Guild Wars

From Protocolinfo

Guild Wars is a MMORPG powered by ArenaNet and NCSoft. See the official website at http://www.guildwars.com

Contents 1 Identification 1.1 Ports and hosts 1.2 l7-filter 2 See also

[edit] Identification

[edit] Ports and hosts

• [OUT] TCP 6112: Game updates, background downloading and game play. Usually connects to network block: 216.107.240.0/20 (Whois 216.107.240.020).

[edit] l7-filter

Guild Wars uses encrypted data on tcp/6112 and may be impossible to match by content. An experimental filter has been written to match Guild Wars packets:

guildwars.pat:
guildwars
^[\x04\x05]\x0c.i\x01

More testing is still required to determine the effectiveness of this pattern.

[edit] See also

• PlayNC by NCSoft Support