Welcome!

Welcome to our community forums, full of great people, ideas and excitement. Please register if you would like to take part.

This is extra text with a test link..

Register Now

Announcement

Collapse
No announcement yet.

Session detection logic

Collapse
X
Collapse
Who has read this thread:
 
  • Filter
  • Time
  • Show
Clear All
new posts

    Session detection logic

    The section detection logic is being triggered way too easily. Once detected, packets are all bad and you need to restart the collection process to restart capture. Can we see how new sessions/end of sessions are being detected.

    Code:
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64264
    Submitting Item OP 0x16d2 64265 - Legends of Norrath: Iksar Collaborator
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64265
    Submitting Item OP 0x16d2 64266 - Legends of Norrath: Imperial Advisor
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64266
    Submitting Item OP 0x16d2 64267 - Legends of Norrath: Imperial Wardog
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64267
    Submitting Item OP 0x16d2 64268 - Legends of Norrath: Korocust
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64268
    Submitting Item OP 0x16d2 64269 - Legends of Norrath: Royal Sarnak Herbalist
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64269
    Submitting Item OP 0x16d2 64270 - Legends of Norrath: Oathbreaker Booster Pack
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64270
    Submitting Item OP 0x16d2 64271 - Legends of Norrath: Meatbeast
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64271
    Submitting Item OP 0x16d2 64272 - Legends of Norrath: Terrorantula
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64272
    Submitting Item OP 0x16d2 64273 - Legends of Norrath: Holly Windstalker
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64273
    Submitting Item OP 0x16d2 64274 - Legends of Norrath: Hoop of Fighting Focus
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64274
    Submitting Item OP 0x16d2 64275 - Legends of Norrath: Galeth Veredeth
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64275
    Submitting Item OP 0x16d2 64276 - Legends of Norrath: Signus Boran
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64276
    Submitting Item OP 0x16d2 64277 - Legends of Norrath: Chel'Drak
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64277
    Submitting Item OP 0x16d2 64278 - Legends of Norrath: Cloud of Torpor
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64278
    Submitting Item OP 0x16d2 64279 - Legends of Norrath: Deal with Me First
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64279
    Submitting Item OP 0x16d2 64280 - Legends of Norrath: Horns of the Great Guardian
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64280
    Submitting Item OP 0x16d2 64281 - Legends of Norrath: Slashing Assault
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64281
    Submitting Item OP 0x16d2 64282 - Legends of Norrath: Titanic Stomp
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64282
    Submitting Item OP 0x16d2 64283 - Legends of Norrath: Woe Be to Those
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64283
    Submitting Item OP 0x16d2 64284 - Legends of Norrath: Chel'Drak's Ring
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64284
    Submitting Item OP 0x16d2 64285 - Legends of Norrath: Shell of the Dragon Turtle
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64285
    Submitting Item OP 0x16d2 64286 - Legends of Norrath: Teeth of the Ancient Lord
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64286
    Submitting Item OP 0x16d2 64287 - Legends of Norrath: Front Antechamber
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64287
    Submitting Item OP 0x16d2 64288 - Legends of Norrath: Hollow Passageway
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64288
    Submitting Item OP 0x16d2 64289 - Legends of Norrath: Watery Pool
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64289
    Submitting Item OP 0x16d2 64290 - Legends of Norrath: Distrupting Jolt
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64290
    Submitting Item OP 0x16d2 64291 - Legends of Norrath: Out of the Shadows
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64291
    Submitting Item OP 0x16d2 64292 - Legends of Norrath: Slowing Poison
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64292
    Submitting Item OP 0x16d2 64293 - Legends of Norrath: Shadowy Acolyte
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64293
    Submitting Item OP 0x16d2 64294 - Legends of Norrath: Shadowy Sorcerer
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64294
    Submitting Item OP 0x16d2 64295 - Legends of Norrath: Shadowy Thief
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64295
    Submitting Item OP 0x16d2 64296 - Legends of Norrath: Shadowy Warrior
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64296
    Submitting Item OP 0x16d2 64297 - Legends of Norrath: Skeletal Disruptor
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64297
    Submitting Item OP 0x16d2 64298 - Legends of Norrath: Skeletal Warrior
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64298
    Submitting Item OP 0x16d2 64299 - Legends of Norrath: Ethernauts Booster Pack
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64299
    Submitting Item OP 0x16d2 64300 - Legends of Norrath: Oceangreen Militiaman
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64300
    Submitting Item OP 0x16d2 64301 - Legends of Norrath: Storm Guard Magistrate
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64301
    Submitting Item OP 0x16d2 64302 - Legends of Norrath: Rivervale Official
    Submitting Item OP 0x16d2 64303 - Legends of Norrath: Neriak Marshal
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64302
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64303
    Submitting Item OP 0x16d2 64304 - Legends of Norrath: Graycat
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64304
    Submitting Item OP 0x16d2 64305 - Legends of Norrath: Kunzar Savage
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64305
    Submitting Item OP 0x16d2 64306 - Legends of Norrath: Elven Migrant
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64306
    Processed 3000 instructions
    Submitting Item OP 0x16d2 64307 - Legends of Norrath: Lady Zavo'Za
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64307
    Submitting Item OP 0x16d2 64308 - Legends of Norrath: Shu Fang Qui
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64308
    Submitting Item OP 0x16d2 64309 - Legends of Norrath: Shing Ho
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64309
    Submitting Item OP 0x16d2 64310 - Legends of Norrath: Lorisyn Oakwynd
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64310
    Submitting Item OP 0x16d2 64311 - Legends of Norrath: Lyrirae Oakwynd
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64311
    Submitting Item OP 0x16d2 64312 - Legends of Norrath: Pearl Destroyer
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64312
    Submitting Item OP 0x16d2 64313 - Legends of Norrath: Crimson Destroyer
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64313
    Submitting Item OP 0x16d2 64314 - Legends of Norrath: Dorvias
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64314
    Submitting Item OP 0x16d2 64315 - Legends of Norrath: Ashteth
