PacketCollector Error

asiegman · #1 05-28-2002, 12:01 AM

For some wierd reason, I seem to be missing wpcap.dll

PacketCollector won't run w/o it.

Any links where I might get this? And possibly any other DLLs it may need?

Trumpcard · #2 05-28-2002, 12:07 AM

You need Win PCAP. Download and install this..

http://winpcap.polito.it/install/default.htm

asiegman · #3 05-28-2002, 07:06 AM

RAWR~ It works!

I got a guild doing NToV soon, I'll get it running there if at all possible =) And Ssra like nothing else, they do that every day.

Now I just run it on whatever machine with the IP of the machine to sniff, and it will sniff away AND upload it automatically?

Or do I need to do something special to upload it to you guys automatically? I saw the special options on adding it to MY database, just wondering how to get it to YOUR database =)

EmuGM · #4 05-29-2002, 03:59 PM

once you run the collector it just disappears? where does it save the info to?

Lurker_005 · #5 05-29-2002, 05:27 PM

open a command line window, then run the program with /? after it for help

packetcollector /?

asiegman · #6 05-29-2002, 07:44 PM

I run two copies on one computer. I have one sniffing my friends EQ machine, and one sniffing mine =)

I have the .items files. My only question is, how do YOU guys get the info =P

Trumpcard · #7 05-30-2002, 12:04 AM

When you ctrl-c out of the program, the collected items are automatically uploaded to gotfrags

rollain · #8 05-30-2002, 12:16 AM

where can i download packet collecter ?
my guild regulary does tov, pog, akheva, ect..

Lurker_005 · #9 05-30-2002, 05:14 AM

For the lazy among you...

Packet Collector commands:
Usage: PacketCollector.exe ipaddress [command....]

ipaddress One of the two IPs in the connection must match this to be processed
-v Prints the version number and credits
-s [filename] Shows all the items in a file
-m filename Merges 'filename' into your collected_items file
-f filename Selects the itemfile to use (defaults to 'collected_items.eqitems')
-o 0xOPCode Hexadecimal opcode to log (can use -o multiple times)
-o all Log all packets (pure acks are dropped)
-l filename File to log -o opcodes to (defaults to screen)
-noitems Disables items capturing
-nodb Disables uploading to the database on exit
-dbonly Upload to the database and exit
-dbh hostname Sets the database server
-dbu username Sets the database username
-dbp password Sets the database password
-dbd database Sets the database database
-dbt table Sets the database table
-dbv Verbose database upload mode. (shows each item name)
-nonamefield Doesnt use the "name" field in the database

You can do packetcollector -dbv -dbonly and see if it uploads the items. I no longer have a live account, so I can't test this.

Trumpcard · #10 05-30-2002, 05:34 AM

Roll,
go to eqemu.net, follow the sourceforge files link, and look for the latest PacketCollector version in there.

asiegman · #11 05-31-2002, 10:50 AM

Damnation!

I got the thing running (this was before 1.6 was released btw) and I had it running for like 2 days straight logging to a file.

I just tried to upload that file, and it said 0 items uploaded when I tried to upload from either file. And I know it had to have picked up items because they did an entire burrower raid and key farmed in ssra and all kinds of stuff and I was scanning the guild banker, who was looting all corpses hehe.

Is it possible that it was uploading them already, so it didn't save them in the .items file??

I use the following command to run packetcollector for scanning

packetcollector -f amir.eqitems -i 192.168.1.101

I used the command above to try to upload

packetcollector -f amir.eqitems -dbv -dbonly

And got the following text:

C:\DOCUME~1\ALEXSI~1\DESKTOP\EQEMUS~1\PACKET~1.5>p acketcollector -f amir.eqitems
-dbv -dbonly
Using ItemFile 'amir.eqitems'.
Using database 'itemsupload' at itemsupload.gotfrags.com
Uploading items to table: 'itemsupload'
0 new items uploaded.

Both computers are running on a hub, at 10baseT half duplex, and are scannable with ShowEQ (so packet sniffage works).

Did I do something wrong? =(

PS. Is the itemsupload table the same structure as the regular items table? If it is, I'm gonna set up me own itemsupload thingy to see if it's working.

PPS. Also, will it upload items if they are already there?? If not, that may explain it though. But they did get that 65ac tunic and some other stuff I don't remember seeing in the database.

ramccor · #12 05-31-2002, 11:05 AM

Just use the -nonamefield and it is will use the same format as the items table.

DeletedUser · #13 05-31-2002, 07:37 PM

You can run it with -s to see if there's any items in your .eqitems file.

Also it should print out the item names to the screen as it sees them (but only the first time it sees an item).

The DB upload does not upload items that are already in the DB.

FYI: itemsupload db currently at 7561 items =)

DeletedUser · #14 05-31-2002, 08:02 PM

Also you can run it with "-o all", it'll spam you like mad if it's seeing packets. =p

asiegman · #15 05-31-2002, 08:52 PM

Thanks for the clarification Quagmire =)