCord & forks like
Multi-version support is important, especially for an anti-bot plugin.
Currently, the update checker will warn you if you're using an unreleased version.
/
I will probably implement a heartbeat task (run the update checker every 1-6 hours) soon.
Implement an update notifier which tells the user to update whenever a new version of Sonar is released.
Many people forget to update... See for yourself
1.7/1.8 clients sometimes fail the verification for invalid y gravity
/
The gravity check will most likely be recoded before the release of 2.0.3.
2.0.3 will most likely be released in a couple of days or next weekend.
Enabling lockdown mode with the bypass permission gets you kicked on rejoin
[sonar]: Generated dump: {"memory":{"total":"4.0 GB","max":"4.0 GB","free":"3.8 GB","used":"247.9 MB"},"runtime":{"virtualCores":1,"jvmArguments":["-Xms4096M","-Xmx4096M","-XX:+UseG1GC","-XX:G1HeapRegionSize\u003d4M","-XX:+UnlockExperimentalVMOptions","-XX:+ParallelRefProcEnabled","-XX:+AlwaysPreTouch","-XX:MaxInlineLevel\u003d15"],"vmName":"OpenJDK 64-Bit Server VM","vmVendor":"Eclipse Adoptium","vmVersion":"17.0.8.1+1"},"os":{"name":"Linux","arch":"amd64","version":"5.15.0-87-generic"},"sonar":{"version":"2.0.6-38110cc-942-fix/db-error-handling","platform":"VELOCITY","isOnMainBranch":false}}
No response
If the server itself is exhausted by (Sonar or) another plugin some functionality will break.
This can be fixed by using a separate thread/executor for Sonar's internal tasks.
/
No response
Code is still executed even after assertState fails.
/
No response
Ping and connections are blocked by default with some users i'm getting lots of reports
I really don't know, they are unable to ping the server while Sonar is in the plugins folder.
[Sonar]: Generated dump: {"memory":{"total":"4.0 GB","max":"4.0 GB","free":"2.7 GB","used":"1.3 GB"},"runtime":{"virtualCores":12,"jvmArguments":["-Xmx4G","-Xms4G"],"vmName":"OpenJDK 64-Bit Server VM","vmVendor":"Debian","vmVersion":"17.0.7+7-Debian-1deb11u1"},"os":{"name":"Linux","arch":"amd64","version":"5.10.0-26-amd64"},"sonar":{"version":"2.0.15-512faa9-1015-main","platform":"BUNGEE","isOnMainBranch":true}}
No response
connection.closeWith(Disconnect.create(reason));it should be
connection.closeWith(getKickPacket(reason));from
/
/
Will be fixed on Jan 23rd (probably next PR).
you can replace the blocks that players fall on during checks to invisible(barriers)? visually it will look clean
aesthetics
When attempting to join a Velocity Proxy (b276, also tried b264) with Sonar installed, I get immediately kicked with the error in the title.
(Full error in case it matters)
Internal Exception: io.netty.handler.codec.DecoderException: io.netty.handler.codec.EncoderException: java.io.IOException: Root tag must be a named compound tag
The error occurs on:
I successfully joined using Vanilla 1.20.2
I believe that the error is a client side error, but it happening in vanilla, as well as only when using Sonar seems to indicate Sonar is causing it.
{"memory":{"total":"560.0 MB","max":"15.7 GB","free":"409.7 MB","used":"150.3 MB"},"runtime":{"virtualCores":16,"jvmArguments":[],"vmName":"OpenJDK 64-Bit Server VM","vmVendor":"Oracle Corporation","vmVersion":"21+35"},"os":{"name":"Linux","arch":"amd64","version":"6.1.57-1-lts"},"sonar":{"version":"2.0.4-1671cca-928-main","platform":"VELOCITY","isOnMainBranch":true}}
No response
Geyser Standalone does not work with Sonar, since Sonar can't resolve the client brand
[10:54:35 INFO] [sonar]: [fallback] AlexanderOF4256/xxx.xxx.xxx.xxx (764) has connected.
[10:54:35 INFO] [floodgate]: Floodgate player logged in as AlexanderOF4256 disconnected
[10:54:35 INFO] [sonar]: [fallback] /xxx.xxx.xxx.xxx (764) has failed the bot check for: did not resolve client brand
Install Geyser Standalone
No response
Some messages in /sonar are not deserialized properly:
/
No response
Send a Discord Webhook to a single or multiple URL(s) specified in the configuration.
https://discord.com/channels/923308209769426994/1166001486317236255
https://discord.com/channels/923308209769426994/1166001486317236255/1166396813415297024
Unnecessary - latest version
This can be fixed within velocity's configuration but that fix is deprecated. I will add a fix for this in Sonar directly.
Credits for translations
Russian (ru): @Nullmx
Georgian (ka): @Chumb3x
German (de): @micartey
Czech (cs): @slosa
Turkish (tr): @AyazJenkins
Like this, and maybe ingame titles that informs mods about an attack started.
It can inform the mods about the attack.
No response
Will be implemented once https://wiki.vg/Protocol updates their documentation
/
Velocity makes the command unknown if you don't have the permission to execute it.
/
No response
Let's be honest, YAML is not that great. I'd like to switch to TOML for the configurations.
This way it'll be much easier to implement multi-language support.
No response
Provide MiniMessage-like color formatting support for the configuration.
This would include HEX/RGB color codes, etc.
No response
Velocity changed something in their API... again.
/
No response
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.