Page 1 of 1

OP_GroupCreatedMsg

Posted: Wed Sep 10, 2014 6:06 pm
by Jabantiz
I think this is an important packet for the client, showing who is the leader of the group as well as the colors of names in the group window, and my theory is effects creating a guild. The problem is I have no clue about its contents, here is an example packet

Code: Select all

-- OP_GroupCreatedMsg --
11/10/2012 19:17:19
69.174.200.155 -> 192.168.1.104
0000:	00 09 07 DF 03 58 47 35 D3 45 42 42 51 00 40 D1 .....XG5.EBBQ.@.
0010:	E7 57 B1 51 B1 BB BB B1 3B B0 BB B0 3B 59 85 5B .W.Q....;...;Y.[
0020:	47 1D 9C 3B 3A 1B B8 D9 64 14 85 9F 4C C8 09 21 G..;:...d...L..!
0030:	A4 B3 7F 45 90 0B 79 90 0F 31 28 80 42 28 82 62 ...E..y..1(.B(.b
0040:	28 81 52 28 83 38 94 43 05 54 42 02 AA A0 1A 6A (.R(.8.C.TB....j
0050:	A0 16 EA A0 1E 1A A0 11 9A A0 19 5A A0 15 DA A0 ...........Z....
0060:	1D 3A A0 13 BA A0 1B 7A A0 17 FA A0 1F 06 60 10 .:.....z......`.
0070:	86 60 18 46 60 14 C6 60 1C 26 20 09 93 30 05 D3 .`.F`..`.& ..0..
0080:	30 03 B3 30 07 F3 B0 00 8B B0 04 CB B0 02 AB B0 0..0............
0090:	06 EB B0 01 29 D8 84 2D D8 86 1D D8 85 3D D8 87 ....)..-.....=..
00A0:	03 38 84 23 38 86 13 38 85 33 38 87 0B B8 84 34 .8.#8..8.38....4
00B0:	5C C1 35 DC C0 2D DC C1 3D 3C C0 23 3C C1 33 BC \.5..-..=<.#<.3.
00C0:	C0 2B BC C1 3B 7C C0 27 7C C1 37 64 E0 FF D3 F0 .+..;|.'|.7d....
00D0	0B 29 4A D8 68                                  .)J.h
Data looks packed, what is really throwing me off is the start of the packet (using this post as a reference)
00 09 - OP_Packet
07 DF - Sequence
03 - ???
58 - Opcode

According to the post I linked,
3. The next byte is a 1 if it is compressed using zlib or a 0, if not.
In this packet it is 03, any one have any thoughts on how to decrypt/decompress this packet?

Re: OP_GroupCreatedMsg

Posted: Fri Sep 12, 2014 9:03 pm
by Zcoretri
What data version is this packet from? I am very rusty at packets now :oops:
There are times that the collector will strip off the compression byte as well, so this packet may not be even be what it is labeled as.

Re: OP_GroupCreatedMsg

Posted: Fri Sep 12, 2014 9:58 pm
by Jabantiz
Packet is from version 1193, if the header bytes were stripped it would be either opcode 9 which is OP_AllCharactersDescRequestMsg in 1193, not that, or opcode 0 which is OP_LoginRequestMsg, not that either.

I suck at the decryption/decompression part and relied on our tools just working, not even sure what info the packet should contain, or if the packet is labeled right, so that makes it even more difficult. I am not even sure it is group related anymore as the log I was looking at today didn't have this packet at all during the process of forming a full group.

EDIT: Packet is from CreatedGuildBank.log, under design on the svn, though I believe most logs will have this packet at least once.