PDA

View Full Version : GPS and Unknowns Please Help (read the other threads ;) )



rkfoo
01-27-2003, 04:03 PM
Ok, so I recently installed SEQ again and when I check it out, I get all the maps, but no mobs, they all come up as unknown. Ive read a bunch of posts and did some troubleshooting, below are my configs and what Ive done...

1. SEQ NOS: Linux Redhat 8, latest LIBEQ.A file. All installs fine and runs cool.

2. Network: I have the 2 PC's behind a firewall on private IP's (pretty standard) I use a cisco 2924xl switch which I enabled port monitoring on the SEQ and EQ stations.

3. EQ Station Im running KeyRing with the latest offset on their site. 0x0078bcb8 *Note, I just noticed today a new offset was put up on this site. Ill try that when I get home. But the troubles have been the past few days.

Ok so Im running SEQ and I enter the Key Port on the SEQ station of 10000. On the EQ PC I start up Keyring and all looks good. Keyring says sent data to the SEQ station on port 10000. I did notice that I cannot telnet to port 10000 on the SEQ box. If SEQ uses that port shouldnt I be able to? I also notive the port does not remain in the option box. When I go back to enter a port its blank, is that an issue? I didnt have a hub this weekend to see if the switch isnt mirroring packets correctly but could that be a possible issue too, I would think I wouldnt even get maps if it was? Im running as root and tried zoning also. Any other recommendations of things to try? Am I missing somethign basic? Ive thought about trying MB instead of Keyring, but wanted to ask first...

Thanks for any help provided.

who_me_use_seq
01-27-2003, 04:15 PM
On a Cisco switch if you turn on port mirroring or spanning you just enable the possiblity of monitoring. You still have to configure it. the configuration is of the form:

set span [source] [span port] [rx | tx | both]

You were less than specific in your configuration so I don't know if you have taken this step, but it sounds like you haven't.

rkfoo
01-27-2003, 04:19 PM
I probably should scrounge a hub to test with but v12.04 or somethign like that doesnt recoganize the set span commands. So I have it on the SEQ port port monitor fa0/7 which is the EQ station. I'll try a hub tonight I just figured I wouldnt even get Maps if it wasnt setup good... What do you think? Ill let you know how it goes tomorrow...

Cryonic
01-27-2003, 04:42 PM
If you are getting maps and unknown mobs, then you have it setup right for seeing the traffic. Now all SEQ needs is the key to decode the info.

rkfoo
01-27-2003, 10:13 PM
I tried a hub and same problem all unknowns.

I used the new key on this site 0x007ba178.

In KeyRing I get
key: 0x0000000000000000 lkey: 0xffffffffffffffff
SendSessionKey function called with key: 4201796llto destination IP: 192.168.1.62:10000
Sent the key to 192.168.1.62:10000

The key and lkey change, which looks good to me.

Im not sure what to tell SEQ. I tried Decoder->Input Session Key and put in 0x007ba178 I also tried Load Session Key.

Another thing I notice is if I goto Network Diags in SEQ i get client-zone zone-client packets but I dont get any client-world world-client packets.

If anyone has anyideas please let me know.

One more thing, besides unknowns I get myself, a bunch of blanks, Ayyyyyyyy's, and Doors. If that means anything.

Mr. Suspicious
01-28-2003, 02:05 AM
In KeyRing I get
key: 0x0000000000000000 lkey: 0xffffffffffffffff
SendSessionKey function called with key: 4201796llto destination IP: 192.168.1.62:10000
Sent the key to 192.168.1.62:10000

The key and lkey change, which looks good to me.


No it doesn't.

baelang
01-28-2003, 04:41 AM
first of all, don't use port 10000.

second, looks like you do not have the correct offset.

archie2
01-28-2003, 08:54 PM
Originally posted by rkfoo

Im not sure what to tell SEQ. I tried Decoder->Input Session Key and put in 0x007ba178 I also tried Load Session Key.

Think this is your problem.

Input session key wants the key not the offset 0x0xxxx

Load session key wants to grab the key from a file

what you want is decode port which should equal whatever you used on the sniffer prog - 10000 in this case