Players can get Online players from server using xploit tool

This is not a Support area! Discuss about the Server here. Non-Server related discussion goes in Off-Topic Discussion.
Forum rules
READ NOW: L2j Forums Rules of Conduct
Locked
bomberoloco24
Posts: 23
Joined: Sun May 15, 2011 3:51 pm

Players can get Online players from server using xploit tool

Post by bomberoloco24 »

Well, i disabled the list of players in the server to prevent massive propaganda to other players via whisp, or for drama queens to complain about low login of server, but i got one guy that knew exactly how much ppl where on, who whas in offline mode, and who active.

So, i asked him, like a normal player, how he can know this, he told me there a "server checker" from multiplayerxploits.de or something like that.

I found l2 checker, its supposed to do that, i didnt download it couse im afraid of virus.

The question in this is: The server broadcasts amount of players on and off, even when its turned off in config ?

How can i prevent for players get this info ? thanks in advance .-

Please move if is incorrected placed, i used search, found nothing.
Naminator_X_
Posts: 39
Joined: Thu Jun 10, 2010 9:06 am

Re: Players can get Online players from server using xploit

Post by Naminator_X_ »

Even L2Net can see the online player count. I believe the login server sends it to the client so it can "know" the load (low, heavy) so it's not something you just stop. Basically you only need a tool that bypasses your login. Unless you *mod your client* (don't ask how in here) to change the packet IDs i doubt you can stop that. Changing packets will remove most of the bot nubs too. Again .. asking for howto on client mod is strictly forbidden in here so i suggest you .. don't do it
bomberoloco24
Posts: 23
Joined: Sun May 15, 2011 3:51 pm

Re: Players can get Online players from server using xploit

Post by bomberoloco24 »

Thanks for reply, i wont :D

Ill see another way to do it.
User avatar
Szponiasty
Advanced User
Advanced User
Posts: 557
Joined: Mon Apr 21, 2008 1:31 pm
Location: Eastern Poland

Re: Players can get Online players from server using xploit

Post by Szponiasty »

Naminator_X_ wrote:Even L2Net can see the online player count. I believe the login server sends it to the client so it can "know" the load (low, heavy) so it's not something you just stop. Basically you only need a tool that bypasses your login. Unless you *mod your client* (don't ask how in here) to change the packet IDs i doubt you can stop that. Changing packets will remove most of the bot nubs too. Again .. asking for howto on client mod is strictly forbidden in here so i suggest you .. don't do it
You can. Just rewrite code of packet sent to client (cant remember exact name atm), to send eg 0 or like I did - random number between 5000 and 6000 ;) It will not affect login and gameserver operation because valid player count will be still sent to login (as an ecrypted transmission between gameserver and login, excluding client). Also server traffic is not determined by client and is not based on player online count sent by it. Login sends server status to client and decides if server should be seen as off, or low traffic etc.
And in the next chronicle they went into space, fighting the evil empire... In a galaxy far, far away xD
Starter
Posts: 484
Joined: Sat Jan 23, 2010 4:42 pm

Re: Players can get Online players from server using xploit

Post by Starter »

Szponiasty wrote:
Naminator_X_ wrote:Even L2Net can see the online player count. I believe the login server sends it to the client so it can "know" the load (low, heavy) so it's not something you just stop. Basically you only need a tool that bypasses your login. Unless you *mod your client* (don't ask how in here) to change the packet IDs i doubt you can stop that. Changing packets will remove most of the bot nubs too. Again .. asking for howto on client mod is strictly forbidden in here so i suggest you .. don't do it
You can. Just rewrite code of packet sent to client (cant remember exact name atm), to send eg 0 or like I did - random number between 5000 and 6000 ;) It will not affect login and gameserver operation because valid player count will be still sent to login (as an ecrypted transmission between gameserver and login, excluding client). Also server traffic is not determined by client and is not based on player online count sent by it. Login sends server status to client and decides if server should be seen as off, or low traffic etc.
Maybe even a number which would make l2net crash? Just an idea. xD
I have promises to keep and miles to go before I sleep.
User avatar
Origami
Posts: 21
Joined: Mon May 18, 2009 5:54 pm
Location: Moscow/Russia

Re: Players can get Online players from server using xploit

Post by Origami »

Starter wrote:Maybe even a number which would make l2net crash? Just an idea. xD
Indeed! And all the clients too :mrgreen:
Месть - это блюдо, которое подают в тапки...
JMD
Advanced User
Advanced User
Posts: 1440
Joined: Wed Apr 15, 2009 10:07 am

Re: Players can get Online players from server using xploit

Post by JMD »

Or you can turn on the community board and they wont even try to use the exploit.

P.S: If your server is good you dont have to hide your player count.
User avatar
Szponiasty
Advanced User
Advanced User
Posts: 557
Joined: Mon Apr 21, 2008 1:31 pm
Location: Eastern Poland

Re: Players can get Online players from server using xploit

Post by Szponiasty »

JMD wrote:Or you can turn on the community board and they wont even try to use the exploit.

P.S: If your server is good you dont have to hide your player count.
Nah. Server can be average or even worse, but when proper amount of money is spent on advertising, it probably will have huge online. So online count != server quality.
And in the next chronicle they went into space, fighting the evil empire... In a galaxy far, far away xD
Locked