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64315
    Submitting Item OP 0x16d2 64316 - Legends of Norrath: Raking Strike
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64316
    Submitting Item OP 0x16d2 64317 - Legends of Norrath: Wall of Feathers
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64317
    Submitting Item OP 0x16d2 64318 - Legends of Norrath: Qeynos Captain
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64318
    Submitting Item OP 0x16d2 64319 - Legends of Norrath: Freeport Captain
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64319
    Submitting Item OP 0x16d2 64320 - Legends of Norrath: Blabbering Zombie
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64320
    Submitting Item OP 0x16d2 64321 - Legends of Norrath: Wandering Zombie
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64321
    Submitting Item OP 0x16d2 64322 - Legends of Norrath: Plainsman Healer
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64322
    Submitting Item OP 0x16d2 64323 - Legends of Norrath: Plainsman Supporter
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64323
    Submitting Item OP 0x16d2 64324 - Legends of Norrath: Elddar Warden
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64324
    Submitting Item OP 0x16d2 64325 - Legends of Norrath: Elddar Fury
    Submitting Item OP 0x16d2 64338 - Bottle of Vile Bleach
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64325
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64338
    Submitting Item OP 0x16d2 64339 - Bottle of Repulsive Bleach
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64339
    Submitting Item OP 0x16d2 64340 - Sealed Stomples Basket
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64340
    Submitting Item OP 0x16d2 64341 - Stomples Basket
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64341
    Submitting Item OP 0x16d2 64342 - Toothed Kinder Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64342
    Submitting Item OP 0x16d2 64343 - Striped Kinder Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64343
    Submitting Item OP 0x16d2 64344 - Wavy Kinder Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64344
    Submitting Item OP 0x16d2 64345 - Dotted Kinder Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64345
    Submitting Item OP 0x16d2 64346 - Crosshatch Kinder Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64346
    Submitting Item OP 0x16d2 64347 - Tiled Kinder Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64347
    Submitting Item OP 0x16d2 64348 - Sunburst Kinder Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64348
    Submitting Item OP 0x16d2 64349 - Patterned Kinder Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64349
    Submitting Item OP 0x16d2 64351 - Sugar Jelly Seeds
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64351
    Submitting Item OP 0x16d2 64352 - Rock Candy
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64352
    Submitting Item OP 0x16d2 64353 - Chocolate Bunny
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64353
    Submitting Item OP 0x16d2 64354 - Sealed Stomples Package
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64354
    Submitting Item OP 0x16d2 64356 - Bunny-Thumper Mead
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64356
    Submitting Item OP 0x16d2 64357 - Egg Fortified Juice
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64357
    Submitting Item OP 0x16d2 64359 - Sealed Decorative Egg Package
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64359
    Submitting Item OP 0x16d2 64360 - Decorative Egg Package
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64360
    Submitting Item OP 0x16d2 64361 - Toothed Decorative Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64361
    Submitting Item OP 0x16d2 64362 - Striped Decorative Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64362
    Submitting Item OP 0x16d2 64363 - Wavy Decorative Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64363
    Submitting Item OP 0x16d2 64364 - Dotted Decorative Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64364
    Submitting Item OP 0x16d2 64365 - Crosshatch Decorative Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64365
    Submitting Item OP 0x16d2 64366 - Tiled Decorative Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64366
    Submitting Item OP 0x16d2 64367 - Sunburst Decorative Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64367
    Submitting Item OP 0x16d2 64368 - Patterned Decorative Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64368
    Submitting Item OP 0x16d2 64369 - Toothed Painted Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64369
    Submitting Item OP 0x16d2 64370 - Striped Painted Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64370
    Submitting Item OP 0x16d2 64371 - Wavy Painted Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64371
    Submitting Item OP 0x16d2 64372 - Dotted Painted Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64372
    Submitting Item OP 0x16d2 64373 - Crosshatch Painted Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64373
    Submitting Item OP 0x16d2 64374 - Tiled Painted Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64374
    Submitting Item OP 0x16d2 64375 - Sunburst Painted Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64375
    Submitting Item OP 0x16d2 64376 - Patterned Painted Egg
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64376
    Submitting Item OP 0x16d2 64378 - Zimel Style Stucco Manor, Stucco Interior
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64378
    Submitting Lore for item: 64378
    Submitting Lore for item: 64378
    eqitems.newLore: SwiftyMUSE, Lore Already in database OP 0x2608 64378
    Submitting Item OP 0x16d2 64379 - Zimel Style Stucco Manor, Wood Interior
    eqitems.newLore: SwiftyMUSE, Lore Already in database OP 0x2608 64378
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64379
    Submitting Lore for item: 64379
    Submitting Lore for item: 64379
    eqitems.newLore: SwiftyMUSE, Lore Already in database OP 0x2608 64379
    eqitems.newLore: SwiftyMUSE, Lore Already in database OP 0x2608 64379
    Submitting Item OP 0x16d2 64380 - Zimel Style Stucco Manor, Stone Interior
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64380
    Submitting Lore for item: 64380
    Submitting Lore for item: 64380
    eqitems.newLore: SwiftyMUSE, Lore Already in database OP 0x2608 64380
    eqitems.newLore: SwiftyMUSE, Lore Already in database OP 0x2608 64380
    Submitting Item OP 0x16d2 64381 - Zimel Style Plaster Manor, Stucco Interior
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64381
    Submitting Lore for item: 64381
    Submitting Lore for item: 64381
    eqitems.newLore: SwiftyMUSE, Lore Already in database OP 0x2608 64381
    eqitems.newLore: SwiftyMUSE, Lore Already in database OP 0x2608 64381
    Submitting Item OP 0x16d2 64382 - Zimel Style Plaster Manor, Wood Interior
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64382
    Submitting Lore for item: 64382
    Submitting Lore for item: 64382
    eqitems.newLore: SwiftyMUSE, Lore Already in database OP 0x2608 64382
    eqitems.newLore: SwiftyMUSE, Lore Already in database OP 0x2608 64382
    Submitting Item OP 0x16d2 64383 - Zimel Style Plaster Manor, Stone Interior
    eqitems.newItem: SwiftyMUSE, Already in database OP 0x16d2 64383
    
