How to deal with a schism in the party, relating to criminal activity?

Myself and 5 friends (one of whom is DM) are playing Warhammer. Increasingly, 3 members want to engage in criminal activities like burglary and robbery, while myself and another party member are scrupulous, honest types, who refuse to turn into common criminals (this is from our character sheet backgrounds, not just our personal opinions).

What’s a good way to reconcile this difference? The way it’s going at the moment, it won’t be long before the 3 wannabe criminals just start leaving me and the other "good" guy alone to go off and burgle some noble’s mansion.

We are all good friends in real life, and are "mature" (late 40s/early 50s), and we can all take a fair bit of ribbing, abuse, joking etc – I don’t think anyone is close to storming out. The problem really is that we spend a lot of each session arguing about what to do.

Using downtime activity to research spells

I run a D&D 5E campaign. I have a player who is playing a wizard. This player would like to use his downtime to learn new spells. Specifically, he doesn’t want to create any new spells of his own, he wants to use his downtime to write additional spells (from the PHB) into his spell-book. The PHB and DMG do not provide rules for how to handle this.

This player is both a self-professed rules-lawyer and self-professed optimizer; he is also the only one of each in the entire group. Because of this, it is very important to have a set of rules that are clear and unambiguous, but don’t set his wizard up to being over-powered compared to his party-mates.

How do I allow my player’s character to spend his downtime learning new spells without allowing the character to become overpowered?

A good answer will provide a set of rules or guidelines that allow my wizard player to spend his downtime adding new spells to his spell book. The rules must:

  • be clear and unambiguous
  • balance time and cost in a way that keeps this downtime activity in line with other downtime activities
    • This means that the rules should not be so constraining that spending downtime in this way feels useless, but doesn’t allow the wizard to become over-powered by having access to too many spells.
  • have been used and put in-practice (in a 5E game), and the accompanying experience using the rules should be included
    • I’m not looking for, “I think you could do it this way”; I need, “We did it this way, and here’s how it worked for us”.

The very best answer will do the above while making it clear how this will not unbalance the party (Cleric, Ranger, Rogue, Monk, Warlock).

What is considered strenuous activity in regards to a long rest?

The description for a long rest states:

A long rest is a period of extended downtime, at least 8 hours long, during which a character sleeps for at least 6 hours and performs no more than 2 hours of light activity, such as reading, talking, eating, or standing watch. If the rest is interrupted by a period of strenuous activity – at least 1 hour of walking, fighting, casting spells, or similar adventuring activity – the characters must begin the rest again to gain any benefit from it.

Which of the following interpretations is correct in regards to what is considered strenuous activity?


  • at least 1 hour of walking
  • at least 1 hour of fighting
  • at least 1 hour of casting spells


  • at least 1 hour of walking
  • fighting
  • casting a spell

Personally, I think option b) is correct, because option a) allows for silly shenanigans. For example, assuming a combat encounter lasts 10 rounds – that is, 1 minute in game time – then it would be possible to have 59 encounters and still benefit from the long rest.

How do I deal with a player wanting to do an activity that takes weeks when the party doesn’t want to?

I’m currently running a campaign with 5 players at level 3, one of which is a Wizard Dragonborn who’s entire character is devoted to becoming a real dragon by the end of the campaign through some kind of magic or holy gift or something.

As part of this, the player has decided that he absolutely MUST have a Pseudodragon and has decided that next session, as the players have finally returned to town after leaving at level 1, he is going to spend a few days resting before setting off alone to explore the forests of the nearby area to find a Pseudodragon.

I explained to him that on foot, sweeping the whole forest systematically (in a frontier part of the world where the majority of the land is forested) will take literally weeks for his character to do, as he has no spells that can assist him except find familiar (which he could use to sweep the air with a hawk).

When I explained that, this would involve him as a player turning up to the session (online) and contributing essentially nothing for extended periods of time over the course of several sessions (my players have decided they will be leaving town soon and our sessions have very little time between them in the world) he decided that he was fine with that.

I really don’t think that he will be and I’d hate to lose one of my players because in two session’s time he decides that he is really bored and doesn’t want to keep playing but on the other hand I really don’t feel like it’s fair for the other players just to give him what he wants immediately because I’m scared to lose a player.

