Search results

Preface: I started Tibia when I was 11. I only had crappy dial-up at home, so I went to Internet Cafés to see people play and to hear the antics of the great guilds of Tibia. And I absolutely loved it, but I came too late. The mercenaries were no longer demanding protection money for hunting in...

Thanks for the capture. I'll update the dissector when I've time (next month probably) for proper 7.70-7.71 support. Your capture helped me find a more serious bug: The method I use to differentiate between server and client packets is flawed. That's probably the reason, why the game commands...

The XTEA key as shown in Wireshark has the same byte order as in the packet. Let's see what OTClient does with it: c4 7e 46 25 5a d4 92 29 84 18 e9 82 d1 e2 e7 38 # 16 bytes, as in the Wireshark key c4 7e 46 25 5a d4 92 29 84 18 e9 82 d1 e2 e7 38...

Ah, sorry. An UAT is an user accessible table. Like the RSA Key list and XTEA key list options. Endianness means, which end comes first of a number. With Arabic numerals a thousand is written as 1000. The highest valued digit (The 1) is the first one, so this is big endian (The biggest come...

I see. Do you know if the same is required for 7.71?

So if I understood correctly, Tibia 7.7 encrypted everything except of the packet length with RSA? They would have changed it in 7.71 or 7.72 then, because I tested 7.72 before for the dissector and that decoded normally. If there are indeed problems with the dissector's handling of 7.7, I wold...

Did you compile it yourself? I just tested the 64 builds for macOS and Windows and both have GnuTLS bundled and therefore the RSA Key List option. If you're on Linux and compiling yourself, you need to install GnuTLS before building. e.g. on debian with: sudo apt install libgnutls28-dev As...

Wow, must have been 9~ years since I was last there :D

Desert dungeon scorpion pit (behind switchplate wall). Mintwallin arch over lever bridge to old Daemon spawn (needs levitate or parcels + mob).

A bit of self advertisement: Did you try to take a look at it in Wireshark's Tibia dissector? Here's the RSA private key you can load for 7.70 (PEM format): -----BEGIN RSA PRIVATE KEY----- MIICXAIBAAKBgQDLoibNahc41DeQhZUTth3FrhMNYek5xbQrlZ0O4BFr0LukdGY1...

I want to clarify that game protocol support is (and will most probably remain) incomplete. So you will see the decrypted bytes of, say, a Tibia market transaction but it won't be decoded to (Item, Price, Amount) or whatever. Tracking all protocol changes between 2001-2017 is not something I...

Yes, that version is ok. In a switched LAN, the switch avoid sending stuff your way that's not destined for you. You can: Start a client, connect to your OT and see only this one connection in Wireshark Start Wireshark on the same machine as the OT and maybe control it over VNC or SSH/X11...

The latest nightly release from https://www.wireshark.org/download/automated/ Maybe the game server isn't at port 7171 or 7172, so Wireshark doesn't dissect its TCP packets as Tibia packets? You can right-click a TCP packet that should be dissected as a Tibia packet, choose "Decode As.." and...

Glad to hear. Wish you fun with it! Wireshark is for traffic analysis, it doesn't modify the packets itself, but it makes it easier to write tools that do. I listed some examples of tools I wrote with help of the dissector in the first post.

Sure. I went to a chess board with my character, put some magic light wands to make it brighter. Then I relogged. When I logged in again, the tibia server sends you a big packet with all the map data. In Wireshark, you can see it unencrypted now, and export it to a file with a right click, which...

Wow, I've been doing this for way too long ^^'

Download for Windows and macOS: https://www.wireshark.org/download/automated/, On Linux you'll have to compile current Wireshark master branch yourself till there's an official release (Summer 2018). See here for more info. Wireshark is a very popular network analyzer. It sniffs what happens...

2467 It Will take years to end this -.-

2250.00000000

1783.0000000000