    *** New Session Detected ***
    Charm Read Mode is 1
    Found Client>World: null to 69.174.201.195
    Session Key: 0x0, Server Port: 5353, Client Port: 5353
    Invalid CRC16: calc=0x2800 real=0x78
    [UDPPacket: 192.168.0.120.5353 -> 224.0.0.251.5353 l=8,366]
    
    00 00 84 00 00 00 00 01 | 00 00 00 03 0b 5f 67 6f
    6f 67 6c 65 63 61 73 74 | 04 5f 74 63 70 05 6c 6f
    63 61 6c 00 00 0c 00 01 | 00 00 00 78 00 2f 2c 47
    44 49 2d 57 48 41 38 30 | 30 30 2d 33 64 38 66 32
    31 35 37 37 33 32 66 36 | 65 30 63 35 30 64 64 34
    32 37 35 65 64 62 30 38 | 36 38 61 c0 0c c0 2e 00
    10 80 01 00 00 11 94 00 | bc 23 69 64 3d 33 64 38
    66 32 31 35 37 37 33 32 | 66 36 65 30 63 35 30 64
    64 34 32 37 35 65 64 62 | 30 38 36 38 61 23 63 64
    3d 33 44 33 44 30 41 44 | 34 37 43 45 35 42 32 45
    45 35 46 34 33 42 37 32 | 34 33 30 41 45 41 44 45
    30 13 72 6d 3d 33 38 44 | 30 42 33 46 38 42 44 34
    37 36 33 36 37 05 76 65 | 3d 30 35 0e 6d 64 3d 47
    44 49 2d 57 48 41 38 30 | 30 30 12 69 63 3d 2f 73
    65 74 75 70 2f 69 63 6f | 6e 2e 70 6e 67 0f 66 6e
    3d 4d 6f 6e 64 6f 20 34 | 30 32 30 43 38 09 63 61
    3d 31 39 38 36 36 30 04 | 73 74 3d 30 0f 62 73 3d
    46 41 38 46 43 41 37 30 | 34 46 37 46 04 6e 66 3d
    31 03 72 73 3d c0 2e 00 | 21 80 01 00 00 00 78 00
    2d 00 00 00 00 1f 49 24 | 33 64 38 66 32 31 35 37
    2d 37 33 32 66 2d 36 65 | 30 63 2d 35 30 64 64 2d
    34 32 37 35 65 64 62 30 | 38 36 38 61 c0 1d c1 37
    00 01 80 01 00 00 00 78 | 00 04 c0 a8 00 78
    
    INVALID KEY 192.168.0.120 192.168.0.120
    Invalid CRC16: calc=0x65a8 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 01 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x971 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 1c 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x37e2 real=0x1
    [UDPPacket: 192.168.0.62.5353 -> 224.0.0.251.5353 l=8,94]
    
    00 03 00 00 00 02 00 00 | 00 00 00 00 2a 5f 25 39
    45 35 45 37 43 38 46 34 | 37 39 38 39 35 32 36 43
    39 42 43 44 39 35 44 32 | 34 30 38 34 46 36 46 30
    42 32 37 43 35 45 44 04 | 5f 73 75 62 0b 5f 67 6f
    6f 67 6c 65 63 61 73 74 | 04 5f 74 63 70 05 6c 6f
    63 61 6c 00 00 0c 00 01 | c0 3c 00 0c 00 01
    
    INVALID KEY 192.168.0.62 192.168.0.62
    Invalid CRC16: calc=0x2800 real=0x78
    [UDPPacket: 192.168.0.120.5353 -> 224.0.0.251.5353 l=8,366]
    
