PacketCollector 0.9.0!!!

[DeletedUser]

<u><b>**UPDATE**</u></b>
image is no longer a developer on the eqemu team, so you need to send packetlogs to Rogean@gmail.com from now on.
**********

Yayayya!! The developers need YOU! We need everyone to load up their EQ and get on EQLive and packetlog anything and EVERYTHING.

Download 0.9.0 here:
https://sourceforge.net/project/showfiles.php?group_id=41381&package_id=38786&rele ase_id=261361

Heres instructions for people new to this program:

You need winpcap, you can get it here:
http://winpcap.polito.it/install/bin/WinPcap_3_1_beta_3.exe

Once you have that installed that, unzip packetcollector into c:\pc (just use this dir as it will make your life MUCH easier)

go to Start->Run type command.com and press enter

If you have C:\SomethingHere, do cd.. (with the dots) until it is just C:\>

Then type cd pc

Type ipconfig and press enter, remember your IP Address, write it down if you must

Type PacketCollector -d and press enter, you may see multiple devices, try and pull out your ethernet card (What you use to get on the internet), theres a number in front, remember that number.

Finally type:
PacketCollector YourIPAddress -d EthernetCardNumber -o all -l packetlog.txt

Press enter, load EQGame, play, after you are done playing, go into c:\pc and you will see packetlog.txt, zip this file up and send it to rogean@gmail.com.

Thanks for your help guys!

<b>Tips from Doodman:</b>
The main thing is to log things being done.

Casting, attacking, looting, inspecting, FD, activating AA's, buying, selling, banking, tradeskills (including searching), augments (adding, removing and disolving), zoning, dying, killing, dueling, grouping (creating, joining, disbanding), raiding (creating, joining, disbanding), lfg (turning on flag, look for players, look for groups), get an adventure, complete the adventure, get a raid adventure, complete it.

Just to name a few. Please include what you did, with what (items aug'd, etc), against who, etc.

You can do things like a say or something before/after a certain action so you/we can find it in the logs easier. I usually disguise my says so they don't look obvious, like "/say gu Sec, let me aug this thing". It looks like a mistell to my guild.

If you are not concerned about it then just do: "/say Augging" then do it.

**UPDATE 2***
For discussion/help/whatever related to packetcollecting and the collector itself, please head here: http://www.eqemulator.net/forums/viewtopic.php?p=94639#94639

[layziethekid]

Just for clarification do you want Internal network IP address or Internet IP addresses? I'm sure there are more then a few behind a router.

By "EthernetCardNumber " are you referring to the MAC Address?

[DeletedUser]

you want the ip shown in ipconfig which when behind a router is the internal ip. Not the mac address, when you do packetcollector -d you will get something like this:

1.\Device\NPF_GenericNdisWanAdapter (Generic NdisWan adapter)
2.\Device\NPF_{5D04AF52-9333-43B5-BB01-6E42FB17A30C} (3Com Gigabit NIC (3C2000 F
amily) (Microsoft's Packet Scheduler) )
3.\Device\NPF_{268806E1-FF57-48F7-81F2-01BFD0B4104C} (NET IP/1394 Miniport)
4.\Device\NPF_{222816DA-2E60-4B54-B601-6EF1195D2C67} (NET IP/1394 Miniport)

my ethernet card is #2 so id use 2

[layziethekid]

Ah cool. Not sure i'll be able to help with this, but thought i'd ask as i wasn't sure what you were talkin about. I'll see if i can borrow a friends live account.

My question is what do you really need i guess? Just need ppl to zone in to a zone then leave? or do you need them to be x close to mobs. fight a certain spawn x times in x mins? do you want them to have certain /filters on/off ?

[DeletedUser]

Anything and everything EQEMu is 6 months atleast out of date, we need to catch up...

[layziethekid]

Oh i know that but i mean, do you need someone just in the zone and it will collect data for the whole zone. meaning just sitting at zin in Tactics will pickup the whole Rallos Zek script, assuming there is a raid going on?

[DeletedUser]

Once again anything and everything, big raids, small raids, no raid, etc etc.

[layziethekid]

lol aight. Wasn't sure if there was a certain Proxcimity (SP) to something for it to pick up things.

