Show EQ only shows my loc, nothing else

[ivan]

Hello,

I installed showeq v. 5.0.0.13 following the steps in
this thread (http://www.showeq.net/forums/showthread.php?t=4933). My setup is DSL modem -> Gentoo Linux 2.4 box running IPtables as a gateway ->HomePNA network-> EQ winXP box.

When I start showeq and then start EQ, showeq detects it, but the only info it shows is my loc and the way I face in EQ. No zone info, no class/lvl for myself, no spawns, no nothing.

I'm wondering if I missed something in setting up showeq.

Ivan.

[Cryonic]

what interface do you have it sniffing?

[ivan]

DSL is hooked up to eth0. The EQ winXP box ( 192.168.0.1) is hooked up to eth1, which I tell seqto listen to. As I mention it does catch some of the EQ trafic. It does detect my zoneing as well. Below is some of the terminal chatter, may be it'll help ( I masked some info with '*' )


ShowEQ 5.0.0.13, released under the GPL.
SINS 0.5, released under the GPL.
All ShowEQ source code is Copyright (C) 2000-2004 by the respective ShowEQ Developers
ShowEQ comes with NO WARRANTY.

You may redistribute copies of ShowEQ under the terms of
The GNU General Public License.
See: http://www.gnu.org/copyleft/gpl.html for more details...

For updates and information, please visit http://seq.sourceforge.net/
ShowEQ 5.0.0.13, Built from 'main.cpp' on Sep 11 2004 at 07:20:10
CVS: @(#) $Id: main.cpp,v 1.33.6.3 2004/01/16 20:22:10 dohpaz Exp $ $Name: pre_5_0_beta $
Using GCC version: 3.3.2
Using glibc version: 2.3
Using Qt version: 3.3.2
Using headers from linux version: 2.4.21
Using EQItemDB: @(#) $Id: itemdb.cpp,v 1.10.6.1 2003/12/07 06:30:43 dohpaz Exp $ $Name: pre_5_0_beta $
Using GDBM: This is GDBM version 1.8.0, as of May 19, 1999.
Running on Linux release 2.4.26-gentoo-r6 for processor i686

Using config file '/root/.showeq/showeq.xml'
Loaded preferences file: /usr/local/share/showeq/seqdef.xml!
Loaded preferences file: /root/.showeq/showeq.xml!
Info: Listening for client: 192.168.0.1
Info: Initializing Packet Capture Thread:
Info: Filtering packets on device eth1, IP host 192.168.0.1
Info: Loaded 5665 spells from '/usr/local/share/showeq/spells_us.txt' maxSpell=0x16a5
Warning: GuildMgr: Could not load guildsfile, /root/.showeq/tmp/guilds2.dat
Debug: ItemDB: Disabled
Info: Loading Filters from '/showeq'
Info: Loading Zone Filter File: /showeq
Info: Loading Zone Filter File: /showeq
Info: Categories Reloaded
Info: No Map found for zone 'unknown'!
Info: Checked for all variants of 'unknown.map', 'unknown.txt', and 'unknown_1.txt'
Info: in directories '/root/.showeq/maps' and '/usr/local/share/showeq/maps'!
Info: Loaded 9768 message strings from '/usr/local/share/showeq/eqstr_us.txt' maxFormat=45222
Warning: INVALID PACKET: Bad CRC32 [192.168.0.1:4099 ->*.*.*.*:15900] seq 0000 len 14 crc32 (00000200 != 236ae645)
Warning: INVALID PACKET: Bad CRC32 [192.168.0.1:4099 ->*.*.*.*: :15900] seq 0400 len 50 crc32 (9eaa2359 != 9d3d509f)
Warning: INVALID PACKET: Bad CRC32 [192.168.0.1:4099 -> *.*.*.*:15900] seq 0001 len 42 crc32 (9eaa1505 != b41ca186)
Warning: INVALID PACKET: Bad CRC32 [192.168.0.1:4099 -> *.*.*.*:15900] seq 0400 len 46 crc32 (00009b5e != d4777f74)




Zone: EntryCode: Client
Info: Your player's id is ***
Spell: You begin casting Knowledge Gate. Current Target is (0)
Info: SpellItem 'Knowledge Gate' finished.
Zone: ChangeCode: Client, Zone: poknowledge
Zone: EntryCode: Client
Info: Your player's id is ****
Spell: You begin casting Fay Gate. Current Target is (0)
Info: SpellItem 'Fay Gate' finished.
Zone: ChangeCode: Client, Zone: gfaydark
Zone: EntryCode: Client
Info: Your player's id is ***
Zone: ChangeCode: Client, Zone: lfaydark
Zone: EntryCode: Client
Info: Your player's id is ****
Zone: ChangeCode: Client, Zone: gfaydark
Zone: EntryCode: Client
Info: Your player's id is ***

[BlueAdept]

are you running it as a user or as root? If you are using it as a user, did you su first before running showeq?

If you are running with root privileges, it could be a bad network card or possibly that the card cant go into promiscuous mode properly.

[ivan]

Yes, I'm running showeq as a root.

Does the fact that all network traffic goes through linux gateway box anyway and that showeq does see some EQ activity of my char (zoneing, moving, spell casting, tells) can point to what the problem is? -Ivan.

[S_B_R]

I'm going out on a limb here, but I bet HomePNA suffers similar problems encountered with PPPoE. Try sniffing the external interface (eth0) for your external IP address.

[BlueAdept]

Im an idiot, I totally missed the first post and went right down to the problem without really reading the first post about the homePNA.

I bet S_B_R is right that the homepna encapulates packets like PPoE does.

[ivan]

Well, eth0 is just a trasport layer for pppoe for DSL, and showeq refuses ppp0 device. In short, it didn't work at all, no EQ client detected.

A question remains, if showeq detects zone name in console output correctly,
why it still puts out "Zone(unknown)" in the GUI for my setup? Is something wrong with decoding that I need to fix?-Ivan.

[Cryonic]

it can't catch traffic going both ways if eth0 is pppoe and eth1 is homePNA as those are different from standard ethernet NICs for data encapsulation...

Either move the pppoe stuff further upstream (e.g. to another box) or find some other way to wire your EQ box through your Linux box (e.g. standard Cat5e/6 Ethernet).

[ivan]

You mean the only trafic showeq sees now is from EQclient to the server? -Ivan.

[S_B_R]

I wonder if any of the dev types would think about adding iptables ulog (http://gnumonks.org/projects/ulogd) support. I've never used it personally but it came up in a security class I was in a while back. Basically, the way I understand it, you create a IPTables rule using ulog, and ulog will copy all the specified packets into userspace via the ulogd daemon. They have a lib for getting the packets from the daemon.

I think this would solve this encapsulation problem... Anyone have any experience with ulog? Like I said I've never used it, all I know is what was mention as an aside.

although, it might just copy the encapsulated packets..... I dunno....

[S_B_R]

You mean the only trafic showeq sees now is from EQclient to the server? -Ivan.

Actually it sees all the packets. But the encapsulation causes the data within each packet to be garbled.