    00 00 84 00 00 00 00 01 | 00 00 00 03 0b 5f 67 6f
    6f 67 6c 65 63 61 73 74 | 04 5f 74 63 70 05 6c 6f
    63 61 6c 00 00 0c 00 01 | 00 00 00 78 00 2f 2c 47
    44 49 2d 57 48 41 38 30 | 30 30 2d 33 64 38 66 32
    31 35 37 37 33 32 66 36 | 65 30 63 35 30 64 64 34
    32 37 35 65 64 62 30 38 | 36 38 61 c0 0c c0 2e 00
    10 80 01 00 00 11 94 00 | bc 23 69 64 3d 33 64 38
    66 32 31 35 37 37 33 32 | 66 36 65 30 63 35 30 64
    64 34 32 37 35 65 64 62 | 30 38 36 38 61 23 63 64
    3d 33 44 33 44 30 41 44 | 34 37 43 45 35 42 32 45
    45 35 46 34 33 42 37 32 | 34 33 30 41 45 41 44 45
    30 13 72 6d 3d 33 38 44 | 30 42 33 46 38 42 44 34
    37 36 33 36 37 05 76 65 | 3d 30 35 0e 6d 64 3d 47
    44 49 2d 57 48 41 38 30 | 30 30 12 69 63 3d 2f 73
    65 74 75 70 2f 69 63 6f | 6e 2e 70 6e 67 0f 66 6e
    3d 4d 6f 6e 64 6f 20 34 | 30 32 30 43 38 09 63 61
    3d 31 39 38 36 36 30 04 | 73 74 3d 30 0f 62 73 3d
    46 41 38 46 43 41 37 30 | 34 46 37 46 04 6e 66 3d
    31 03 72 73 3d c0 2e 00 | 21 80 01 00 00 00 78 00
    2d 00 00 00 00 1f 49 24 | 33 64 38 66 32 31 35 37
    2d 37 33 32 66 2d 36 65 | 30 63 2d 35 30 64 64 2d
    34 32 37 35 65 64 62 30 | 38 36 38 61 c0 1d c1 37
    00 01 80 01 00 00 00 78 | 00 04 c0 a8 00 78
    
    INVALID KEY 192.168.0.120 192.168.0.120
    Invalid CRC16: calc=0x65a8 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 01 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x971 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 1c 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x65a8 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 01 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x971 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 1c 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x65a8 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 01 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x971 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 1c 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    
    *** New Session Detected ***
    Charm Read Mode is 1
    Found Client>World: null to 192.168.0.62
    Session Key: 0x0, Server Port: 5353, Client Port: 5353
    Invalid CRC16: calc=0x2800 real=0x78
    [UDPPacket: 192.168.0.120.5353 -> 224.0.0.251.5353 l=8,366]
    
    00 00 84 00 00 00 00 01 | 00 00 00 03 0b 5f 67 6f
    6f 67 6c 65 63 61 73 74 | 04 5f 74 63 70 05 6c 6f
    63 61 6c 00 00 0c 00 01 | 00 00 00 78 00 2f 2c 47
    44 49 2d 57 48 41 38 30 | 30 30 2d 33 64 38 66 32
    31 35 37 37 33 32 66 36 | 65 30 63 35 30 64 64 34
    32 37 35 65 64 62 30 38 | 36 38 61 c0 0c c0 2e 00
    10 80 01 00 00 11 94 00 | bc 23 69 64 3d 33 64 38
    66 32 31 35 37 37 33 32 | 66 36 65 30 63 35 30 64
    64 34 32 37 35 65 64 62 | 30 38 36 38 61 23 63 64
    3d 33 44 33 44 30 41 44 | 34 37 43 45 35 42 32 45
    45 35 46 34 33 42 37 32 | 34 33 30 41 45 41 44 45
    30 13 72 6d 3d 33 38 44 | 30 42 33 46 38 42 44 34
    37 36 33 36 37 05 76 65 | 3d 30 35 0e 6d 64 3d 47
    44 49 2d 57 48 41 38 30 | 30 30 12 69 63 3d 2f 73
    65 74 75 70 2f 69 63 6f | 6e 2e 70 6e 67 0f 66 6e
    3d 4d 6f 6e 64 6f 20 34 | 30 32 30 43 38 09 63 61
    3d 31 39 38 36 36 30 04 | 73 74 3d 30 0f 62 73 3d
    46 41 38 46 43 41 37 30 | 34 46 37 46 04 6e 66 3d
    31 03 72 73 3d c0 2e 00 | 21 80 01 00 00 00 78 00
    2d 00 00 00 00 1f 49 24 | 33 64 38 66 32 31 35 37
    2d 37 33 32 66 2d 36 65 | 30 63 2d 35 30 64 64 2d
    34 32 37 35 65 64 62 30 | 38 36 38 61 c0 1d c1 37
    00 01 80 01 00 00 00 78 | 00 04 c0 a8 00 78
    
    INVALID KEY 192.168.0.120 192.168.0.120
    Invalid CRC16: calc=0x65a8 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 01 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x971 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 1c 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x7079 real=0x1
    [UDPPacket: 192.168.0.62.5353 -> 224.0.0.251.5353 l=8,110]
    
    00 03 00 00 00 03 00 00 | 00 00 00 00 2a 5f 25 39
    45 35 45 37 43 38 46 34 | 37 39 38 39 35 32 36 43
    39 42 43 44 39 35 44 32 | 34 30 38 34 46 36 46 30
    42 32 37 43 35 45 44 04 | 5f 73 75 62 0b 5f 67 6f
    6f 67 6c 65 63 61 73 74 | 04 5f 74 63 70 05 6c 6f
    63 61 6c 00 00 0c 00 01 | 09 5f 37 32 33 35 45 32
    30 43 c0 37 00 0c 00 01 | c0 3c 00 0c 00 01
    
