Little Help Jump Sniffing packet

07/11/2017 02:22 backtomatrix#1
Hello EPVP Memeber
i starting creating my project and i need little help in jump packet sniffing
Quote:

2A 00 1A 27 26 FF C6 00 33 7B 11 00
B8 03 B0 02 00 00 00 00 26 FF C6 00
89 00 00 00 B7 03 AD 02 E8 03 00 00
FF FF FF FF 00 00
all of red color i got it except black number
is that Jump Time Stamp Or what ?
Hope i find Answer :):)
07/11/2017 05:01 Spirited#2
It's likely your character's unique identifier. Not sure why it's listed twice though.
What patch is that?
07/11/2017 05:10 backtomatrix#3
Quote:
Originally Posted by Spirited View Post
It's likely your character's unique identifier. Not sure why it's listed twice though.
What patch is that?
first thanks for you reply
and it's patch 6565
BTW i got Character UID already
07/11/2017 06:55 Spirited#4
Quote:
Originally Posted by backtomatrix View Post
first thanks for you reply
and it's patch 6565
BTW i got Character UID already
I see now. They added a DWORD to the front of the packet's payload, and mirrored it after the timestamp. I'm not sure what that means. It doesn't appear to be coordinates or previous coordinates. It's definitely a DWORD though. If I get the time to download the new client and reverse it, I'll let you know.
07/11/2017 12:27 wshbr#5
#moved
07/11/2017 14:02 backtomatrix#6
Quote:
Originally Posted by Spirited View Post
I see now. They added a DWORD to the front of the packet's payload, and mirrored it after the timestamp. I'm not sure what that means. It doesn't appear to be coordinates or previous coordinates. It's definitely a DWORD though. If I get the time to download the new client and reverse it, I'll let you know.
thanks for your Helping :) :)
07/11/2017 17:06 boDil#7
It's just the timestamp. And yes, the timestamp appears twice in the packet. I think they actually added the timestamp to the packet "header", which means it's there for all packets, and they just didn't bother to remove it from existing packets that already had a timestamp as part of their "payload".
07/12/2017 04:15 JaniQ#8
Quote:
Originally Posted by Spirited View Post
I see now. They added a DWORD to the front of the packet's payload, and mirrored it after the timestamp. I'm not sure what that means. It doesn't appear to be coordinates or previous coordinates. It's definitely a DWORD though. If I get the time to download the new client and reverse it, I'll let you know.
That is the timestamp,it's written twice at 4 and 20.