Will do what i can.

[DeletedUser]

Appreciate it :)

[mattmeck]

Just one question


Will I get a cookie?

[Doodman]

The main thing is to log things being done.

Casting, attacking, looting, inspecting, FD, activating AA's, buying, selling, banking, tradeskills (including searching), augments (adding, removing and disolving), zoning, dying, killing, dueling, grouping (creating, joining, disbanding), raiding (creating, joining, disbanding), lfg (turning on flag, look for players, look for groups), get an adventure, complete the adventure, get a raid adventure, complete it.

Just to name a few. Please include what you did, with what (items aug'd, etc), against who, etc.

You can do things like a say or something before/after a certain action so you/we can find it in the logs easier. I usually disguise my says so they don't look obvious, like "/say gu Sec, let me aug this thing". It looks like a mistell to my guild.

If you are not concerned about it then just do: "/say Augging" then do it. 8)

[Xabob]

Hey hey i just send a 30mb log file ur way image hope it helps

[DeletedUser]

Got it, thanks Xabob

[sotonin]

cool, ill do some packetcollecting later on. this collects items too right? click on all the item links in public channels?

FYI. i could never get PC to work with the beta of winpcap. i had to use the next version down from the latest and it worked fine.

[RangerDown]

From yesterday evening's IRC chat, they said no item support yet, but will have it very soon.

I asked specifically about using this version with the 3.1beta, and they said it works fine.

[DeletedUser]

I need packetlogs of items before we can get the item collector back up again.

[sotonin]

oh ok... so use packetcollector click on a few item links in chat and submit log?

[DeletedUser]

Sure

[bloodgoth]

I'll packet-collect for ya... I just reactivated my EQLive account.

[karkar]

i got a prob with packet collector, it says i am missing a dll file and to reinstall the packet collector

[mattmeck]

I still wanna know,,,,,,,,,,will I get a cookie?

[Rogean]

mattmeck: Get one from Tarzok

[mattmeck]

Ok ill reactivate my account in a few days then :D

You know my Rogue?

[Xabob]

Hmmz Image? wtf lol

[Valor]

Whats the average size of these logs?
how do u change name from anon?

[Shadow-Wolf]

omg, right when you start it it tells you that adding -name will do it

[Rogean]

Ok ill reactivate my account in a few days then :D

You know my Rogue?

=P

[Ace]

So someone tell me a bit about the benefits of packet collecting.

I hate to sound selfish, but what do you get for packetcollecting? You're risking your EQlive account with SEQ (regardless of how severe the risk, it is still a risk) to packet collect for the EQEMu project.

Do you receive the data you collected in a form that you can use? Or is it just "for the good of the community"?

I can see a lot of people wanting to participate in this if the data they risked their accounts for was something they could use relatively soon.

[karkar]

couldnt u use a free 30 day account?

[mattmeck]

So someone tell me a bit about the benefits of packet collecting.

I hate to sound selfish, but what do you get for packetcollecting? You're risking your EQlive account with SEQ (regardless of how severe the risk, it is still a risk) to packet collect for the EQEMu project.

Do you receive the data you collected in a form that you can use? Or is it just "for the good of the community"?

I can see a lot of people wanting to participate in this if the data they risked their accounts for was something they could use relatively soon.

The risk is a 0% risk, in other words there isnt any.

SOE can NOT detect the PC'r program, and its a community benifit, if nobody PC's then EQEMU can NOT get current with live.

[Ace]

Scratch what I said about SEQ in the above post, it has nothing to do with this. Just a mistype on my part.

You're telling me that packetcollecting/sniffing is not something Sony would ban your account for? I have personally seen them do it for much less. Regardless of how "undetectable" you think a program is, if they don't want you doing something, and you're doing it, you are at risk.

Now, I pose to you a question.

If there is indeed 0% risk as you say, why doesn't everyone do it?



To the devs:

Is this all that EQEMu has been waiting on?

[Melwin]

There are two reasons why one would not want to packetcollect:

You're a selfish asshole.
You're too stupid to figure out how to packetcollect, even with the guide.


It's completely undetectable as all it does is log the packets you receive from EQ on your end. It sends no info to SOE.