    INVALID KEY 192.168.0.62 192.168.0.62
    Invalid CRC16: calc=0x2800 real=0x78
    [UDPPacket: 192.168.0.120.5353 -> 224.0.0.251.5353 l=8,366]
    
    00 00 84 00 00 00 00 01 | 00 00 00 03 0b 5f 67 6f
    6f 67 6c 65 63 61 73 74 | 04 5f 74 63 70 05 6c 6f
    63 61 6c 00 00 0c 00 01 | 00 00 00 78 00 2f 2c 47
    44 49 2d 57 48 41 38 30 | 30 30 2d 33 64 38 66 32
    31 35 37 37 33 32 66 36 | 65 30 63 35 30 64 64 34
    32 37 35 65 64 62 30 38 | 36 38 61 c0 0c c0 2e 00
    10 80 01 00 00 11 94 00 | bc 23 69 64 3d 33 64 38
    66 32 31 35 37 37 33 32 | 66 36 65 30 63 35 30 64
    64 34 32 37 35 65 64 62 | 30 38 36 38 61 23 63 64
    3d 33 44 33 44 30 41 44 | 34 37 43 45 35 42 32 45
    45 35 46 34 33 42 37 32 | 34 33 30 41 45 41 44 45
    30 13 72 6d 3d 33 38 44 | 30 42 33 46 38 42 44 34
    37 36 33 36 37 05 76 65 | 3d 30 35 0e 6d 64 3d 47
    44 49 2d 57 48 41 38 30 | 30 30 12 69 63 3d 2f 73
    65 74 75 70 2f 69 63 6f | 6e 2e 70 6e 67 0f 66 6e
    3d 4d 6f 6e 64 6f 20 34 | 30 32 30 43 38 09 63 61
    3d 31 39 38 36 36 30 04 | 73 74 3d 30 0f 62 73 3d
    46 41 38 46 43 41 37 30 | 34 46 37 46 04 6e 66 3d
    31 03 72 73 3d c0 2e 00 | 21 80 01 00 00 00 78 00
    2d 00 00 00 00 1f 49 24 | 33 64 38 66 32 31 35 37
    2d 37 33 32 66 2d 36 65 | 30 63 2d 35 30 64 64 2d
    34 32 37 35 65 64 62 30 | 38 36 38 61 c0 1d c1 37
    00 01 80 01 00 00 00 78 | 00 04 c0 a8 00 78
    
    INVALID KEY 192.168.0.120 192.168.0.120
    Invalid CRC16: calc=0x971 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 1c 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x65a8 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 01 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x65a8 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 01 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x971 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 1c 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x971 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 1c 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x65a8 real=0x1
    [UDPPacket: 192.168.0.21.5353 -> 224.0.0.251.5353 l=8,28]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 04 6e 75 6c
    6c 05 6c 6f 63 61 6c 00 | 00 01 00 01
    
    INVALID KEY 192.168.0.21 192.168.0.21
    Invalid CRC16: calc=0x409e real=0x1
    [UDPPacket: 192.168.0.62.5353 -> 224.0.0.251.5353 l=8,110]
    
    00 04 00 00 00 03 00 00 | 00 00 00 00 2a 5f 25 39
    45 35 45 37 43 38 46 34 | 37 39 38 39 35 32 36 43
    39 42 43 44 39 35 44 32 | 34 30 38 34 46 36 46 30
    42 32 37 43 35 45 44 04 | 5f 73 75 62 0b 5f 67 6f
    6f 67 6c 65 63 61 73 74 | 04 5f 74 63 70 05 6c 6f
    63 61 6c 00 00 0c 00 01 | 09 5f 37 32 33 35 45 32
    30 43 c0 37 00 0c 00 01 | c0 3c 00 0c 00 01
    
    INVALID KEY 192.168.0.62 192.168.0.62
    Invalid CRC16: calc=0x2800 real=0x78
    [UDPPacket: 192.168.0.120.5353 -> 224.0.0.251.5353 l=8,366]
    
    00 00 84 00 00 00 00 01 | 00 00 00 03 0b 5f 67 6f
    6f 67 6c 65 63 61 73 74 | 04 5f 74 63 70 05 6c 6f
    63 61 6c 00 00 0c 00 01 | 00 00 00 78 00 2f 2c 47
    44 49 2d 57 48 41 38 30 | 30 30 2d 33 64 38 66 32
    31 35 37 37 33 32 66 36 | 65 30 63 35 30 64 64 34
    32 37 35 65 64 62 30 38 | 36 38 61 c0 0c c0 2e 00
    10 80 01 00 00 11 94 00 | bc 23 69 64 3d 33 64 38
    66 32 31 35 37 37 33 32 | 66 36 65 30 63 35 30 64
    64 34 32 37 35 65 64 62 | 30 38 36 38 61 23 63 64
    3d 33 44 33 44 30 41 44 | 34 37 43 45 35 42 32 45
    45 35 46 34 33 42 37 32 | 34 33 30 41 45 41 44 45
    30 13 72 6d 3d 33 38 44 | 30 42 33 46 38 42 44 34
    37 36 33 36 37 05 76 65 | 3d 30 35 0e 6d 64 3d 47
    44 49 2d 57 48 41 38 30 | 30 30 12 69 63 3d 2f 73
    65 74 75 70 2f 69 63 6f | 6e 2e 70 6e 67 0f 66 6e
    3d 4d 6f 6e 64 6f 20 34 | 30 32 30 43 38 09 63 61
    3d 31 39 38 36 36 30 04 | 73 74 3d 30 0f 62 73 3d
    46 41 38 46 43 41 37 30 | 34 46 37 46 04 6e 66 3d
    31 03 72 73 3d c0 2e 00 | 21 80 01 00 00 00 78 00
    2d 00 00 00 00 1f 49 24 | 33 64 38 66 32 31 35 37
    2d 37 33 32 66 2d 36 65 | 30 63 2d 35 30 64 64 2d
    34 32 37 35 65 64 62 30 | 38 36 38 61 c0 1d c1 37
    00 01 80 01 00 00 00 78 | 00 04 c0 a8 00 78
    
