Is this possible.

01/13/2008 16:51 Balance#1
Ok, I need to know how to capture packets from a process when the process starts up.

For example, I changed the login IP to that of my other computer, I want to load the process on this computer, then capture the packet on the other computer to decrypt it. I cannot figure out how to grab the packets from this program once it starts up.... grrrr.
01/14/2008 09:56 5hoursez#2
search and read the posts in here for wpe pro or google for it
01/14/2008 18:04 Balance#3
I'm pretty proficient with WPE.

You misunderstood what I asked, I beleive.

WPE does not support what I am trying to do.
01/14/2008 19:48 5hoursez#4
Sounds like you want to capture all packets remotely of the startup sequence, this can be done *Not remotely, just monitor Archlord.exe file in one startup, and alefclient.exe in another session. Yes I am confused on exactly what you are asking, please detail for me :) thanks
01/15/2008 20:05 iamabot#5
am i correct,
to do what you wanna do in WPE pro you would have to target alefclient.exe before its started?

have you tried targeting it
and repatcing?
eg just load the patch cleient again? or does that open a diff alefclient?
01/15/2008 23:46 nigroangelus#6
If i'm right u only wanna capture all packets, the Client sends at another local machine which shouldn't be to hard.

First u need to redirect ur clients data to the ip, ur second pc have...
Thenafter ur client, based on the first pc, will timeout within 1000ms, but still sends packets to ask for the server, i think.
If u now use any ethernet sniffer, u might be able to catch what u are searching for ...

Maybe this link gives u an idea: [Only registered and activated users can see links. Click Here To Register...]

But at least WPE is recording the same data i thought .. :confused:

.. just my opinion ^^
01/16/2008 16:04 Balance#7
Yes, WPE records the same thing. But WPE only allows you to select a process that is already running.

I am having difficulty explaining.

I've already changed the target IP's to the correct places for my server.
01/17/2008 05:48 nigroangelus#8
I tried using CommView and SmartSniff ..
.. both are working maybe it's what u are searching for.
02/02/2008 19:30 Overdramatics#9
i cant understand what u wanna say with this thread and posts >.<