Possible Duplicate:
TCP IP: Is it possible to read what TCP/UDP data a program is sending remotely?
I want to read a packet I’ve captured with Wireshark. The packet contains data, 133 bytes in length. It is not encrypted. Yet, the HEX form of the data decodes in Wireshark as a string of mostly unintelligible gibberish.
Is there any way to read this data in human-readable form? I’m just trying to figure out how a game client works, that’s all.
You would have to know the format to convert it into human-readable form. It’s like a book written in Chinese — if you don’t know Chinese, it’s going to look like unintelligible gibberish. But it makes perfect sense to anyone who does know Chinese.
Figuring out the format from just the data is as difficult as learning Chinese just from a book written in Chinese. It can be done, but it’s a highly-specialized art.
For example, you can try not moving and seeing which numbers stay the same. Then move, and see which numbers change. That might clue you in to where the position information is. However, the entire packet might be scrambled with a pseudo-random sequence, in which case, it will be nearly impossible without reverse-engineering the software.