    INVALID KEY 192.168.0.120 192.168.0.120
    Invalid CRC16: calc=0xdb41 real=0x1
    [UDPPacket: 192.168.0.7.5353 -> 224.0.0.251.5353 l=8,39]
    
    00 00 00 00 00 01 00 00 | 00 00 00 00 0a 5f 6d 79
    77 69 66 69 65 78 74 04 | 5f 74 63 70 05 6c 6f 63
    61 6c 00 00 0c 00 01
    
    INVALID KEY 192.168.0.7 192.168.0.7
    Invalid CRC16: calc=0xb691 real=0x7
    [UDPPacket: 192.168.0.7.5353 -> 224.0.0.251.5353 l=8,199]
    
    00 00 84 00 00 00 00 05 | 00 00 00 00 0a 5f 6d 79
    77 69 66 69 65 78 74 04 | 5f 74 63 70 05 6c 6f 63
    61 6c 00 00 0c 00 01 00 | 00 11 94 00 06 03 65 78
    74 c0 0c c0 2d 00 10 80 | 01 00 00 11 94 00 44 09
    74 78 74 76 65 72 73 3d | 31 10 6d 61 63 3d 34 34
    61 35 36 65 34 66 39 66 | 65 33 08 6a 6f 69 6e 65
    64 3d 30 0e 64 65 76 6e | 61 6d 65 3d 45 58 36 32
    35 30 10 6d 6f 64 65 6c | 6e 61 6d 65 3d 45 58 36
    32 35 30 c0 2d 00 21 80 | 01 00 00 00 78 00 0c 00
    00 00 00 00 00 03 65 78 | 74 c0 1c c0 95 00 1c 80
    01 00 00 00 78 00 10 fe | 80 00 00 00 00 00 00 46
    a5 6e ff fe 4f 9f e3 c0 | 95 00 01 80 01 00 00 00
    78 00 04 c0 a8 00 07
    
    INVALID KEY 192.168.0.7 192.168.0.7
    Invalid CRC16: calc=0x4ff9 real=0xc00c
    [UDPPacket: 192.168.0.7.5353 -> 224.0.0.251.5353 l=8,57]
    
    00 00 00 00 00 01 00 01 | 00 00 00 00 0a 5f 6d 79
    77 69 66 69 65 78 74 04 | 5f 74 63 70 05 6c 6f 63
    61 6c 00 00 0c 00 01 c0 | 0c 00 0c 00 01 00 00 11
    94 00 06 03 65 78 74 c0 | 0c
    
    INVALID KEY 192.168.0.7 192.168.0.7
    Invalid CRC16: calc=0x4ff9 real=0xc00c
    [UDPPacket: 192.168.0.7.5353 -> 224.0.0.251.5353 l=8,57]
    
    00 00 00 00 00 01 00 01 | 00 00 00 00 0a 5f 6d 79
    77 69 66 69 65 78 74 04 | 5f 74 63 70 05 6c 6f 63
    61 6c 00 00 0c 00 01 c0 | 0c 00 0c 00 01 00 00 11
    94 00 06 03 65 78 74 c0 | 0c
    
    INVALID KEY 192.168.0.7 192.168.0.7
    Invalid CRC16: calc=0xec6f real=0xb06a
    [UDPPacket: 192.168.0.103.5353 -> 224.0.0.251.5353 l=8,115]
    
    00 00 00 00 00 04 00 00 | 00 00 00 01 0f 5f 63 6f
    6d 70 61 6e 69 6f 6e 2d | 6c 69 6e 6b 04 5f 74 63
    70 05 6c 6f 63 61 6c 00 | 00 0c 80 01 04 5f 68 61
    70 c0 1c 00 0c 80 01 08 | 5f 68 6f 6d 65 6b 69 74
    c0 1c 00 0c 80 01 04 5f | 68 61 70 04 5f 75 64 70
    c0 21 00 0c 80 01 00 00 | 29 05 a0 00 00 11 94 00
    12 00 04 00 0e 00 6b fe | a4 ca a3 d0 b4 32 7c ff
    93 b0 6a
    
    INVALID KEY 192.168.0.103 192.168.0.103
    Invalid CRC16: calc=0x12ed real=0xb06a
    [UDPPacket: 192.168.0.103.5353 -> 224.0.0.251.5353 l=8,173]
    
