Posted March 18, 200421 yr ok so i got ethereal and i know how to capture and everything but i dont know where to look for the rcon and when i go to filter and type rcon nothing works. can someone make a read me file on how exactly to do everything or just tell me what to do?
March 18, 200421 yr ethereal is a packet monitoring program...it caputres and stores all packets between your comp and whatever...so if you read the packets that came from the server IP, eventually you'll find one containing changes in logfile. THAT is where rcon_password is stored. Understand what it is you're doing, and the rest becomes quite easy.
March 19, 200421 yr you fucking look at them and comprehend the words? i was at barnes and nobles tonight looking at computer books for something useful, i came across a pretty thick book on ethereal ...apparently theres alot more you can od with it than sniff packets. it'll teach you all you need to know to get rcon pass plus more . so if you're not lazy or too stupid get it . downside is it cost 50 dollars , steal it or something.
March 19, 200421 yr Author ugh there is no rcon at all in any of em. becuz they all say some thing like: @q.9.... .u....m8 2.138.24 7.4:1337 . #cdm.c lan : cu stom map s.air_fi ght2.cst rike.cou nter-str ike.../d l..http://www.c ounter-s strike.ne t.......... .... how am i suppose to find the passwrod out of that^^^
March 20, 200421 yr by knowing what the fuck you are doing, and what you're looking for. that packet was giving you some of the motd information...which means it was one of the first few packets related to your joining the server.
March 20, 200421 yr Author yea but a lot of the packets say that. i know what i'm doing i think. tell me if i'm doing anyting wrong. i run capture..then go into server..rage until i see a few ppl joined so then i know i will have the log..end game and capture..filter so i only get the packets from the server..look thru the packets. i tried the ctrl+f and typed rcon but it doesnt have anyhting ever do i need a certin setting cuz i tryed them all?? a lil help plz?
March 21, 200421 yr the log will only contain rcon password if someone logs in to rcon (changing the status, which makes it nesseccary for the logfile to change that line), otherwise, it will usually not transmit that info, or if it does, it shows nothing but "rcon_password <password>", depending on the server settings. Also, doesn't matter what filters are on...if you run it with NO filters, you simply have more packets you have to go through...it's p[ossible to filter it so you only capture packets from a particular source, or only store packets conatining a particular line (like "rcon"), but it's a pain in the ass to set up the filters properly. For someone who doesn't know exactly what they're doing, it's probably easier, and more effective, to run it unfilterewd, and just read every damned packet from the server until they find the right one(s).
