Here i will make a simple explanation about -: Timestamp. ( i will use 10Meso Drop Packet as my example)
What is TIMESTAMPPP!!!???
it something like the time you log the packet, if you keep spam the packet without changing the timestamp will causes D/C !!!!
( Sorry I'm don't really know how to explain it , that why i say i make a simple explanation :P)
How can we avoid D/C from it?
Use ** to replace Timestamp.
Why we should use ** to replace the Timestamp??
** will provide Random Bytes , we mostly use it to Replace the Timestamp (so the timestamp will keep changing , then you never get D/C easily by spamming Packet)
How can we know the packet got Timestamp a not?
It is easy. Just log the packet twice or thrice & see the different between the 1st packet & 2nd packet.
Example :-
Logging 10Meso Drop Packet
1. Here is the 1st Packet i logged : 91 00 AC 7D 22 00 0A 00 00 00
![[IMG]](http://s9.postimage.org/8r6intnin/Packet_sniff_tutorial_1.png)
2. Here is the 2nd Packet i logged : 91 00 78 3D 2D 00 0A 00 00 00
![[IMG]](http://s12.postimage.org/511qmf3fh/Packet_sniff_tutorial_2.png)
3. Can you see what is the different between :-
1st Packet : 91 00 AC 7D 22 00 0A 00 00 00
2nd Packet : 91 00 78 3D 2D 00 0A 00 00 00
4. Figured it right?
The different between it is :-
1st Packet : 91 00 AC 7D 22 0000 0A 00 00 00
2nd Packet : 91 00 78 3D 2D 00 0A 00 00 00
5. The Bytes with Purple Colour is TIMESTAMP!!!!
WHY THE 00 IS A TIMESTAMP TOO??
Cause Timestamp MUST BE 4Bytes. (Timestamp is Dword mean it must be 4Bytes like this => ** ** ** ** )
Example:
AC 7D 22 00 =this call 4Bytes
AC 7D 22 = this called 3Bytes
AC 7D = This called 2Bytes
AC = This called 1Bytes
6. Now we should replace it with **
7. LIKE THIS > 91 00 ** ** ** ** 0A 00 00 00
8. Now you can spam DROP 10MESOS Packet !!!!
NOW I WILL EXPLAIN THE 10Mesos Drop Packet.
91 00 ** ** ** ** 0A 00 00 00
Packet Structure :
[Word][Dword][Dword]
91 00 - Packet Header
** ** ** ** - Timestamp
0A 00 00 00 - Amount Of Money You Droped In HEXDECIMAL!!!
Example :
10 in Hexdecimal is 0A
If don't know what i mean , See this
![[IMG]](http://s11.postimage.org/o06yrbb1v/untitled.png)
(THE REST I DON'T KNOW WTH IS THAT F3)
NOTE:
IF YOU SPAM TOO FAST WILL GET D/C TOO. =3=
PREPARE BY ME (x3ProOnyx) :)
Thanks to TheFox. (He correct me :P)
Thanks to TheFox. (He correct me :P)
P/S : My English Not Really Good.
Packet Logger i prefer:
1. MapleShark [NOT WORKING FOR Wi-Fi User]
2. 21st Century PE (When logging Send Packet will causes d/c) [can found from this forum]