[Ace]

It's completely undetectable until the point that SOE chooses to scan what you have running as processes. Call me Orwellian in nature, but if you leave the least likely avenue of attack open, you're going to be sorry.

As a previous poster said, is there anything wrong with signing up an infinite amount of 30 day free trials and packet collecting from those? I would assume that you need more of the high end aspect of Everquest, rather than Joe_Blow farming Frenzied_Rat01.

In regards to people not wanting to packet collect:

Are there not many people packet collecting?

If this is the bottleneck that the EQEMu devs are facing, I can do much to help on this front.

Make no mistake, the questions I am asking are not of a selfish nature. I am trying to deduce exactly where and how much I am able to help.

[Darkwaters]

LMFAO I so wanted to state that Melwin. You beat me too it. =)
/bow 'Melwin'
Darkwaters

[Melwin]

It's completely undetectable until the point that SOE chooses to scan what you have running as processes. Call me Orwellian in nature, but if you leave the least likely avenue of attack open, you're going to be sorry.

As a previous poster said, is there anything wrong with signing up an infinite amount of 30 day free trials and packet collecting from those? I would assume that you need more of the high end aspect of Everquest, rather than Joe_Blow farming Frenzied_Rat01.

In regards to people not wanting to packet collect:

Are there not many people packet collecting?

If this is the bottleneck that the EQEMu devs are facing, I can do much to help on this front.

Make no mistake, the questions I am asking are not of a selfish nature. I am trying to deduce exactly where and how much I am able to help.

SOE cannot do that without breaking the law.

If they break the law, they will get sued for ungodly amounts of money. Blizzard tried to pull the same trick in '99 if I recall correctly, and they were shut down almost instantaneously once exposed.

And yes, this is what is bottlenecking EQEmu.

[Ace]

I understand this, but I would rather be prepared than assume another entity's behavior pattern.

As I see it, I have done many things with my EQlive account that WERE detectable, and I could care less. I have players from my server asking these questions of me, which I could not answer, but now I can. :)

Edit: I missed the last line that you posted. Jesus Christ, you mean we could've already HAD our classic EQEMu client if people had packet collected? That pisses me off.

[cofruben]

if anyone is going to collect ldon adventures,please contact me in cofruben@hotmail.com

[Ace]

Cofruben, what type, difficulty, and level of dungeon do you need?

I can collect just about everything aside from GoD zones.

[boucoune]

Reason 3 : you don't really care.

[RangerDown]

Even our little ol' EQ tried its hand for a while with having the game report what other tasks were running. They added to the EULA, effectively saying that by continuing to play you agree to allow the client to scan your processes, so their legal bases were covered. (If you think they're still legally in the wrong in spite of adding it to the EULA, you may be correct, but that's for a different thread.)

They stopped it and they stopped it QUICK. Not out of legal fears -- but from the backlash they received. Many long-time players threatened to quit if they kept it going. I don't foresee SOE trying *that* again in the foreseeable future. Other game companies, as much as they'd like to do it, probably learned a lesson from EQ and would be hesitant to do it too.

That said, it is my opinion that for your own computer's security, you have a right to see any network traffic that comes and goes. And anything SOE tries to state to the contrary I believe to be null and void.

Now, as for PC'ing, you can probably do 95%+ of what needs to be done using your free trial account. What we need is what kind of data is sent to the server or received from the server when a particular action is performed or a specific event takes place. For example, if we need to collect what packets are sent while you're hitting on a mob or the mob's hitting on you, then it doesn't really matter if that mob is a_large_rat or if it's Quarm, the packet structure is the same. If we need to collect the packets associated with casting a spell, it doesn't matter if that spell is the Skin Like Wood the druid gets with his starter gear, or the ultra-rare-only-2-casters-on-your-server-have-this spell. About the only thing you might be locked out collecting at low levels is LDoN adventures and AA abilities.

[cofruben]

I need:
1.Opcode and data sent/received when making a high risk adv and normal risk.
2.Opcode sent (if there is one) to update the adv status(like timer,looting status,killing status...).
3.Opcode sent when losing(if possible) and winning an adventure.

Thank you ace.

[Melwin]

Please move the discussion here (http://www.eqemulator.net/forums/viewtopic.php?p=94639#94639).