FFXI Protocol

[Zeith]

I've seen the help article relating to the ports used by FFXI, but I'm not happy with just opening up a 15.5k block of TCP ports if I don't have to. I was wondering, has anyone done any real analysis on the protocol using tcpdump or snort or something of that variety?

[Kohan]

This is the most pinpoint information I'm aware of, personally:

Viewing Single Post From: FFXI Optimization: Graphics & Bandwidth

To the best of my knowledge, you cannot narrow it down any more than this. If you do, you'll get occasional disconnects when FFXI uses a random port for transmitting information.

[Zeith]

This is the most pinpoint information I'm aware of, personally...

Awesome, that gives me a good starting point. I'm hoping in the near future to set up a router with tcpdump so that I can hopefully enumerate at the very least a little bit of the network structure on the server side, and maybe even take a closer look into the protocol itself, though I'm pretty sure it'll be encrypted.

As an aside, has anyone made a post of all the registry keys used by FFXI? If not, I may do that myself.

[Zeith]

Belay my last, I see that further in the thread linked above some details regarding the registry were posted. It's still not as complete as I'd like, so I think I'll still do a full diff to catch all the undocumented changes, but again, a good starting point.

[Kohan]

If you do provide more information, do you care if I add it to that guide? I always credit my sources, and would like to make it a bit more comprehensive. Haven't had a lot of time to add to it lately, though.