[Release] Tera Live Packet Sniffer

[P5yl0]

nice.. thanks a lot.. tagyourit^^

works like a charm...
didnt know thats so easy with CE
tryed days with olydbg till i found a way... but never had such good values...^^



here is a liddle modification...of the dll
outputs 2 files .. dec and hex + revision to c:\
change it if you need..

You must be registered to see links

 

[GoneUp]

Just made a update for the packet viewer to use the a file generated by the opcode DLL.

Link:

You must be registered to see links

Also pushed the update to github,

 

[the1Domo]

can i get the 30.09 exe to make a sig for updateing to new game



0x191DD80 = 30.11.02



//OpCodeAdress TERA CLIENT 30.11.02
string OpCodeVersion = "301102";
DWORD GetOpCodeNameAddress = 0x191DD80;



updare + code + idb + exe

You must be registered to see links

 

[the1Domo]

more info

You must be registered to see links

 

[[GM]Xia]

i dont understand one thing if you can tell me what i doing worng its be great
i play at Tera NA i turn the cheat engine choose the tera client while i am play going to memory viewer searching for I_TELEPORT and he say nothing found

 

[Aleweadan]

more info

You must be registered to see links

Hi theDomo, did you still work on SWTOR Emu ?

 

[the1Domo]

No no time or team

 

[Aleweadan]

No no time or team

ok thank for rep !

 

[the1Domo]

Tera_Packet_logger_3011_fixed

You must be registered to see links

 

[GoneUp]

Tera_Packet_logger_3011_fixed

You must be registered to see links

What did you change?

 

[Ekey]

Can you add loading servers list from xml config? Like:

<Servers>
	<String>
		<id>[EU] Hasmina</id>
		<ip>79.110.94.213</ip>
		<port>11000</port>
	</String>
	<String>
		<id>[RU] Arun</id>
		<ip>91.225.237.5</ip>
		<port>7801</port>
	</String>
</Servers>

 

[the1Domo]

in public bool ProcessClientData()
you got GetServerData need to be GetClientData

 

[Ekey]

btw : useless part of code

        public byte[] ServerKey1 = Utils.Random128Key();
        public byte[] ServerKey2 = Utils.Random128Key();

replace on

        public byte[] ServerKey1 = new byte[128];
        public byte[] ServerKey2 = new byte[128];

because ServerKey1 and ServerKey2 filled anyway from

public bool ProcessServerData()

 

[GoneUp]

Updated the code on Github with these two things. That xml loading thing is maybe coming tomorrow

 

[Ekey]

Here collected ip's :
v1 -

You must be registered to see links

Also after ip could be added tag for loading individual opcode list for each regions.
v2 -

You must be registered to see links

 

[GoneUp]

Pushed some Updates on Github today, including the xml serverlist. I didn't include seperate opcode files for diffrent regions as I want it as simple as possible. You need to do that manually ^^

Complied version v4:

You must be registered to see links

 

[Ekey]

I didn't include seperate opcode files for diffrent regions as I want it as simple as possible. You need to do that manually ^^

Cmon, It is not so hard .

Thanks for update

-----

Well, seems does not work for me

My actions :

1) Started Sniff
2) Set adapter and server
3) Started game

PS: WinPcap installed. OS Win7 x64

Any ideas? :/:

 

[GoneUp]

Cmon, It is not so hard .

Thanks for update

-----

Well, seems does not work for me

My actions :

1) Started Sniff
2) Set adapter and server
3) Started game

PS: WinPcap installed. OS Win7 x64

Any ideas? :/:

Is this a wireless adapter? Then maybe winpcap is not working. Can you see your network traffic with wireshack?

 

[Ekey]

Is this a wireless adapter?

Nope

Then maybe winpcap is not working.

Winpcap works fine because i see trafic in my sniff on cpp

Can you see your network traffic with wireshack?

Wireshark works fine too

-----

Hmmm.. Really funny but demos from SharpPcap and Pcap.Net does not work with any filters.

SharpPcap demo:

with filter "ip and tcp" (also i tried different variants but without results) - no trafic ->

You must be registered to see links

without filter - there is traffic ->

You must be registered to see links

I do not understand what's wrong. CPP versions works without any problems. WTF!? :?:

 

[GoneUp]

I really have no clue what could be wrong. It's really strange what is happening there. The host filter is also not working or?