Sunday, May 13, 2012

Cara Guna WireShark

1. Download and install Wireshark.
2. Open your ragnarok but don't login yet! Leave it on the login screen and open Wireshark.
3. At Wireshark's window, go to Capture > Options on the upper menu or press Ctrl + K.
File:Capiture.png
4. In the top right box, select the interface that will be used to capture on. If there isn't any specific interface to use, select the one whose IP address is equal to the your ip address or is not unknown. Alternatively you can try all of them and use the one that records the packets. Set the others settings like the images bellow:
File:Interface.PNG
5. Click on Start button and go back to the Ragnarok window and login.
Note. Valid information are not needed.
6. Back to Wireshark and click on Stop button.
File:stop.png
7. In Wireshark main window, you can see the TCP segments that were captured. Fill in the packet filter, but what to fill in depends on the username you used to login.
Enter this in the "Filter" text box:
eth contains "xxxxxx" or eth contains xxxxxx
Replace xxxxxx with the username that was used to login and press enter. In the example bellow, username was Mushroom.
File:filter.png
8. There will be only one entry now, click on it to show some information about it. This is where the IP and port is stored.
File:ip.png
Write down the IP and port.
9. On the entry again, right-click on it and go to Follow TCP Stream.
File:tcp.png
10. A new window will open, in the bottom left, select Hex Dump.
File:hex.png
11. These are the login packets. Take a look at it and write down the packets that contains the version and master version numbers. They are marked on the image bellow.
File:packets.png
  • version displayed as 4-byte unsigned number in little-endian, in hex
  • master version displayed as 1-byte unsigned number, in hex
12. See Converting Hexadecimal to Decimal numbers to convert the master_version and version before configuring Kore.

Converting Hexadecimal to Decimal numbers

Master_version and server version collected from the login packets are in hexadecimal number (base-16) and Kore expects a decimal number (base-10), so converting those numbers are needed before Kore can read them.
Converting can be made using Windows' calculator or any other site that has a hex to dec calculator.
1. Open Windows calculator Start > Accessories > Calculator.
File:calc.PNG
2. Go to View on the upper menu and click on Scientific.
File:sci.PNG
3. Check the circle beside Hex.
File:hexa.PNG
4. On the calculator, type the number that you got for master_version and version. In the example, master_version hexadecimal number is 10.
File:type.PNG
5. Check the circle beside Dec.
File:dec.PNG
6. After checking, the number shown should automatically be converted from hexadecimal to decimal.
File:done.PNG
You must convert master_version and version
OpenKore Help A lot

No comments:

Post a Comment