    00 00 00 00 00 04 00 02 | 00 00 00 01 0f 5f 63 6f
    6d 70 61 6e 69 6f 6e 2d | 6c 69 6e 6b 04 5f 74 63
    70 05 6c 6f 63 61 6c 00 | 00 0c 00 01 04 5f 68 61
    70 c0 1c 00 0c 00 01 08 | 5f 68 6f 6d 65 6b 69 74
    c0 1c 00 0c 00 01 04 5f | 68 61 70 04 5f 75 64 70
    c0 21 00 0c 00 01 c0 2c | 00 0c 00 01 00 00 11 94
    00 13 10 4c 47 20 77 65 | 62 4f 53 20 54 56 20 30
    46 36 44 c0 2c c0 2c 00 | 0c 00 01 00 00 01 2c 00
    0f 0c 4c 79 72 69 63 2d | 36 36 39 34 35 37 c0 2c
    00 00 29 05 a0 00 00 11 | 94 00 12 00 04 00 0e 00
    6b fe a4 ca a3 d0 b4 32 | 7c ff 93 b0 6a
    
    INVALID KEY 192.168.0.103 192.168.0.103
    *** Session End Detected ***

    #2
    The session detection logic is triggering on local ip addresses that are not where the eq client is running. Is there a way to filter local packets to only the listening ip?

    You can see below that it is listening on 192.168.0.21 (Listening on '\Device\NPF_{98ED437E-51F3-4C94-88D9-A29E6282A2A2} : name:eth3 (Intel(R) Ethernet Connection (2) I219-V) on /192.168.0.21 /fe80:0:0:0:65d4:dab2:c105:a5d1%eth3'). That should be the packets that are processed on a local ip address.


    Code:
    DEVICE=0 is interface: \Device\NPF_Loopback : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
    DEVICE=1 is interface: \Device\NPF_{4EA3A6F0-AC92-4912-B187-4FB53FD280C2} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
    DEVICE=2 is interface: \Device\NPF_{CFC35797-83EA-4364-BAE7-088DF6CA160C} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
    DEVICE=3 is interface: \Device\NPF_{2AE13859-7D80-4328-A1FE-63B969F223D5} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
    DEVICE=4 is interface: \Device\NPF_{38050301-D15D-48B3-A2BF-51ECB553F8B9} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
    DEVICE=5 is interface: \Device\NPF_{DBB1A90A-B736-40B9-BE3E-46B509D1E5E7} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
    DEVICE=6 is interface: \Device\NPF_{D83F5346-1C6D-4645-93A1-9A861D582082} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
    DEVICE=7 is interface: \Device\NPF_{7C8BD631-B553-49C8-9FE2-783C20A20E3B} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
    DEVICE=8 is interface: \Device\NPF_{98ED437E-51F3-4C94-88D9-A29E6282A2A2} : name:eth3 (Intel(R) Ethernet Connection (2) I219-V) on /192.168.0.21 /fe80:0:0:0:65d4:dab2:c105:a5d1%eth3
    DEVICE=9 is interface: \Device\NPF_{4C95ABFA-CFF0-403B-AF35-9F34FD1FC8ED} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
    Waiting for client...
    Client Version: 2.4.8.8
    Lore Op Code: 0x74c3
    Book Op Code: 0x9f20
    Link Op Code: 0x555a
    Adv Op Code: 0x6586
    Item Ignore Op Code: 0x0
    Recipe Op Code: 0x0
    RecipeList Op Code: 0x0
    Mode is 1
    Autodection is 1
    Allow Item Discovery 1
    Item Preview Op Code: 0x74c3
    Item Reward Op Code: 0xfec
    Server Operations Completed...
    ItemStore: items.db
    Listening on '\Device\NPF_{98ED437E-51F3-4C94-88D9-A29E6282A2A2} : name:eth3 (Intel(R) Ethernet Connection (2) I219-V) on /192.168.0.21 /fe80:0:0:0:65d4:dab2:c105:a5d1%eth3'
    Added PCL
    Downloading Item Fields Definitions for debug purposes...
    Downloading complete
    Downloading Bad CharmFiles...
    Download failed.
    BAD CHARMS V.0.1 @ 2020-04-20 13:12 UTC
    Good ip count is 2
    Filtering packets for local addresses and ...
    69.174
    192.168.0.21
    User Name: SwiftyMUSE
    Debugging Level: 0xf (info, warnings, extra info, zone packet info)
    ItemCollect based on EQitems on 13th-floor.org
    -- Press 'y' to display a * when packet is being processed (switch on / off) --
    -- Press 'z' to display a count of packets processed --
    -- Press 'f' to flush the item store --
    -- Press 'p' to reset pcap filter --
    -- Press 'd' to download latest version --
    -- Press 'c' to reupload all charm text info (it will wipe the file when done) --
    -- Press 'i' to packet filter --
    -- Press 'q' to exit --

    Comment


      #3
      It was checking an opcode for session start and end, now it checks for the opcode and size in 2.4.8.9, can you check if that helps?
      The views represented here does not necessarily reflect the views of the guild (tm).

      Comment


        #4
        Originally posted by rswiders View Post
        The session detection logic is triggering on local ip addresses that are not where the eq client is running. Is there a way to filter local packets to only the listening ip?

        You can see below that it is listening on 192.168.0.21 (Listening on '\Device\NPF_{98ED437E-51F3-4C94-88D9-A29E6282A2A2} : name:eth3 (Intel(R) Ethernet Connection (2) I219-V) on /192.168.0.21 /fe80:0:0:0:65d4:dab2:c105:a5d1%eth3'). That should be the packets that are processed on a local ip address.