I know he has said that he is fine with it and I’ve explained the downsides to doing what he is planning to do.

As the DM, is there a better way that I can damage control this? I don’t know if I’m making the right choices by not giving the player what they want but I just cannot see a reasonable way that a player could quickly find a rare animal in hundreds of square miles of forest.

Spike in activity with port 3379 (SOCORFS)

My personal IPs on AWS are being scanned for 3379. Apparently, this is SOCORFS, registered to one Hugo Charbonneau. This port is getting scanned a lot more often in recent months:

Does anyone know what this is? It’s possible someone found a vulnerability in this protocol and we’re not yet publicly aware of it.

UPDATE: I reached out to Hugo, will update if I have information from him.

UPDATE 2: Hugo used to work at Socomar International (over 20 years ago), which was a company who built technology for ship tracking. SOCORFS may be “Soco RFS”. Socomar was dissolved in 2006 though. All content I could find online was that it’s unlikely that this company’s products are widely used today. So, there’s a good chance port 3379 is actually being used for something else, nothing related to SOCORFS.

(kali linux) arp poisoning kills all network activity

I have tried to perform a man in the middle attack on my own smartphone in my home network. Whether i use Ettercap, arpspoof with dsniff. none of them work. i am using kali linux as a virtual machine guest in my windows 7 host. note that i have bridged network on, ”’ip_forward=1”’, and network interface eth0 since i have a bridged network. also when I run the chk_poison plugin in ettercap it says “no poisoning at all :(“é Am I doing something wrong? Did I miss something? thanks 🙂

What counts as a “specific goal, event, or activity” for the Divination spell?

The divination spell states:

Similar to augury but more powerful, a divination spell can provide you with a useful piece of advice in reply to a question concerning a specific goal, event, or activity that is to occur within 1 week.

I’m not sure what limitations the language about “a specific goal, event, or activity” imposes. The immediate motivation for this comes from a Kingmaker campaign that I’m currently running. After an attack on their capital, my players came up with the idea of casting divination once a week to ask “Will anything attack our kingdom this week?”

I’m trying to figure out if this is specific enough, and if not, what would be specific enough. On one hand, it’s not a specific event – they aren’t expecting any particular attack. On the other hand, it’s arguably a specific goal – keeping their citizens safe from large-scale threats.

Also, I expect my players to use divination many times during this campaign, so I’d like to know how this language limits the spell beyond this one case.

What type of activity at the WAN port of router can cause massive data uploads, when no devices are connected? [closed]

I have Airtel Broadband PPPoE connection with Public Dynamic IP assigned to my router Dlink DIR 615 (It’s old model and now discontinued). Intermittently I have noticed instances of unusually high uploads from my Internet account. For example in say 10 hours over 80 GB of data gets ‘uploaded’ and against that only a negligible say 100 MB of data gets ‘downloaded’ automatically when no device is connected to the router. I later verified this with data consumption charts available in my account.

I installed data loggers on my mobile phone and no unusual activity or data consumption found. No PC / Laptop connected to the router when it happens. Router is secure, very long complex password WPA2 and WPS disabled. Port & Address restricted firewall, PING on WAN is disabled The massive uploads happen even if I disabled WIFI which means whatever happens, must be at the WAN port.

I contacted ISP and they said is that the connection has physical port binding which means that if another LAN cable is taken out from the hub or whatever device they have at the common area in the apartment complex, no one else can get on to the internet even if they know my PPPoE user id/password. The access is bound to a particular physical port on the ISP’s device.

I am sure this is not a data logging error as whenever it happened, I could see the Internet LED rapidly glowing on the router, so it was for real.

It stops as soon as I reboot the router as it generally takes another Dynamic Public IP from the ISP.

Nothing much found in the router logs. Router does not seem to be able to differentiate between normal uploads/downloads and such instances of massive uploads.

See the screenshot for ISP chart. Yellow bar is upload and brown bar is download.

What kind of activity, if any, at the WAN port of the router can cause massive data uploads when no devices are connected to the router and even WiFi is disabled? From where this data is generated?

enter image description here