C++ Playing/analyzing cams recorded by server to spot botters

[Glovacky]

Hello, I am trying to implement @Gesior.pl 's solution (GitHub - gesior/tmp-cams-system (https://github.com/gesior/tmp-cams-system)) for recording player actions server side for developing anti-bot system.
I managed to make the code record .cam files and I tried using OTClient (GitHub - edubart/otclient: An alternative tibia client for otserv written in C++11 and Lua, made with a modular system that uses lua scripts for ingame interface and functionality, making otclient flexible and easy to customize (https://github.com/edubart/otclient)) for playing them, but it seems im missing something.
When I use command:

g_game.playRecord()

I get:

ERROR: command failed: :1: attempt to call field 'playRecord' (a nil value)

Therefore I have 2 questions:
1. What's the easiest way to just play the recording so I'm sure the system works as intended?
2. What's the best approach to actually spot bots? For instance check if someone uses exura every time hp<x or keeps walking in the same pattern?

Calling @Gesior.pl and @kor since they have extensive knowledge in that field.
Great contributions from their side btw.

 

[Gesior.pl]

When I use command:

Cam player (g_game.playRecord()) is only in OTCv8 client ( GitHub - OTCv8/otclientv8: Clean, ready to use version of OTClientV8 - Alternative, highly optimized Tibia client (https://github.com/OTCv8/otclientv8) C++ source files: GitHub - OTCv8/otcv8-dev: OTCv8 Development repository (source code) (https://github.com/OTCv8/otcv8-dev)).
Not in edubart.

To start .cam in OTCv8 type:

        g_game.setClientVersion(1098)
        g_game.setProtocolVersion(g_game.getClientProtocolVersion(1098))
        g_game.playRecord("1098.cam")

and put file`1098.cam` in folder records (create it in OTCv8 directory with OTC.exe).

 

[kor]

Cam player and recorder for OTCv8 is client-side only. If you will record it server-side (using mine or anyone else solution) and still want to play it in v8 client, you would need to make sure it have the same format (otcv8-dev/src/framework/net/packet_recorder.cpp at 3d32139512cc4576b105682c3579f18fe0d534e4 · OTCv8/otcv8-dev (https://github.com/OTCv8/otcv8-dev/blob/3d32139512cc4576b105682c3579f18fe0d534e4/src/framework/net/packet_recorder.cpp#L25-L47)), send it to user and then playback using commands above. I'm using other method (Feature - Cam system (https://otland.net/threads/cam-system.285399/post-2727673)), but if you will be the only person who will watch the recordings, the easiest way is to download them from the server and put them in the records directory as above.

Regarding capturing packets sent by the player to the server, you can "hook" here forgottenserver/src/protocol.cpp at master · otland/forgottenserver (https://github.com/otland/forgottenserver/blob/master/src/protocol.cpp#L63) (i.e. after XTEA decrypt) and save them to a file similarly as I gave an example here cams.diff (https://gist.github.com/rookgaard/28d9e0aedd0fe7ceb5610842a67860bf#file-cams-diff-L21)

To spot bots, you would need to write some PHP/Python script that will look in recordings for specific packets coming one after another and check delay between them. For example forgottenserver/src/protocolgame.cpp at master · otland/forgottenserver (https://github.com/otland/forgottenserver/blob/master/src/protocolgame.cpp#L2581) (player loose health) and forgottenserver/src/protocolgame.cpp at master · otland/forgottenserver (https://github.com/otland/forgottenserver/blob/master/src/protocolgame.cpp#L620) (player is using potion on itself).

 

[Glovacky]

Cam player (g_game.playRecord()) is only in OTCv8 client ( GitHub - OTCv8/otclientv8: Clean, ready to use version of OTClientV8 - Alternative, highly optimized Tibia client (https://github.com/OTCv8/otclientv8) C++ source files: GitHub - OTCv8/otcv8-dev: OTCv8 Development repository (source code) (https://github.com/OTCv8/otcv8-dev)).
Not in edubart.

To start .cam in OTCv8 type:

        g_game.setClientVersion(1098)
        g_game.setProtocolVersion(g_game.getClientProtocolVersion(1098))
        g_game.playRecord("1098.cam")

and put file`1098.cam` in folder records (create it in OTCv8 directory with OTC.exe).

works fine, the only issue is that login window is blocking the view. Do you have any trick for that?

 

[kor]

EnterGame.hide()

 

[Glovacky]

EnterGame.hide()

Thanks!

 

[Glovacky]

Im trying to write a simple python script that will read the .cam and spit out the simplest data.
Problem is im not good with analyzing the packets.
Can someone point me in the right direction on how to read and interpret .cam file to spit out info such as timestamp and
0x8C byte?