        Code:
        DEVICE=0 is interface: \Device\NPF_Loopback : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
        DEVICE=1 is interface: \Device\NPF_{4EA3A6F0-AC92-4912-B187-4FB53FD280C2} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
        DEVICE=2 is interface: \Device\NPF_{CFC35797-83EA-4364-BAE7-088DF6CA160C} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
        DEVICE=3 is interface: \Device\NPF_{2AE13859-7D80-4328-A1FE-63B969F223D5} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
        DEVICE=4 is interface: \Device\NPF_{38050301-D15D-48B3-A2BF-51ECB553F8B9} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
        DEVICE=5 is interface: \Device\NPF_{DBB1A90A-B736-40B9-BE3E-46B509D1E5E7} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
        DEVICE=6 is interface: \Device\NPF_{D83F5346-1C6D-4645-93A1-9A861D582082} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
        DEVICE=7 is interface: \Device\NPF_{7C8BD631-B553-49C8-9FE2-783C20A20E3B} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
        DEVICE=8 is interface: \Device\NPF_{98ED437E-51F3-4C94-88D9-A29E6282A2A2} : name:eth3 (Intel(R) Ethernet Connection (2) I219-V) on /192.168.0.21 /fe80:0:0:0:65d4:dab2:c105:a5d1%eth3
        DEVICE=9 is interface: \Device\NPF_{4C95ABFA-CFF0-403B-AF35-9F34FD1FC8ED} : name:lo (Software Loopback Interface 1) on /127.0.0.1 /0:0:0:0:0:0:0:1
        Waiting for client...
        Client Version: 2.4.8.8
        Lore Op Code: 0x74c3
        Book Op Code: 0x9f20
        Link Op Code: 0x555a
        Adv Op Code: 0x6586
        Item Ignore Op Code: 0x0
        Recipe Op Code: 0x0
        RecipeList Op Code: 0x0
        Mode is 1
        Autodection is 1
        Allow Item Discovery 1
        Item Preview Op Code: 0x74c3
        Item Reward Op Code: 0xfec
        Server Operations Completed...
        ItemStore: items.db
        Listening on '\Device\NPF_{98ED437E-51F3-4C94-88D9-A29E6282A2A2} : name:eth3 (Intel(R) Ethernet Connection (2) I219-V) on /192.168.0.21 /fe80:0:0:0:65d4:dab2:c105:a5d1%eth3'
        Added PCL
        Downloading Item Fields Definitions for debug purposes...
        Downloading complete
        Downloading Bad CharmFiles...
        Download failed.
        BAD CHARMS V.0.1 @ 2020-04-20 13:12 UTC
        Good ip count is 2
        Filtering packets for local addresses and ...
        69.174
        192.168.0.21
        User Name: SwiftyMUSE
        Debugging Level: 0xf (info, warnings, extra info, zone packet info)
        ItemCollect based on EQitems on 13th-floor.org
        -- Press 'y' to display a * when packet is being processed (switch on / off) --
        -- Press 'z' to display a count of packets processed --
        -- Press 'f' to flush the item store --
        -- Press 'p' to reset pcap filter --
        -- Press 'd' to download latest version --
        -- Press 'c' to reupload all charm text info (it will wipe the file when done) --
        -- Press 'i' to packet filter --
        -- Press 'q' to exit --
        Could maybe make it an option but it is possible to run on a separate computer it checks for private IP addresses and the darkpaw address range.
        The views represented here does not necessarily reflect the views of the guild (tm).

        Comment


          #5
          Originally posted by Deillusional View Post

          Could maybe make it an option but it is possible to run on a separate computer it checks for private IP addresses and the darkpaw address range.
          Or allow for a way to specify which local address/addresses to filter? The ip filtering (for private addresses) should probably be moved from the bad charmfile and a local configuration file.

          Comment


            #6
            Let me know how it goes, and thanks for the help/suggestions:


            Version 2.5.0.0


            General

            Removed the timed * echo.


            IP Filtering

            Controlled via ipaddresses.ini this file is created on load if it doesn't exist. Otherwise is customisable. To reload it use i


            [IP_FILTER]
            COUNT = 1
            USE = 1
            LOCAL_IP =
            IP_1 = 69.174


            LOCAL_IP is if you want to search for a starting packet of an ip address range or a single IP e.g. 192.168 will take every ip address in 192.168. as valid, 192.168.0.2 will only take 192.168.0.2 as valid

            the IP_x is enable filters from the external addresses starting with the address.

            Sessions

            Client Detection is on ports 9000-9007 now.

            Session Response takes the size of the packet into account as well as the opcode.
            Session Disconnect takes the size of the packet into account as well as the opcode.
            Last edited by Deillusional; 03-08-2021, 09:02.
            The views represented here does not necessarily reflect the views of the guild (tm).

            Comment


              #7
              I'm loading up the newest version now. I will keep you informed. The last version was working much better. It had been detecting a new session every 5-20 minutes but last night I had several hours of it accepting data. I just wanted to make sure this was working for me before we hit the new beta season so we can get everything updated then.

              Comment


                #8
                yer i think you caught a version when I was messing on with it, it was bugged for like 5 minutes or so.
                The views represented here does not necessarily reflect the views of the guild (tm).

                Comment


                  #9
                  im going to run it on my pi all the time and see what happens now too (dont ask about jpcap for it its a god damn pain).
                  The views represented here does not necessarily reflect the views of the guild (tm).

                  Comment

                  Working...
                  X