Last active
January 14, 2017 19:48
-
-
Save polkaulfield/a462e3a739d4a8f27b0839e37f817391 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// Servers | |
Login Server: 79.110.83.80 | |
Game Server: 79.110.83.77 | |
Chat Server: 79.110.83.83 | |
// Filters | |
Get packets sent to server: | |
ip.dst == 79.110.83.77 and ip.src == youraddress | |
Get packets from server: | |
ip.dst == youraddress and ip.src == 79.110.83.77 | |
Filter out ACKs and empty data: | |
and not tcp.len==0 | |
Filter by bytes in data: | |
and data.data contains 15:00 | |
Example (this prints skills sent from client to gameserver): | |
ip.dst == 79.110.83.77 and ip.src == 192.168.1.35 and not tcp.len==0 and data.data contains 15:00 | |
// Opcodes | |
Skills (They are sent at random times while moving): 0x15 0x0 | |
Items: 0xC 0x0 | |
Coords: 0x21 0x0 | |
Sitting: 0x8 0x0 | |
Emotes: 0xE 0x0 | |
//Cleanse Skill | |
Example: | |
0000 15 00 6f b3 6f b6 bf d1 fe 29 8d 73 d5 ab e9 f5 ..o.o....).s.... | |
0010 db 83 ce 32 8f ...2. | |
Recurring data: | |
0000 15 00 xx xx xx xx xx xx xx xx xx 73 d5 ab e9 f5 ...|.yp.1..s.... | |
0010 db 83 xx xx xx ....@ | |
* Two first bytes indicate that the packet is a skill probably | |
* From 2nd byte to 10th byte seems random data. | |
* 10th byte seems to not change that often. | |
* From 12th byte to 18th byte (7 bytes) seems the skill ID. It keeps being the same. | |
* Three last bytes seem random also. | |
//Light of Rejuvenation +1 | |
Example: | |
0000 15 00 eb 38 e4 3d 34 55 7a ae 8e 7f d9 a7 e5 f9 ...8.=4Uz....... | |
0010 d7 4f cd 3e 83 .O.>. | |
Recurring data: | |
0000 15 00 xx xx xx xx xx xx xx xx xx 7f d9 a7 e5 f9 ...8.=4Uz....... | |
0010 d7 4f xx xx xx | |
Test with +0 skill recurring data: | |
0000 15 00 xx xx xx xx xx xx xx xx xx 7c da a4 e6 fa ..V.Y......|.... | |
0010 d4 4c xx xx xx .Ls.= |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment